virus on server

[chrbb]

Just disconnecting my backup to go home when I noticed a virus alert on sophos console. Its mal/generic-a located in \programfiles\logmein\LMIinit.dll and system32\LMIinit.dll 000.bak now quarantined.

 

has anyone else had this and am I right in assuming it's a false alarm? If it is will Logmein still work if the .dll file is quarantined?

[somabc]

If it is Logmein, (and looks like it) then no it is not a virus and no Logmein will not work without it. Logmein could be classed as a 'risk' as it allows remote access and could be used for nefarious purposes.

[EduTech]

Yeah, If you have genuinely installed logmein then these are to do with the logmein application. they are safe and should not really be removed as logmein wont work without them.

 

Sophos will like is has pick them us as virus alert, as technically its giving you a remote session of some kind to the machine

 

I'm guessing you did install logmein on there?

 

James.

[chrbb]

Logmein is installed, but by the company that installed the server. If I restore the file thats in quarentine will it still work?

[EduTech]

Yes it should do, just put the dll's back where they were

[steve]

It might also be worth adding an exception for the file to prevent it being detected again.

[Sylv3r]

Logmein is installed, but by the company that installed the server. If I restore the file thats in quarentine will it still work?

 

I would think if you restored the file, it will probably be quarantined again on next scan. You will need to add exceptions either to the file or to the folder to make sure it ignores it.

[Michael]

Yes you definitely need to add an exception first, then restore the file(s).