RADDRV.DLL - Valid for a remote PC ????

RightGirl · Feb 6, 2007

I am on a remote PC in one city while our server is in another. In fact everyone in the company except me sits in the office with the server. Yesterday, IT had us log off for an hour. Then this morning, AOL security center announced that I had a file it wanted to delete: Raddrv.dll "remote admin tool" is the description.

c:\I386\raddrv.dll is where it resides.

I was going to delete it when it occured to me that perhaps this file was part of us having to log off of the server yesterday. [remote admin]

Any chance that happened? Or can I just delete it?
Linda
confused

chaslang · Feb 6, 2007

This file is known as Remote Administrator video hook driver. However it does not belong in the C:\i386 folder. That folder should be reserved for Mircrosoft official files for your Windows OS. The place where the program itself is normally install is C:\Program Files\Radmin\ and I would expect the DLL file to be in your system32 folder not the i386 folder.

This can be a valid program. See: http://www.radmin.com/solutions/corporate/networkinstallation.php and also http://www.famatech.com/support/forum/read.php?FID=19&TID=8710

However trojans also make use of this program to remotely access your PC. See the below for some examples:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FDELODER%2EA&VSect=T

http://www.sarc.com/avcenter/venc/data/pf/w32.remadmin.html

You should check to see if the file on your system is part of something used by your IT department. If not, then you may have an infection that needs to be cleaned. And it could well be that more people in the network are infected.

Log in or Sign up

RADDRV.DLL - Valid for a remote PC ????

RightGirl Private First Class

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Log in or Sign up

RADDRV.DLL - Valid for a remote PC ????

RightGirl Private First Class

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Useful Searches