False Positive? - dijpg.dll

[Pantscum]

Throws this DLL up as a RAT, as far as I can tell its
not, used to convert BMPs to JPG. Availble here
http://www.disoft.com/oss/dijpg.htm. Source code is
available there also.

I may be wrong....?

 

[John]

Check this: Rewindo Trojan Horse

 

[John]

http://www.sophos.com/virusinfo/analyses/trojrewindoa.html

 

[user]

You can see on the advanced tab that that file is clean,
it is probably used to convert BMP screen shots to JPG
for upload (by the trojan). Just because a trojan uses a
tool, it doesn't mean that that tool is malicious.

 

[John]

But that is why it was detected as a threat, not necessarily a true spy.