mfc45.dll in C++ Redistributable package

Re: XP SP3 and Vista SP2 and the file mfc45.dll Machines

Recently, Hitman Pro 3.5.8 121 Bld stopped download mfc45.dll to the cloud for inspection, as it did for a year under XP SP3.

My inspection of the property sheet for the file not revealed any info about it, except that it is 74 703 bytes and created on 09/21/2009.

Lowered numbered MFCxx.dll files show the detailed MS waited, including version info.

The mfc45.dll file is displayed, as I expect malware to appear.

However, he spent a lot of screens AV, including Viruscan.Jotti.org & VirusTotal, including the free avast, uptodate.

That an antivirus scanner indicates that it is a 'broken W32 file.

My Vista 32 bit SP2 machine has what seems to be the same file with 74 703 bytes, created 11/21/2010, a few months after, after that I started the machine.

A lot of Internet searches gave little info useful re: mfc45.dll, just many links to sites wishing to DL a scanner ActiveX to "clean the registry.

Seems to be 'drive-by' vectors infectious for me!

Why isn't easy to check a file Microsoft allegedly from a C++ package?

Why is there a list of the files that are included as well as their versions for each package for comparison?

Why are there not a simple tool to analyze and identify what C++ Redistributable packages are installed and their version numbers?

Why are they not C++ files in a separate folder under System32 for easy review?

What is a security requirement?

More importantly, how positively verify that my mfc45.dll, on each machine, is not malware?

Jack E Martinelli former MS MVP 2001-06 END

... Hitman has been download mfc45.dll to its cloud at least a year until a few weeks ago. Now, the download attempt fails.

I scanned the machine and the file mfc45.dll specifically with VirusTotal and Viruscan.Jotti.org and lots of other tools, including msert.exe, the Scanner of Ms. Nothing has ever reported a malicious software.

Then, I don't worry on that point, Jack (links in reference [1] in my previous answer notwithstanding).

As would be the case, there was a recent discussion on Hitman in a MVP Security mailing list. The general opinion was that he had done his time. And I think that someone said he had not been updated or supported for some time. YMMV.

Moving...

Yes, in response to your message in a previous discussion (which does NOT appear in your profile for a reason sheet any unfathomable) I said it would be OK to hide KB2416447 (MS10-070 for .NET 1.1 SP1) or KB2416472 (MS10-070 for .NET 4.0) under very certain & specificities.

I also said that I would usually NEVER give out that they do not need to install a critical security update.

Chances are you don't need .NET Framework 4.0 and it is installed only because you have installed an optional, a security update no end of June 2010 (probably KB982670).

Because the computer has been updated to Security KB2446708, .NET 4.0 must always be installed just so uninstall it and "stop the madness" (i.e., available UPDATES for .NET 4.0).

PS: Yes, attempt to analyze the update of the list in Add/Remove programs can be time consuming. At least, they are listed in descending (date) (as is the history of update Vista & Win7, but at least it is available).

Tags: Windows

Similar Questions

Maybe you are looking for