From: "Rich Gauszka" 


"Frank Haber"  wrote in message
news:44c93e42$1{at}w3.nls.net...
> Thanks, Rich.  VCPP 7, eh?  I'll look further.  Seems to be associated
> with various installs of Filemaker Win 7/8.  I'll nose around.
>
> (Everyone: The ones I'm seeing are both earlier and later, and FM
> compresses them in certain other dirs, so it's hard to know what's up.
> The only changes that worry me are the ones in %windir%\system32/)
>

some backdoor trojans have been known to install msvcr70.dll

http://www.sophos.com/security/analyses/trojbdooryl.html

Troj/Bdoor-YL is a backdoor Trojan.

Troj/Bdoor-YL includes an FTP server and IRC file transfer program as well
as a number of legitimate applications.

Troj/Bdoor-YL may install the following files:

cygcrypt-0.dll
cygwin1.dll
install.bat
install.exe
mdrctrl.dll
mss.ini
msvcr70.dll
msvcr80.dll
packs.txt
rundll32.dll
schedsvc32.dll
schedsvc32.exe
ServUCert.key
ServUDaemon.ini
ServUPerfCount.dll
ServUStartUpLog.txt
snmpapi.dll
spoolsv.exe
spoolsv32.exe
welcome.txt

--- BBBS/NT v4.01 Flag-5