"A request to disable the Desktop Window Manager was made by process (LogMeIn Rescue Applet)"

allanc

Well-Known Member
Reaction score
386
Location
Toronto, Ontario, Canada
I am not a LogMeIn user and I found the following error message in the Windows 7 Pro sp1 Windows Application Event Log:
'A request to disable the Desktop Window Manager was made by process (LogMeIn Rescue Applet)'.

Is this a normal event to find in the log because I have done some research and cannot really anything?
Or, does it indicate that someone was connected via LogMeIn and tried to lock the user out while the remote was infecting the computer, etc?

The reason that I am asking is that a client called and said that there was a pop-up on their monitor that said they were infected and to call a phone #.
No mention of encryption in any way.
The client called the number and the scam artist wanted about $400.
The client refused.
She then called me and when I asked her if she let the scammer connect to her computer she said 'No'.
I am curious if she is telling me the truth.
The time in the log is more or less consistent with the time that she was talking to the scam artist.
 
DWM is used for rendering, transparency and the like (Aero). Many remote tools, Instant Housecall included, disable it upon connection and re-enable after disconnect. I can't speak to whether LMI is one of them, but there's a good chance that's what you're seeing.. I believe LMI installs a mirror driver. If you check device manager you'll probably see it there if it was.
 
All of the remote connection tools I use automatically dumb down the desktop environments when a connection is made. This happens in OS X as well.
 
Back
Top