Windows (including Vista and XP) process and DLL library
On your computer, tens of invisible (hidden) processes run silently in the background. Some consumes system resources, radically slowing your PC.
Other useless processes contains spyware and Trojans - at least violating your privacy. This process and DLL library is a free grat resource for
anyone who wants to know the exact purpose of every process and DLL running on the computer.
The very complete listing of Windows
processes and DLLs commonly found on Windows systems, their ratings, descriptions and purpose.
winbeta.org -
10.09.2007Rafael's at it Again
As a lot of people are aware, Rafael from Within Windows has been finding and exposing un-released Windows 7 features, most notably the "Superbar"
and Desktop Slideshows.
He has now created a full unlocking tool called "Blue Badge" that will unlock the following features:
- The Superbar
- Gestures and Panning (for use on touch screens)
- Desktop Slideshows
Please note two things:
1. This application does NOT back up any of the files it patches, so to be safe, you will need to back up these files:
WindowsExplorer.exe
WindowsSystem32wisptis.exe
WindowsSystem32ieframe.dll
WindowsSystem32shell32.dll
WindowsSystem32stobject.dll
WindowsSystem32TabletPC.cpl
WindowsSystem32themecpl.dll
WindowsSystem32themeui.dll
WindowsSystem32powercfg.cpl
-----------
2. This application IS compatible
with systems currently running the superbar who want to extend their desktop to allow the three other features.
jcxp.net -
10.11.2008HD Audio patch for cursor patch
Yes, a patch for a patch: When
you start a computer that is
running Microsoft Windows XP
with Service Pack 2, the
Realtek HD Audio Control Panel
may not start. Additionally,
you may receive the following
error message:
"Rthdcpl.exe -
Illegal System DLL Relocation
The
system DLL user32.dll was
relocated in memory. The
application will not run
properly. The relocation
occurred because the DLL
C:WindowsSystem32Hhctrl.
ocx occupied an address range
reserved for Windows system
DLLs. The vendor supplying the
DLL should be contacted for a
new DLL.
This problem occurs when the
Realtek HD Audio Control Panel
(Rthdcpl.exe) by Realtek
Semiconductor Corporation is
installed."
This problem may
occur after you install
security update 925902
(MS07-017) and security update
928843 (MS07-008). The
Hhctrl.ocx file that is
included in security update
928843 and the User32.dll file
that is included in security
update 925902 have conflicting
base addresses. This problem
occurs if the program loads
the Hhctrl.ocx file before it
loads the User32.dll file.
jcxp.net -
04.04.2007Symantec false positive cripples thousands of Chinese PCs
A signature update to
Symantec's anti-virus
software crippled thousands of
Chinese PCs Friday when the
security software took two
critical Windows .dll files
for malware.
According to numerous blog
entries from Chinese computer
users, a virus signature
database seeded yesterday
mistook two system files of a
Chinese edition of Windows XP
SP2 as a Trojan horse which
Symantec dubs
"Backdoor.Haxdoor." The
anti-virus software -- Norton
AntiVirus, for example, or the
anti-virus component of the
Norton 360 or Norton Internet
Security suites -- then
quarantined the netapi32.dll
and lsasrv.dll files.
"With these files
removed, Windows XP will no
longer start up, and even the
system Safe Mode no longer
functions," said one user
writing to the
alt.comp.anti-virus newsgroup
this morning...
winbeta.org -
19.05.2007UxStyle beta now available
Rafael Rivera from Within Windows has announced that UxStyle Core beta now available for download. To give us some information on what UxStyle Core
is, we'll start with a little history. Back in the Windows XP days, users were able to modify a system file called Uxtheme.dll and create custom
.msstyle files, thus creating their own desktop themes to replace the default "Luna" theme. However, over time, patching went from just one file
to multiple files and repatching was necessary when Microsoft would update the Uxtheme.dll files.
Read full story.....
neowin.net -
22.06.2009Norton Antivirus targets Windows files on Chinese computers
Chinese PCs running Symantec
antivirus software have been
incapacitated by a faulty
virus signature update
delivered automatically to
users on Friday about 1:00
a.m. Beijing time. Symantec's
antivirus scanning engine
mistook two critical system
files (netapi32.dll and
lsasrv.dll) of the Simplified
Chinese edition of Windows XP
Service Pack 2 for a Trojan
horse, then falsely
quarantined them, which in
turn crippled Windows. If an
affected PC was rebooted,
Windows failed on start-up and
showed only a blue screen.
According to China's
state-sponsored Xinhau News
Agency the number of PCs were
in the millions while other
reports cited numbers as low
as 7,000 affected PCs;
crippled systems were said to
be concentrated in Beijing,
Shanghai and Guangzhou
province.
Symantec
re-released a revised
signature update around 2:30
p.m. Friday, Beijing time, but
the fix was too late for any
PC that had been rebooted in
the intervening 13.5 hours.
Those now-worthless systems
needed new copies of the two
.dll files restored to the
hard drive's
"windowssystem32" directory.
Symantec posted a support
document on its
Chinese-language Web site that
outlined how to use the
Windows XP installation CD to
start the PC and use the
Recovery Console to replace
the quarantined netapi32.dll
and lsasrv.dll with new
copies. There was no notice of
the update problem or the
solution on the site's front
page, or on the company's
English global home page. Many
PC makers now forgo
installation or restore CDs
meaning users would have to
obtain copies of the two .dll
files from another working PC.
neowin.net -
21.05.2007Where the Heck's the Bug Reporter?
The whole point of a beta operating system is to test it and report flaws, right? (Well at least that's what Microsoft thinks...
jcxp.net -
06.05.2009IE7 Beta 2 Preview Open to DoS
Attack
Security researcher Tom Ferris
says he has discovered a
security vulnerability in the
Beta 2 Preview release of
Internet Explorer 7. The bug
lies in the urlmon.dll file
and causes the browser to
crash when it encounters a URL
with the "file://"
protocol followed by a long
string of dashes...
betanews.com -
01.02.2006Issues installing updates after repairing XP
We received reports today that some Windows XP customers havent been able to install updates from Windows Update/Microsoft Update with the latest
version of the Windows Update client. We are only seeing this issue when users have performed a repair on their Windows XP installation. I wanted
to take a minute and let folks know what we know about this right now and what were doing about it.
After getting the reports,
we began actively reproducing and investigating the issue. We have identified the root cause and the steps to resolve this issue.
Heres what we found: when an XP repair CD is used, it replaces all system files (including Windows Update) on your machine with older versions of
those files and restores the registry. However, the latest version of Windows Update includes wups2.dll that was not originally present in Windows XP.
Therefore, after the repair install of the OS, wups2.dll remains on the system but its registry entries are missing. This mismatch causes updates to
fail installation.
If you experience this issue, you can contact customer service using the contact info at
http://support.microsoft.com/security. Additionally, a KB article describing the
steps to resolve this issue will be available soon. I will update this blog with a link to the KB article when it is available. In the meantime, here
are the steps included in the KB:
1. Stop the Automatic Updates service. To do this, follow these steps:
a. Click
Start, click Run, type cmd, and then click OK.
b. At the command prompt, type the following commands, and then press ENTER after each
command:
2. Register the file that is used by Windows Update and Microsoft Update. To do
this, follow these steps:
a. Click Start, click Run, type cmd, and then click OK.
b. At the command prompt, type the following
command, press ENTER after the command, and then click OK when you receive a verification message:
regsvr32 %windir%system32wups2.dll
Note: for x64 machines regsvr32 %windir%syswow64wups2.dll
3. Start the Automatic Updates service. To do this, follow these
steps:
a. Click Start, click Run, type cmd, and then click OK.
b. At the command prompt, type the following commands, and then press
ENTER after each command:
winbeta.org -
28.09.2007Trend Micro Warns Of Server Antivirus Flaws
Trend Micro has patched a pair
of remote code execution
vulnerabilities in
ServerProtect, its
server-based antivirus
software, that could open the
door for attackers to gain
control over affected
machines.
Both are
stack-based buffer overflow
bugs affecting ServerProtect
For Windows version 5.58,
Trend Micro said in a Tuesday
advisory.
The first
flaw stems from the failure of
the "TmRpcSrv.dll" library
to check user input before
copying it to memory, Symantec
said in a Deepsight Threat
Management System advisory.
The bug affects the
"EarthAgent.exe" daemon on
TCP port 3628, and an attacker
could exploit it by sending
malicious code to a server
with ServerProtect installed,
according to Symantec.
The second
vulnerability exists in the
"AgRpcCln.dll" library and
can be used to trigger a
malicious RPC request to the
"SpntSvc.exe" service, which
is on TCP port 5168, Symantec
said.
neowin.net -
09.05.2007Shipping Seven: The Registry
Could the registry be replaced? Sure, in software, pretty much any change is possible.
In practice though...If you were to
replace the registry, you would end up with something that pretty much looks exactly like the registry.
Go take a look at all the
programs on your hard disk that use the registry APIs in
in advapi32.dll...
winbeta.org - 16.01.2008
Process Explorer v11.0 Available
Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles
and DLLs processes have opened or loaded.
The Process Explorer display consists of two sub-windows. The top window always shows a
list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends
on the mode that Process Explorer is in: if it is in handle mode youll see the handles that the process selected in the top window has opened; if
Process Explorer is in DLL mode youll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search
capability that will quickly show you which processes have particular handles opened or DLLs loaded.
Changelog:
Were
excited to announce the release of Process Explorer v11.0, which introduces major startup and UI performance improvements, new columns and process
details for Vista I/O priorities, memory priorities, and Address Space Layout Randomization (ASLR) DLL and executable attributes, an enhanced security
properties page that shows raw SID values, fully asynchronous thread symbol resolution, integration with UAC, and more!
winbeta.org - 05.09.2007
Windows XP SP2 IE6 Workaround for security update 942615
Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require
that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
To work around this problem, follow these steps:
| 1. | Click
Start, click Run, type regedit, and then click OK. |
| 2. | Locate and then click the following registry subkey: HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet
ExplorerMainFeatureControl |
| 3. | On the Edit menu,
point to New, and then click Key. |
| 4. | Type
FEATURE_PROTECT_DECOMPRESSION_FILTER_FROM_ABORT_KB942367, and then press ENTER. |
| 5. | Right-click FEATURE_PROTECT_DECOMPRESSION_FILTER_FROM_ABORT_KB942367, point to
New, and then click DWORD Value. |
| 6. | Type
an asterisk (*), and then press ENTER.
Note The asterisk (*) represents any process name that uses the Urlmon.dll file. If you want to make
this change for an individual application that uses the Urlmon.dll file, use the name of that application instead of the asterisk. For example, use
Appname.exe. |
| 7. | Right-click the asterisk, and then click Modify. |
| 8. | In the Value data box, type 1, and then click OK. |
| 9. | Exit Registry
Editor. |
winbeta.org - 20.12.2007
Patch to a patch of a patch needs patching
In the latest incident of a now-chronic problem that has been bugging Microsoft all year, a recent security patch now causes IE6 to crash in Windows
XP...again.
In a classic Tim Conway comedy sketch, he plays a corpse being prepared for a funeral by mortician Harvey Korman. But
one limb of Conway's body simply insists on sticking up in the air, and whenever Korman finally retracts it, another one pops up elsewhere. This
morning, Microsoft must know what it was like to have been one of Carol Burnett's regulars, as the Internet Explorer team admitted that a chronic
problem that was supposed to have been cumulatively updated by last Patch Tuesday's round of updates, causes a new problem: Internet Explorer 6 will
crash on systems running Windows XP Service Pack 2.
jcxp.net - 20.12.2007
Microsoft Patch Causes Problems with Programs
Microsoft has issued a hotfix
for users of Windows XP SP2
experiencing problems with
third-party programs.
Last Tuesday's
out-of-cycle MS07-017 update
was Microsoft's answer to a
number of vulnerabilities,
including the Windows ANI bug.
But with those fixes
apparently caused problems for
users of ElsterFormular, a
German tax calculator; the
Realtek HD Audio Control
Panel; TUGZip, a freeware
archiving tool; and CD-Tag.
When the
update was first released the
week of April 2, Microsoft
noted the problem with Realtek
HD Audio Control Panel and
published a hotfix
simultaneously with MS07-017
to help users, according to a
blog post by Christopher Budd,
program manager at Microsoft
Security Response Center.
jcxp.net - 10.04.2007
Condolences to Benjamin Lucas' Family
With great sorrow, we express
our condolences to the family
of Benjamin Lucas (also known
as Utakz). Utakz was a
talented graphics designer,
software architect, and
software programmer. He was
also an important member of
the techno-enthusiast
community, who was passionate
about technology and
journalism.
We thank Benjamin for his
relentless dedication and
enthusiasm that he injected
into the world of technology
blogging and
journalism.
jcxp.net - 21.01.2007
Microsoft warns of serious IE exploit discovered
A very critical security vulnerability has been discovered without a fix for it yet. The exploit can hijack a computer remotely by the victim simply
visiting a compromised web site. The attack allows hackers to exploit a hole into the victims computer through Microsoft Video ActiveX Control. The
"zero day" vulnerability affects only Internet Explorer users through compromised web sites through part of its software used to play videos. The
exploit can only attack users running Windows XP and Windows Server 2003 within the msvidctl.dll file that hosts this ActiveX Control. Microsoft
recommends removing support for this ActiveX Control within Internet Explorer.
Read full story.....
neowin.net - 07.07.2009
Microsoft: All versions of IE have critical new bug
Microsoft has confirmed that the unpatched bug in Internet Explorer 7 (IE7) that hackers are now exploiting also exists in older versions of the
browser, including the still-widely-used IE6. It adds IE6 and IE8 Beta 2 to the list and recommends disabling the Oledb32.dll to stay safe. A Danish
security researcher added that Microsoft's original countermeasure advice was insufficient and recommended that users take one of the new steps
the company spelled out. In a revised security advisory, Microsoft said research confirmed that the bug is within all its browsers, including those
it currently supports -- IE5.01, IE6 and IE7 -- as well as IE8 Beta 2, a preview version that the company doesn't support through normal channels.
Read full story.....
neowin.net - 13.12.2008
The $8400 XBOX, Free Shipping Included
winbeta.org - 05.10.2007
Microsoft AV Scan Engine Updating Issue
Microsoft is aware of an issue with the Microsoft AV engine not updating on some installations of Antigen and Forefront Server Security products. Not
all installations of the products are experiencing this issue, however all products may be affected.
The issue arose because the
aveMicrosoft.dll in one of the Microsoft AV engine updates was marked as hidden, causing all subsequent updates to fail when attempting to
delete this file. When that occurs, the engine is rolled back. This means that installations experiencing this problem are running with an outdated
version of the Microsoft AV engine.
winbeta.org - 29.08.2008
