Author: Roy Eassa
Date: 07:32:09 04/27/02
Go up one level in this thread
On April 27, 2002 at 10:30:23, Roy Eassa wrote: >On April 27, 2002 at 04:36:56, Jerry Jones wrote: > >>I use Dedicated System 2002, so I have no network enabled. > > >What is that? Google turns up nothing. > > >>Does Hiarcs 8 work on Windows without Mpr.dll or does it need this file ? > > >What is Mpr.dll? Why is it bad? Did a search on mpr.dll and found this: http://www.diamondcs.com.au/web/patches/enhancer.php3?patch=passlock Which includes this paragraph: Microsoft Windows installs with a file called MPR.DLL (MPR standing for Multiple Provider Route). While the functions of this DLL are generally very useful, there is one exported function that is not required and is of particular concern to the security-conscious. Existing only in Windows95/98/ME versions of mpr.dll (it was removed from Windows NT/2K for good reason), the name of this exported function is WNetEnumCachedPasswords. It is officially undocumented, but enough unofficial documentation has been created so that trojan authors can easily call this DLL from their own trojan - indeed, many popular trojans such as Sub7 have taken advantage of this API for a long time, and even the safe passdump.exe demo program that accompanies this patch uses this unofficial documentation to call the function.
This page took 0 seconds to execute
Last modified: Thu, 15 Apr 21 08:11:13 -0700
Current Computer Chess Club Forums at Talkchess. This site by Sean Mintz.