[filename.info logo]
[cn psapi.dll][de psapi.dll][es psapi.dll][fr psapi.dll][gb psapi.dll][it psapi.dll][jp psapi.dll][kr psapi.dll][nl psapi.dll][pt psapi.dll][ru psapi.dll][us psapi.dll]
 

psapi.dll (5.1.2600.1106)

Contained in software

Name:Windows XP Home Edition, Deutsch
License:commercial
Information link:http://www.microsoft.com/windowsxp/

File details

Filepath:C:\WINDOWS\system32 \ psapi.dll
Filedate:2002-08-29 14:00:00
Version:5.1.2600.1106
Filesize:17.408 bytes

Checksum and file hashes

CRC32:65D8813F
MD5:800F 221C B28C 07C5 BB2F 5414 E0CC D869
SHA1:BC00 9AF9 2C68 CE00 2EAA 0193 7D9C 4AF0 E4FE 1CB7

Version resource information

CompanyName:Microsoft Corporation
FileDescription:Process Status Helper
FileOS:Windows NT, Windows 2000, Windows XP, Windows 2003
FileType:Dynamic Link Library (DLL)
FileVersion:5.1.2600.1106
InternalName:PSAPI
LegalCopyright:© Microsoft Corporation. All rights reserved.
OriginalFilename:PSAPI
ProductName:Microsoft® Windows® Operating System
ProductVersion:5.1.2600.1106

psapi.dll was found in the following malware reports:

PrettyPark.Worm Removal Tool

About PrettyPark.Worm Removal Tool
...This will extract the files Fixppark.com and Psapi.dll. NOTES:...
...Windows NT Both Fixppark.com and Psapi.dll are required for this tool to function properly on Windows NT....
...If you click Remove and you see the message "Missing psapi.dll error. Please make sure that psapi.dll...
...Remove, and see the message Missing psapi.dll error. Please make sure that psapi.dll...
...same directory as this tool. then make sure that Psapi.dll is in the same folder as Fixppark.com....
Source: http://securityresponse.symantec.com/avcenter/venc/data/fix.prettypark.html

W32.RemoteExplore

Technical details
...The infected file also carries a GZIP-compressed of Psapi.dll and a GZIP-compressed copy of the viral service module (IE403R.SYS) in its RCDATA...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.remoteexplore.html

W32.Dengue

Technical details
...The virus also pays attention to the Windows NT platform and uses Psapi.dll (if available). The virus injects its code into the Explorer.exe API, DefWindowProcA....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.dengue.html

W32.HLLW.Gaobot.JB

Removal instructions
...Error Starting Program The PSAPI.DLL file is linked to missing export NTDLL.DLL:NtCreateProfile...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.jb.html

Spyware.SpyAOL

Technical details
..."C:WINNTSystem32shfolder.dll"=0x2 "C:WINNTSystem32psapi.dll"=0x4 "C:WINNTSystem32scrrun.dll"=0x2...
......
Source: http://securityresponse.symantec.com/avcenter/venc/data/spyware.spyaol.html



Valid HTML 4.01!