[filename.info logo]
[cn psapi.dll][de psapi.dll][es psapi.dll][fr psapi.dll][gb psapi.dll][it psapi.dll][jp psapi.dll][kr psapi.dll][nl psapi.dll][pt psapi.dll][ru psapi.dll][us psapi.dll]

psapi.dll (5.1.2600.1106)

Contained in software

Name:Windows XP Home Edition, Deutsch
Information link:http://www.microsoft.com/windowsxp/

File details

Filepath:C:\WINDOWS\system32 \ psapi.dll
Filedate:2002-08-29 14:00:00
Filesize:17.408 bytes

Checksum and file hashes

MD5:800F 221C B28C 07C5 BB2F 5414 E0CC D869
SHA1:BC00 9AF9 2C68 CE00 2EAA 0193 7D9C 4AF0 E4FE 1CB7

Version resource information

CompanyName:Microsoft Corporation
FileDescription:Process Status Helper
FileOS:Windows NT, Windows 2000, Windows XP, Windows 2003
FileType:Dynamic Link Library (DLL)
LegalCopyright:© Microsoft Corporation. All rights reserved.
ProductName:Microsoft® Windows® Operating System

psapi.dll was found in the following malware reports:

PrettyPark.Worm Removal Tool

About PrettyPark.Worm Removal Tool
...This will extract the files Fixppark.com and Psapi.dll. NOTES:...
...Windows NT Both Fixppark.com and Psapi.dll are required for this tool to function properly on Windows NT....
...If you click Remove and you see the message "Missing psapi.dll error. Please make sure that psapi.dll...
...Remove, and see the message Missing psapi.dll error. Please make sure that psapi.dll...
...same directory as this tool. then make sure that Psapi.dll is in the same folder as Fixppark.com....
Source: http://securityresponse.symantec.com/avcenter/venc/data/fix.prettypark.html


Technical details
...The infected file also carries a GZIP-compressed of Psapi.dll and a GZIP-compressed copy of the viral service module (IE403R.SYS) in its RCDATA...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.remoteexplore.html


Technical details
...The virus also pays attention to the Windows NT platform and uses Psapi.dll (if available). The virus injects its code into the Explorer.exe API, DefWindowProcA....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.dengue.html


Removal instructions
...Error Starting Program The PSAPI.DLL file is linked to missing export NTDLL.DLL:NtCreateProfile...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.jb.html


Technical details
..."C:WINNTSystem32shfolder.dll"=0x2 "C:WINNTSystem32psapi.dll"=0x4 "C:WINNTSystem32scrrun.dll"=0x2...
Source: http://securityresponse.symantec.com/avcenter/venc/data/spyware.spyaol.html

Valid HTML 4.01!