Cat3's access the Internet thru rundll32.exe

Noid

Platinum Member
Sep 20, 2000
2,390
193
106
My post


Quote

--------------------------------------------------------------------------------
I also noticed that the Cat3's access the Internet thru rundll32.exe now. (wtf for I wonder?)
--------------------------------------------------------------------------------



------ I wasnt the only one wondering I guess ....

Tuesday, January 21, 2003

Internet Rumors that 'ATI Drivers Are Spy Ware' Are False - 4:04 pm EST - MrB
David over at Tom's Hardware Guide has worked with ATI and MS to find the cause of the accusations on ATI's control panel. Check out the original news post over at THG.

During the past week, discussions have abounded on Internet sites that suggest ATI's Catalyst Driver package has a type of "spy ware" embedded into it. In the last day or two, suggestions from Microsoft appear to point to a root cause for these discussions. The cause, according to Microsoft (which ATI is working to verify and/or dispel), suggests that when a certain flag value is set for one of the DirectX interfaces, Windows will try to download updated Windows Quality Hardware Labs (WHQL) certificates. ATI is actively analyzing its code to determine the validity of this claim.


Microsoft has pointed out that when the activity of updating WHQL certificates takes place, no information is retrieved from the user's system. (We should hope so, considering that users abhor spy ware, and 'Gator,' in particular, comes to mind....)

The hypothesis is that something in the ATI driver
triggers an action similar to what would happen if 'DXDiag' is set to "Check for WHQL Signatures." 'DXDiag Help' has a high-level description of what happens in that case. Here is an example:

"Checking for WHQL digital signatures:

When you verify that your drivers are digitally signed by the Microsoft Windows Hardware Quality Labs (WHQL), the DirectX Diagnostic Tool may try to connect to the Internet to download new WHQL certificates. During this process, no information is retrieved from your system. [emphasis is ours]. The tool will ask you for permission to connect to the Internet the first time you run it. This will only be asked once. To change your answer, go to the System page and select or clear Check for WHQL digital signatures.

This can also be changed by typing the following at the command prompt:

dxdiag [/whqln] [/whqlff]

In this command, /whqln allows the DirectX Diagnostic Tool to check for WHQL digital signatures, and /whqlff does not allow DirectX Diagnostic Tool to check for WHQL digital signatures."

ATI says they are continuing to seek the source of the potential problem. At this time, we do not believe the rumors alleging that ATI's drivers contain 'spy ware' bear any validity. When we have more information, we will report it here.


Rage3d article


The weird smiles are ': + o' together