Skip to main content

What is dpupdchk.exe

 

 

What is dpupdchk.exe and Why Is It Running?

 

You are no doubt reading this article because you are wondering what on earth that
dpupdchk.exe process is doing in your Task Manager window… there’s no description and
it just keeps coming back.
So what is it anyway?
In case you aren’t sure what we’re talking about, if you sort by “Image Name”
you might
see something similar to the screenshot below. And that’s what we’ll be explaining
to you today.

image

So What Is It Anyway?

This process is some type of automatic update checker from Microsoft IntelliPoint
(as far as we can tell), but here’s how we actually
diagnosed it…
First, if you are using Vista you can right-click on the process and choose to
Open File Location.




image
…which will open up the containing folder, so you can drill down into exactly what the file
is by looking at the properties. Unfortunately, this process just has zero
information
in the properties
 dialog…
shame on you, Microsoft!

image

Further investigation led me into the registry, and by using the
Process Monitor utility
from
Sysinternals I was able to determine that the process was querying a registry
key named “Intellipoint Pro Auto Update”…
a clear giveaway that this process has to do with updating of some type.

image

Then there’s also the fact that in the start menu is a shortcut using a similar icon that says
Check for Updates. It’s one of those special shortcuts that you can’t see the
target for…
one has to wonder why they bothered to
make
this so complicated.


image
Dear Microsoft: If you are reading this article, perhaps you might leave a comment and shed some light on what it’s really doing. Then you might want to start learning how to document things.

How Do I Get Rid of It?

Keep in mind that removing pieces of Microsoft software without fully understanding what
they are is probably a bad idea and shouldn’t be attempted by anybody 
under 
any 
circumstances ever, even slightly,
probably.
Now that the disclaimer is out of the way… here’s where we stand:
You can take
one of two routes to get rid of it:
  1. Uninstall IntelliPoint in Control Panel (losing extra mouse functionality)
  2. Replace the dpupdchk.exe file with a dummy file that does nothing.
A dummy file, you say? Whatever for?

The problem is that if you delete the dpupdchk.exe file, every single time you
open the
mouse panel you will get horrible errors. Since we like to avoid
horrible errors,
I’ve created a dummy executable that does nothing at all, which you can
replace thecurrent one
with.
First, browse down to the following folder (adjusting if necessary for your install path).
Code:


C:\Program Files\Microsoft IntelliPoint
Now rename the existing dpupdchk.exe file to something else
(using the handy Take Ownership script if necessary to gain access).

image[5]
Once you’ve renamed that file, replace it with this fake dpupdchk.exe file created by the
fine folks here at How-To Geek. It’s a blank executable that does nothing, but feel free to
scan it with at least 74 anti-virus engines if you’d like to make
sure.
And thus ends the tale of the phantom dpupdchk process. But what about svchost.exe, jusched.exe,
or dwm.exe? The journey continues!

Comments

Popular posts from this blog

Hacking via Cloning Site Using Kali Linux

Hacking via Cloning Site Using Kali Linux Hacking via Cloning Site Using Kali Linux  SET Attack Method : SET stands for Social Engineering Toolkist , primarily written by  David Kennedy . The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. SET was designed to be released with the  http://www.social-engineer.org  launch and has quickly became a standard tool in a penetration testers arsenal. The attacks built into the toolkit are designed to be targeted and focused attacks against a person or organization used during a penetration test. Actually this hacking method will works perfectly with DNS spoofing or Man in the Middle Attack method. Here in this tutorial I’m only writing how-to and step-by-step to perform the basic attack , but for the rest you can modified it with your own imagination. In this tutorial we will see how this attack methods can owned your com...

Defacing Sites via HTML Injections (XSS)

Defacing Sites via HTML Injections Defacing Sites via HTML Injections What Is HTML Injection: "HTML Injection" is called as the Virtual Defacement Technique and also known as the "XSS" Cross Site Scripting. It is a very common vulnerability found when searched for most of the domains. This kind of a Vulnerability allows an "Attacker" to Inject some code into the applications affected in order to bypass access to the "Website" or to Infect any particular Page in that "Website". HTML injections = Cross Site Scripting, It is a Security Vulnerability in most of the sites, that allows an Attacker to Inject HTML Code into the Web Pages that are viewed by other users. XSS Attacks are essentially code injection attacks into the various interpreters in the browser. These attacks can be carried out using HTML, JavaScript, VBScript, ActiveX, Flash and other clinet side Languages. Well crafted Malicious Code can even hep the ...

Hacking DNN Based Web Sites

Hacking DNN Based Web Sites Hacking DNN Based Web Sites Hacking DNN (Dot Net Nuke) CMS based websites is based on the Security Loop Hole in the CMS. For using that exploit we will see the few mentioned points which illustrates us on how to hack any live site based on Dot Net Nuke CMS. Vulnerability : This is the know Vulnerability in Dot Net Nuke (DNN) CMS. This allows aone user to Upload a File/Shell Remotely to hack that Site which is running on Dot Net Nuke CMS. The Link's for more Information regarding this Vulnerability is mentioned below -                                  http://www.exploit-db.com/exploits/12700/ Getting Started : Here we will use the Google Dork to trace the sites that are using DNN (Dot Net Nuke) CMS and are vulnerable to Remote File Upload. How To Do It : Here, I an mentioning the few points on how to Search for the existing Vulnerability in DNN. Let'...

Excellent tricks and techniques of Google Hacks

Frontpage.. very nice clean search results listing !! I magine with me that you can steal or know the password of any web site designed by "Frontpage". But the file containing the password might be encrypted; to decrypt the file download the program " john the ripper". To see results; just write in the ( http://www.google.com/ ) search engine the code: "# -FrontPage-" inurl:service.pwd ============================================== This searches the password for "Website Access Analyzer", a Japanese software that creates webstatistics. To see results; just write in the ( http://www.google.com/ ) search engine the code: "AutoCreate=TRUE password=*" ============================================== This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net. To see results; just write in the ( http://www.google.co...

Hacking via BackTrack using SET Attack Method

Hacking via BackTrack using SET Attack Method Hacking via BackTrack using SET Attack  1. Click on Applications, BackTrack, Exploit Tools, Social Engineering Tools, Social Engineering Toolkit then select set.