Jump to content











Photo
- - - - -

rsaenh.dll


  • Please log in to reply
12 replies to this topic

#1 MedEvil

MedEvil

    Platinum Member

  • .script developer
  • 7771 posts

Posted 31 August 2007 - 05:41 PM

An increasing number of scripts come lately with rsaenh.dll.
This dll causes popup messages about unsigned drivers, during driver installations.

If you're a pure user, eighter use a different software or learn to live with the bug.
Or anoy the script developer to do the following. :loleverybody:

If you're a script developer, you can do something about it!
rsaenh.dll is by most apps not really needed for operations, but to create missing entries within PE.
Find those entries, create them by your script and throw rsaenh.dll out!

:w00t:

#2 Nuno Brito

Nuno Brito

    Platinum Member

  • .script developer
  • 10545 posts
  • Location:boot.wim
  • Interests:I'm just a quiet simple person with a very quiet simple life living one day at a time..
  •  
    European Union

Posted 31 August 2007 - 08:46 PM

smartFTP script was also depending on this file - will try it without this annoying file.. :loleverybody:

#3 Galapo

Galapo

    Platinum Member

  • .script developer
  • 3841 posts
  •  
    Australia

Posted 01 September 2007 - 01:37 AM

I just took up MedEvil's suggestion.

I found out which registry entries rsaenh.dll seemed to be creating.

Adding these lines
[codebox]Hive_Load,HKCU reg_add,0x3,"%reg%\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count","HRZR_EHACVQY:#$ppfvqy2#$p\Argjbex","00","00","00","00","06","00","00","00","60","D8","78","C3","89","EC","C7","01" reg_add,0x3,"%reg%\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count","HRZR_EHACVQY","00","00","00","00","09","00","00","00","60","D8","78","C3","89","EC","C7","01" reg_add,0x3,"T%reg%\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count","HRZR_EHACNGU","00","00","00","00","07","00","00","00","10","D2","97","C3","89","EC","C7","01" reg_add,0x3,"%reg%\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count","HRZR_EHACVQY:#$ppfvqy2#$p\Argjbex\CRArgjbex.yax","00","00","00","00","02","00","00","00","00","00","00","00","00","00","00","00" reg_add,0x3,"%reg%\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count","HRZR_EHACVQY:#$ppfvqy2#$p\Argjbex\SvyrMvyyn.yax","00","00","00","00","06","00","00","00","60","D8","78","C3","89","EC","C7","01" reg_add,0x3,"%reg%\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count","HRZR_EHACNGU:K:\Cebtenz Svyrf\SvyrMvyyn\SvyrMvyynCbegnoyr.rkr","00","00","00","00","06","00","00","00","10","D2","97","C3","89","EC","C7","01" Hive_Unload,HKCU[/codebox] to my FileZilla script meant that FileZilla no longer requires rsaenh.dll. Not having these lines and FileZilla requires rsaenh.dll. Can now do away with the file it seems. I haven't tested whether all the lines of registry entries is absolutely necessary or not. I don't even know what they are "doing".

Regards,
Galapo.

#4 Sherpya

Sherpya

    Member

  • Developer
  • 51 posts
  • Location:Italy
  •  
    Italy

Posted 17 September 2007 - 11:40 PM

what's the problem with this file?

#5 MedEvil

MedEvil

    Platinum Member

  • .script developer
  • 7771 posts

Posted 18 September 2007 - 12:39 AM

what's the problem with this file?

If the file is present on a PE, it causes the infamous "your driver is not signed" dialog to pop up.
Nobody has yet come up with a solution to this, except for not having the file in your PE. :loleverybody:
Have you?

:w00t:

#6 Nuno Brito

Nuno Brito

    Platinum Member

  • .script developer
  • 10545 posts
  • Location:boot.wim
  • Interests:I'm just a quiet simple person with a very quiet simple life living one day at a time..
  •  
    European Union

Posted 19 September 2007 - 11:35 PM

Thuun has sent an email refering this topic here:
http://www.msfn.org/...798#entry245798

It involves patching SFC_OS.DLL and more details can be found here:
http://www.msfn.org/...tml#entry161269

Good luck, really hope these informations help on your quest..


(and a big thanks to thuun)


#7 Galapo

Galapo

    Platinum Member

  • .script developer
  • 3841 posts
  •  
    Australia

Posted 20 September 2007 - 12:17 AM

Maybe see here, too: http://www.d--b.webp...everse04_en.htm

I haven't yet been able to test either of these options yet, and going away on holidays for a few days now...

But hopefully there's a working solution here.

Regards,
Galapo.

#8 MedEvil

MedEvil

    Platinum Member

  • .script developer
  • 7771 posts

Posted 20 September 2007 - 10:47 AM

Nuno, Galapo thanks for your tips, but the problem is solved for me (by throwing rsaenh out), until a program comes along, that really needs it to work, which we have at the moment none of.

:loleverybody:

#9 was_jaclaz

was_jaclaz

    Finder

  • Advanced user
  • 7100 posts
  • Location:Gone in the mist
  •  
    Italy

Posted 20 September 2007 - 12:02 PM

For the record, the method used here:
http://www.d--b.webp...everse04_en.htm
(at the time Windows 2K centered)

Was brought (by yours truly :loleverybody:) to the attention of Fred de Vorck:
http://www.vorck.com/remove-ie.html

Who, with the help of anonymous programmer, bettered it.

The method was then adopted by nlite and by HFSLIP.

But cannot say if it has any utility about "Driver signing policies".

jaclaz

#10 MedEvil

MedEvil

    Platinum Member

  • .script developer
  • 7771 posts

Posted 20 September 2007 - 12:53 PM

SFC, WFP have nothing to do with the problem.
rsaenh causes the driver signing dialog even if both are not present.

:loleverybody:

#11 pscEx

pscEx

    Platinum Member

  • Team Reboot
  • 12707 posts
  • Location:Korschenbroich, Germany
  • Interests:What somebody else cannot do.
  •  
    European Union

Posted 21 September 2007 - 09:51 AM

I think I solved the issue.

Have a look here.

Peter

#12 MedEvil

MedEvil

    Platinum Member

  • .script developer
  • 7771 posts

Posted 21 September 2007 - 10:17 AM

Great find Peter and even better that you made a script for it. :loleverybody:

Though this improvement has also a negative side.
Now rsaenh.dll can and will be used again to fix 'bad' scripts at boot time. :w00t:

:w00t:

btw. with the MD5Hash, to back up the driver signing on/off switch, it's now clear why rsaenh.dll caused the dialog even though it has absolutely nothing to do with the actual signing

#13 thunn

thunn

    Silver Member

  • .script developer
  • 531 posts
  • Location:Brooklyn, New York
  • Interests:computers<br />mechanics<br />distortion<br /><br />
  •  
    United States

Posted 21 September 2007 - 04:05 PM

I used regscanner which showed me no entries for rsaenh.dll, but then I search for the posted key's string and found everything..
..
I see Peter put together a new script for driver signing, awsome. Later tonight, I'll try some tests! :w00t: Thank's to all!!!!!!

--Edit--
well..
I'm not having any luck with this.
:loleverybody:

I'm testing the issue using opk tools from MS to stat networking on nativePE, which starts fine.

Always the prompt for the missing .cat file.. It's the VMWare / VBox driver in recent tests.
I've tried most of the posted suggestions and reg keys, including Peter's new script, (Yes Peter, those keys are system specific), but no 3rd party tools yet.. I'll be working on it this evening though as I have some more time tonight. Some more brainstorming on this would be great, I'll return later with more details of my attempts to solve this for all users. :w00t:

...
I tried with & without rsaenh.dll, always the popup when using a couple scripts.

..edit..
now I'm playing with this in PE
http://www.msfn.org/...gningPolicy.exe

Attached Thumbnails

  • ug.png





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users