Forum Thread: Error identifying EPUWALcontrol.dll as unpatched

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
MacNala Error identifying EPUWALcontrol.dll as unpatched
Member 11th Jun, 2009 20:31
Ranking: 1
Posts: 25
User Since: 9th May, 2008
System Score: N/A
Location: UK
Last edited on 11th Jun, 2009 20:31

I have just run PSI 1.0.0.4 and it has detected an insecure program:
Installation Path
c:\WINDOWS\Downloaded Program Files\EPUWALcontrol.dll

This program does not exist on my computer.
What is wrong with the signature file or the search engine?

BigDave_39 RE: Error identifying EPUWALcontrol.dll as unpatched
Member 11th Jun, 2009 21:04
Score: 0
Posts: 177
User Since: 26th Nov 2008
System Score: N/A
Location: Washington, DC, US
on 11th Jun, 2009 20:31, MacNala wrote:
I have just run PSI 1.0.0.4 and it has detected an insecure program:
Installation Path
c:\WINDOWS\Downloaded Program Files\EPUWALcontrol.dll

This program does not exist on my computer.
What is wrong with the signature file or the search engine?


Nothing is wrong mate. Try this (copied from a different thread):

launch command prompt from accessories in the programs list
type: cd c:\windows\downloaded program files
press enter
type: dir d*
press enter
find the correct file in the list
type: del <name of correct file without these braces>
press enter
type: exit
press enter

--
Big Dave
Was this reply relevant?
+0
-0
MacNala RE: Error identifying EPUWALcontrol.dll as unpatched
Member 11th Jun, 2009 21:12
Score: 1
Posts: 25
User Since: 9th May 2008
System Score: N/A
Location: UK
Thanks for that.
I have done it but do not understand why it is not visible to a search of that folder.
Any information appreciated.
Was this reply relevant?
+0
-0
BigDave_39 RE: Error identifying EPUWALcontrol.dll as unpatched
Member 11th Jun, 2009 21:15
Score: 0
Posts: 177
User Since: 26th Nov 2008
System Score: N/A
Location: Washington, DC, US
on 11th Jun, 2009 21:12, MacNala wrote:
Thanks for that.
I have done it but do not understand why it is not visible to a search of that folder.
Any information appreciated.


I think this thread from Secunia may help:
http://secunia.com/community/forum/thread/show/191...

Something with the Windows Explorer and what it shows for this specific folder...

--
Big Dave
Was this reply relevant?
+0
-0
MacNala RE: Error identifying EPUWALcontrol.dll as unpatched
Member 11th Jun, 2009 21:21
Score: 1
Posts: 25
User Since: 9th May 2008
System Score: N/A
Location: UK
Last edited on 11th Jun, 2009 21:22
Thanks again. It certainly explains it but I am still puzzled why the package is not identified. There is no way to update the system unless that is identified and provides a method to correct the problem.
Was this reply relevant?
+0
-0
BigDave_39 RE: Error identifying EPUWALcontrol.dll as unpatched
Member 11th Jun, 2009 21:32
Score: 0
Posts: 177
User Since: 26th Nov 2008
System Score: N/A
Location: Washington, DC, US
on 11th Jun, 2009 21:21, MacNala wrote:
Thanks again. It certainly explains it but I am still puzzled why the package is not identified. There is no way to update the system unless that is identified and provides a method to correct the problem.


You're welcome, happy to help.

I think the problem is that these files, in this folder, represent ActiveX controls, which are installed by various websites through your Internet Explorer. Thus they are not real programs per se, but more like add-ons for your Internet Explorer.

After installing such an ActiveX control (which you're usually prompted to install when visiting a website that requires it, see Flash Player as an example), all websites you visit can afterwards invoke this add-on that you now have installed.. And, just like any other program, if it has a vulnerability in it, evil websites can exploit it to get access to your pc.

--
Big Dave
Was this reply relevant?
+0
-0
BigDave_39 RE: Error identifying EPUWALcontrol.dll as unpatched
Member 11th Jun, 2009 21:33
Score: 0
Posts: 177
User Since: 26th Nov 2008
System Score: N/A
Location: Washington, DC, US
Ohh and to answer you question, in regards to solve it. Then I'm very confident that you can simply delete files in this folder, because if you visit a website that needs this add-on, it will automatically ask you to install it again.

--
Big Dave
Was this reply relevant?
+0
-0
MacNala RE: Error identifying EPUWALcontrol.dll as unpatched
Member 12th Jun, 2009 10:08
Score: 1
Posts: 25
User Since: 9th May 2008
System Score: N/A
Location: UK
Again thanks for the info.
So if I have got it right ALL the files in that folder could be deleted and they would be reinstalled as necessary.
If a vulnerability is observed how would you know that the next time it is installed it will be an updated one, does the provider fix them before PSI reports that they are faulty?
Was this reply relevant?
+0
-0
BigDave_39 RE: Error identifying EPUWALcontrol.dll as unpatched
Member 12th Jun, 2009 18:49
Score: 0
Posts: 177
User Since: 26th Nov 2008
System Score: N/A
Location: Washington, DC, US
on 12th Jun, 2009 10:08, MacNala wrote:
Again thanks for the info.
So if I have got it right ALL the files in that folder could be deleted and they would be reinstalled as necessary.[/quote

Yes, I would say so -- I have done so on my own pc without any problems.

[quote=p7252]If a vulnerability is observed how would you know that the next time it is installed it will be an updated one, does the provider fix them before PSI reports that they are faulty?


That is exactly why you need to PSI. The PSI will tell you if there are problems with it :-)

If the vendor will the fix their security problems, well, thats a completely different story. Hopefully they will.



--
Big Dave
Was this reply relevant?
+0
-0
mijcar RE: Error identifying EPUWALcontrol.dll as unpatched
Member 18th Jun, 2009 04:53
Score: 0
Posts: 13
User Since: 17th Jan 2008
System Score: N/A
Location: N/A
Last edited on 18th Jun, 2009 04:55
The original script I wrote was for a file that began with d...
The following script with find all files for you and allow you to delete as necessary.

launch command prompt from accessories in the programs list
type: cd c:\windows\downloaded program files
press enter
type: dir
press enter
find the correct file in the list
type: del <name of correct file without these braces>
press enter
type: exit
press enter
Was this reply relevant?
+0
-0
Anselm RE: Error identifying EPUWALcontrol.dll as unpatched
Member 17th Jul, 2009 16:59
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
Secunia PSI v1.5.0.0 reports:

Insecure Programs:
eBay Enhanced Picture Services ActiveX Control 1.x

Version Detected:
1.0.27.0

Installation Path:
C:\Programme\eBay\Turbo Lister2\EPUWALControl.dll

Solution from Secunia advisory (English) (SA35412):
Update to version 1.0.27 or later.

What should I do?

Thanks in advance,

Anselm

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
MacNala RE: Error identifying EPUWALcontrol.dll as unpatched
Member 17th Jul, 2009 20:51
Score: 1
Posts: 25
User Since: 9th May 2008
System Score: N/A
Location: UK
Last edited on 17th Jul, 2009 20:51
launch command prompt from accessories in the programs list
type: cd c:\windows\downloaded program files
press enter
type: dir d*
press enter
find the correct file in the list
type: del <name of correct file without these braces>
press enter
type: exit
press enter

above copied from earlier in thread.
Was this reply relevant?
+0
-0
mijcar RE: Error identifying EPUWALcontrol.dll as unpatched
Member 17th Jul, 2009 21:26
Score: 0
Posts: 13
User Since: 17th Jan 2008
System Score: N/A
Location: N/A
Please do not use this script. It will not find anything except files beginning with the letter "d".

The original script I wrote was for a file that began with d...
The following script with find ALL FILES for you and allow you to delete as necessary.

launch command prompt from accessories in the programs list
type: cd c:\windows\downloaded program files
press enter
type: dir
press enter
find the correct file in the list
type: del <name of correct file without these braces>
press enter
type: exit
press enter
Was this reply relevant?
+0
-0
Anselm RE: Error identifying EPUWALcontrol.dll as unpatched
Member 17th Jul, 2009 21:34
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
Last edited on 17th Jul, 2009 21:36
Well, I should search and delete the file EPUWALControl.dll, right? dir lists 72 files, dir e* the following:

17.08.2004 15:13 591.440 eBayBand.dll
17.08.2004 15:13 124.496 eBayHtml.dll
17.08.2004 15:14 386.640 eBayTBar.exe
15.06.2005 01:00 6.899 ecbootil.vxd
25.05.2005 16:51 42.112 ecmldr32.dll
15.06.2005 01:00 210.552 ecmsvr32.dll
29.07.2008 00:50 1.292 erma.inf

EPUWALControl.dll is not to be found. Another idea?

Thank you,

Anselm

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
mijcar RE: Error identifying EPUWALcontrol.dll as unpatched
Member 17th Jul, 2009 21:52
Score: 0
Posts: 13
User Since: 17th Jan 2008
System Score: N/A
Location: N/A
Last edited on 17th Jul, 2009 21:56
If EPUWALcontrol.dll is not listed, then it is not in that folder. Which folder does Secunia identify as the containing folder?

Example: Secunia finds a file in c:\FOLDERBLOOP\FOLDERABC that you wish to find yourself.

You will have to use the same basic script except change the line
cd c:\windows\downloaded program files
to read
cd c:\FOLDERBLOOP\FOLDERABC.

Then you may follow the rest of the script.

In your case you are looking for folder: C:\Programme\eBay\Turbo Lister2

So you need to change the line reading:
cd c:\windows\downloaded program files
to read
cd c:\Programme\eBay\Turbo Lister2

Just make certain the spelling you use exactly matches the folder location as given by Secunia. I say this because I have not previously seen a folder called "Programme" but I would guess that your language is English English instead of American English.

I hope this helps. Please let us know if it does.
Was this reply relevant?
+0
-0
Anselm RE: Error identifying EPUWALcontrol.dll as unpatched
Member 17th Jul, 2009 22:10
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
Finally I understood. I should just delete this EPUWALcontrol.dll in the directory where PSI found it. I'm curious if the associated program eBay Turbo Lister 2 will run after. I think I'll rename the EPUWALcontrol.dll assuming that will do too. Tomorrow.

Thanks again,

Anselm

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
mijcar RE: Error identifying EPUWALcontrol.dll as unpatched
Member 18th Jul, 2009 01:19
Score: 0
Posts: 13
User Since: 17th Jan 2008
System Score: N/A
Location: N/A
What I would do would be:

Visit Ebay and see if they have an upgrade for TurboLister.

If they do, then download and install it - that should fix the problem.
If they don't, then I might try your suggestion of renaming EPU... or holding it in the recycle bin.

Doesn't Secunia have recommendations to make on this issue? Don't they tell you where to get an update or where the problem is discussed?
Was this reply relevant?
+0
-0
Anselm RE: Error identifying EPUWALcontrol.dll as unpatched
Member 18th Jul, 2009 09:35
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
Last edited on 18th Jul, 2009 09:37
on 18th Jul, 2009 01:19, mijcar wrote:
Visit Ebay and see if they have an upgrade for TurboLister. If they do, then download and install it - that should fix the problem.

I did so several times.
on 18th Jul, 2009 01:19, mijcar wrote:
If they don't, then I might try your suggestion of renaming EPU... or holding it in the recycle bin.

Now I renamed the file. Turbo Lister is still startable. I'll see if everything still works.
on 18th Jul, 2009 01:19, mijcar wrote:
Doesn't Secunia have recommendations to make on this issue? Don't they tell you where to get an update or where the problem is discussed?

Yes, the intelligent one I wrote above: To update EPUWALControl.dll version 1.0.27.0 to version 1.0.27.0.

Thanks again,

Anselm

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
mijcar RE: Error identifying EPUWALcontrol.dll as unpatched
Member 18th Jul, 2009 17:20
Score: 0
Posts: 13
User Since: 17th Jan 2008
System Score: N/A
Location: N/A
My guess is that if Turbo Lister is still working, then the culprit file must have been an artifact of a previous incarnation, left behind from a poorly done update (by the updating program from Ebay).

If things continue well, it will seem you can delete the renamed file, and all will be well.

Congratulations (hope it isn't premature).

Mij
Was this reply relevant?
+0
-0
Anselm RE: Error identifying EPUWALcontrol.dll as unpatched
Member 23rd Jul, 2009 13:54
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
You gave me the idea: I uninstalled Turbo Lister completely to make sure that no old and unused files caused PSI's insecure messages. But they persist. Yesterday I wrote to the eBay support and now I'm waiting for a reply.

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
mijcar RE: Error identifying EPUWALcontrol.dll as unpatched
Member 23rd Jul, 2009 14:52
Score: 0
Posts: 13
User Since: 17th Jan 2008
System Score: N/A
Location: N/A
on 23rd Jul, 2009 13:54, Anselm wrote:
You gave me the idea: I uninstalled Turbo Lister completely to make sure that no old and unused files caused PSI's insecure messages. But they persist. Yesterday I wrote to the eBay support and now I'm waiting for a reply.



If I understand you correctly, you have removed Turbo Lister but PSI still sees this file on your computer. Is that right?

If so, would you do a re-scan and post here exactly the file it now identifies and the location?
Was this reply relevant?
+0
-0
Anselm RE: Error identifying EPUWALcontrol.dll as unpatched
Member 23rd Jul, 2009 15:13
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
on 23rd Jul, 2009 14:52, mijcar wrote:
If I understand you correctly, you have removed Turbo Lister but PSI still sees this file on your computer. Is that right?

If so, would you do a re-scan and post here exactly the file it now identifies and the location?

No, I'm sorry: I uninstalled Turbo Lister completely and reinstalled the newest version. I'll report if eBay replies.

Thanks for your patience.

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
mijcar RE: Error identifying EPUWALcontrol.dll as unpatched
Member 23rd Jul, 2009 15:56
Score: 0
Posts: 13
User Since: 17th Jan 2008
System Score: N/A
Location: N/A
on 23rd Jul, 2009 15:13, Anselm wrote:
No, I'm sorry: I uninstalled Turbo Lister completely and reinstalled the newest version. I'll report if eBay replies.

Thanks for your patience.


For something like this, it's worth an email to PSI. Most of PSI's database, I believe, comes from the App engineers and/or corporation. I am guessing here, but I would think that the insecurity report about EPUWAL originated with Ebay and that the solution came from them, too. If you are still finding the same problem, it might represent a database error.

For whatever it's worth ...
Was this reply relevant?
+0
-0
Anselm RE: Error identifying EPUWALcontrol.dll as unpatched
Member 24th Jul, 2009 17:58
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
I wrote an email to Secunia support. The reply:
(unknown source)
I have corrected our detection rule for Turbo lister.
The PSI should now only detect EPUWALControl.dll (as intended)

In addition, I've added a direct download link for a update.
Just extact the file and replace the old EPUWALControl.dll with the new
EPUWALcontrol.dll

This should fix the insecure status.

I hope so.

Regards, Anselm


--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
mijcar RE: Error identifying EPUWALcontrol.dll as unpatched
Member 24th Jul, 2009 18:08
Score: 0
Posts: 13
User Since: 17th Jan 2008
System Score: N/A
Location: N/A
on 24th Jul, 2009 17:58, Anselm wrote:
I wrote an email to Secunia support. The reply:
(unknown source)
I have corrected our detection rule for Turbo lister.
The PSI should now only detect EPUWALControl.dll (as intended)

In addition, I've added a direct download link for a update.
Just extact the file and replace the old EPUWALControl.dll with the new
EPUWALcontrol.dll

This should fix the insecure status.

I hope so.

Regards, Anselm

=============================================
Good.

Glad this is working out. Also, your own persistence will save a lot of other users a fair amount of grief. Good for you.

Michael
Was this reply relevant?
+0
-0

This thread has been marked as locked.