New at NirSoft

Submit portable freeware that you find here. It helps if you include information like description, extraction instruction, Unicode support, whether it writes to the registry, and so on.

Moderators: usdcs, Andrew Lee, webfork

Message
Author
User avatar
billon
Posts: 487
Joined: Sat Jun 23, 2012 4:28 pm

Re: New at NirSoft

#241 Post by billon » Mon Feb 06, 2017 12:47 am

LoadedDllsView

http://www.nirsoft.net/utils/loaded_dll_view.html
LoadedDllsView is a simple tool for Windows that scans all running processes on your system and displays the list of all DLL files loaded by these processes and the number of processes that load each DLL in the list. When selecting a DLL file in the upper pane of LoadedDllsView, the lower pane displays the list of all processes that use the selected DLL file. You can also select one or more DLL files and then export the list into comma-delimited/tab-delimited/html/xml file.
Image

User avatar
billon
Posts: 487
Joined: Sat Jun 23, 2012 4:28 pm

LoadedDllsView

#242 Post by billon » Mon Feb 06, 2017 12:50 am


User avatar
Checker
Posts: 1621
Joined: Wed Jun 20, 2007 1:00 pm
Location: Ingolstadt [DE]

Re: LoadedDllsView

#243 Post by Checker » Mon Feb 13, 2017 2:46 pm

Voted ... and thanks for adding :wink:

__philippe
Posts: 424
Joined: Wed Jun 26, 2013 2:09 am

Re: New at NirSoft

#244 Post by __philippe » Sun Mar 05, 2017 1:53 pm

billon wrote:EncryptedRegView
http://www.nirsoft.net/utils/encrypted_ ... _view.html
EncryptedRegView is a tool for Windows that scans the Registry of your current running system or the Registry of external hard drive you choose and searches for data encrypted with DPAPI (Data Protection API). When it finds encrypted data in the Registry, it tries to decrypt it and displays the decrypted data in the main window of EncryptedRegView. With this tool, you may find passwords and other secret data stored in the Registry by Microsoft products as well as by 3-party products.
Attempting to download EncrypteRegView v1.01 from the main entry bombs with :
Forbidden
You don't have permission to access /toolsdownload/encryptedregview.zip on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
However, downloading straight from Nirsoft site works fine... :roll:

User avatar
webfork
Posts: 7516
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: New at NirSoft

#245 Post by webfork » Sun Mar 05, 2017 7:08 pm

__philippe wrote:downloading straight from Nirsoft site works fine...
Sigh. I expect all the Nirsoft entries are going to require this now or in the future. EDIT: yeah that's the case now.

Good catch, thanks.
Supporting Net Neutrality - BattleForTheNet | Why this matters | More from EFF.org

User avatar
webfork
Posts: 7516
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: New at NirSoft

#246 Post by webfork » Sun Mar 05, 2017 7:15 pm

<Edit: this was a listing of entries to update to fix the direct download link issue, but now I'm not sure. My location is (for unclear reasons) blocking access to the site so I can't resolve this.>
Supporting Net Neutrality - BattleForTheNet | Why this matters | More from EFF.org


User avatar
Andrew Lee
Posts: 2184
Joined: Sat Feb 04, 2006 9:19 am
Contact:

Re: New at NirSoft

#248 Post by Andrew Lee » Sun Mar 05, 2017 7:56 pm

Just to confirm, I do have the same problem downloading EncrypteRegView. So fingers crossed it's the only entry affected.

User avatar
smaragdus
Posts: 1770
Joined: Sat Jun 22, 2013 3:24 am
Location: Aeaea

Re: New at NirSoft

#249 Post by smaragdus » Mon Mar 06, 2017 5:08 am

@Andrew Lee
Andrew Lee wrote:Just to confirm, I do have the same problem downloading EncrypteRegView. So fingers crossed it's the only entry affected.
VaultPasswordView is also affected.

__philippe
Posts: 424
Joined: Wed Jun 26, 2013 2:09 am

Re: New at NirSoft

#250 Post by __philippe » Mon Mar 06, 2017 6:49 am

So, can we safely infer the "TPFC-download-VERBOTEN" dreaded syndrome
affects exclusively the most recent Nirsoft products, released since 04-MAR-2017 onwards :?:

Roll of casualties so far:
  • EncryptedRegView  v1.01 04-MAR-2017
    VaultPasswordView v1.06 05-MAR-2017

__philippe
Posts: 424
Joined: Wed Jun 26, 2013 2:09 am

Re: New at NirSoft

#251 Post by __philippe » Tue Mar 07, 2017 5:40 pm

Latest Nirsoft releases now download from TPFC in just about a New York minute :
  • OutlookAttachView v3.00 06-MAR-2017
    ShellMenuView     v1.35 07-MAR-2017

Verdict:
Temporary Glitch,... Conjecture disproved,...Case dismissed...:!:

__philippe
Posts: 424
Joined: Wed Jun 26, 2013 2:09 am

Re: New at NirSoft

#252 Post by __philippe » Wed Mar 08, 2017 6:25 pm

Aha...the Nirsoft plot thickens again... :roll:
Reopening a closed case ?

Thanks @smaragdus for spotting a new instance of VERBOTEN TPFC-download :
  • SniffPass v1.13     17-SEP-2014

Thanks ditto @billon for promptly amending the local download pointer 8)

User avatar
billon
Posts: 487
Joined: Sat Jun 23, 2012 4:28 pm

Re: New at NirSoft

#253 Post by billon » Thu Mar 09, 2017 6:53 am

DataProtectionDecryptor

http://www.nirsoft.net/utils/dpapi_data_decryptor.html
DataProtectionDecryptor is a powerful tool for Windows that allows you to decrypt passwords and other information encrypted by the DPAPI (Data Protection API) system of Windows operating system. You can use this tool to decrypt DPAPI data on your current running system and to decrypt DPAPI data stored on external hard drive.

About DPAPI

DPAPI is a decryption/encryption system used by Microsoft products as well as by 3-party products to decrypt and encrypt passwords and other secret information on Windows operating system. DPAPI decrypted data always begins with the following sequence of bytes, so you can easily detect it:
01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 4F C2 97 EB

Here's some examples for passwords and other data encrypted with DPAPI:
  • Passwords of Microsoft Outlook accounts, stored in the Registry under HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles or HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles or HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles (Depending on version of Outlook)
  • Credentials files of Windows (e.g: C:\Users\[User Profile]\AppData\Roaming\Microsoft\Credentials , C:\Users\[User Profile]\AppData\Local\Microsoft\Credentials)
  • Wireless network keys (Stored inside XML files under C:\ProgramData\Microsoft\Wlansvc\Profiles\Interfaces)
  • Passwords in some versions of Internet Explorer, stored in the following Registry key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2
  • Passwords stored in the passwords file of Chrome Web browser ('Login Data' file in the profile of Chrome)
  • Encrypted cookies in Chrome Web browser ('Cookies' file in the profile of Chrome)
Image

User avatar
billon
Posts: 487
Joined: Sat Jun 23, 2012 4:28 pm

DataProtectionDecryptor

#254 Post by billon » Thu Mar 09, 2017 6:55 am


User avatar
billon
Posts: 487
Joined: Sat Jun 23, 2012 4:28 pm

Re: New at NirSoft

#255 Post by billon » Thu Mar 09, 2017 7:16 am

@__philippe:

My explanation:
2-3 years ago there was big problems with NirSoft's password recovery tools - Google blocked them as malware. You can see that in chagelogs, e.g.:
Removed the command-line options that export the passwords to a file from the official version. A version of this tool with full command-line support will be posted on separated Web page.
After that, Nir Sofer changed DL links of these tools from http://www.nirsoft.net/utils/program.zip (like all NirSoft progs) to http://www.nirsoft.net/toolsdownload/program.zip. Also, you can download them only from program's page, only when you on that program's page and only with web-browser (same with NirLauncher). Some protection from Google-bot?
Nothing mysterious, actually.

Post Reply