This is a phantom DLL case on Windows 7 – funny bug in c:\\WINDOWS\\system32\\spreview.exe.<\/p>\n\n\n\n
When it starts it loads wdscore.dll<\/em> library, but it does it incorrectly, and as a result it tries to load C:\\WINDOWS\\system32\\spreview.exewdscore.dll file first.<\/p>\n\n\n\n So, if you place such library on a system, anytime spreview is launched, the spreview.exewdscore.dll DLL will be loaded. It’s also a Lolbin, of cuz.<\/p>\n\n\n\n The bad news – it’s used very rarely as it’s related to Service Pack installation. The better news — since spreview.exe is a part of a OS and signed, you could add it to any startup location and it will load that funnily-named DLL when it starts.<\/p>\n","protected":false},"excerpt":{"rendered":" This is a phantom DLL case on Windows 7 – funny bug in c:\\WINDOWS\\system32\\spreview.exe. When it starts it loads wdscore.dll library, but it does it incorrectly, and as a result it tries to load C:\\WINDOWS\\system32\\spreview.exewdscore.dll file first. So, if you … Continue reading