Article ID: 132807 - View products that this article applies to.
This article was previously published under Q132807
This article has been archived. It is offered "as is" and will no longer be updated.
The following issues exist regarding password list files in Windows 95:
This issue is resolved in Microsoft Windows 98.
These issues are resolved by the following updated files for Windows 95 and Windows 95 OEM Service Release 1:
To install this update, follow these steps:
Mspwl32.dll version 4.00.952 (dated 4/26/96) and later<BR/> Net.exe (no version information) dated 12/11/95 and later
The following file is available for download from the Microsoft Download Center:
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:
Download Mspwlupd.exe now
Collapse this imageExpand this image
119591Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
(http://support.microsoft.com/kb/119591/EN-US/ )How to Obtain Microsoft Support Files from Online Services
The Mspwlupd.exe file contains the following files:
File name Version Date/Time Size Destination folder ---------------------------------------------------------------------- Mspwl32.dll 4.00.952 4/26/96 9:52am 21,504 Windows\System Net.exe 12/11/95 9:51am 375,930 Windows
This update is an enhanced security component that substantially strengthens the encryption used for the Microsoft Windows 95 password cache. The new component uses a 128-bit key, increased from the 32-bit key used in the previous version. The new component also includes enhancements to the method used to store passwords in the .pwl file. With the 128-bit security, the new component is 2^96 times more difficult to decrypt.
This component replaces the Mspwl32.dll and Net.exe files. The previous .pwl file is automatically upgraded to the new format.
Net.exe, which is usually used from the command line, no longer uses the password cache. Users are prompted for passwords when using Net.exe to connect to resources on the network.
NOTE: Because the same algorithm is used to cache passwords in Windows for Workgroups version 3.11, you may want to disable password caching in Windows for Workgroups using Admincfg.exe. For information about using Admincfg.exe, please refer to the Windows for Workgroups Resource Kit.
NOTE: If you disabled password caching on a Windows 95-based computer as a temporary workaround before installing this update, you can re-enable password caching after installing this update. You can re-enable password caching by reversing the procedure documented in the following article in the Microsoft Knowledge Base:
140557To re-enable password caching, set the DisablePwdCaching value to zero (0) or delete the DisablePwdCaching value.
(http://support.microsoft.com/kb/140557/EN-US/ )Microsoft Windows 95 Password List Security Issue