Skip to main content

Access 2003 and the DCOM Server Process Launcher

Here's a hint: Don't disable the "DCOM Server Process Launcher" service on XP SP2. It may look like one heck of a vulnerability when you really don't use DCOM at all, but, unfortunately, Microsoft Access 2003 does. It will simply open an instant message box stating "A problem occurred while Microsoft Access was communicating with the OLE server or ActiveX Control." if the service is not running.

Comments

ncdave4life said…
"DCOM Server Process Launcher" is (as you put it) a heck of a vulnerability.

DCOM Server Process Launcher is used by malware, including at least one threat that is not detected by any of the many anti-malware tools I've thrown at it. On the infected computer, when DCOM Server Process Launcher is enabled, then as soon as I start any browser (IE, FireFox, or Opera), IE fires up, displaying an advertisement. From then on IE pops up another ad about once every 4-6 minutes. (Most of the ads are for porn sites, but I also got an ad for an ambulance chasing lawyer named Daniel A. Pava, of Springfield, Mass.)

The good news is that if you disable DCOM Server Process Launcher the problem seems to go away. I'll take your word for it that disabling DCOM Server Process Launcher interferes with Microsoft Access, but, fortunately, this computer does not have Microsoft Access installed.

To disable DCOM Server Process Launcher, run services.msc, right-click on DCOM Server Process Launcher, view its properties, set it to "disabled," and reboot.

Note: this is on Windows XP Media Center Edition, with SP2 and all the latest Windows Updates (as of 1/14/2008).

Dave Burton
www.geeksalive.com
Cary, NC
ncdave4life said…
P.S. -- Well, I was wrong. Disabling DCOM Server Process Launcher does break a few other things. Here's an article:

http://smallvoid.com/article/winnt-services-dcomlaunch.html

Contrary to that article, Windows Firewall still works, but I've verified that with DCOM Server Process Launcher disabled defrag and msinfo32 both fail. I've not checked the windows installer.

Dave Burton
www.geeksalive.com
Thanks for the link. I've since moved to Ubuntu for my main work, so this has become a fairly moot point for me ;)

Popular posts from this blog

Threaded chat article and demo

While nothing major, managing threaded conversations in chat has bothered me for quite a while. Yesterday I had an idea on how to improve matters: Works using existing chat infrastructure. Needs only augmented clients. Plays well even if other party uses a non-thread aware chat tool. Separates threads automatically based on interaction patterns. I've written an article and have created an online demo about it. Discussion welcome.

Beyond TDD: Documentation Driven Development

There are quite a few articles extolling the virtues of test-driven development these days ( here's one ). And for good reason, too. Having done TDD for quite a while, I recently started combining it with documentation-driven design. This is what my open-source tool, JCite , is all about. With this approach, I sketch out the most important use cases, combine them into the index of a tutorial (links plus teasers summarizing the use-case), flesh out the tutorial topics (and thus use-cases) one by one, develop the use-case tests in parallel to each topic, cite the important parts of the tests as actual code samples into the topic, and only then start doing the implementation (this last step is accompanied by more tests, which are now more like unit-tests). In all, this is like literate programming, but of the use-case tests rather than the implementation code. TDD already helps to make you focus on the user during API design. DDD takes the effect further by making you tell consistent