Files used by PGP 6.0
For use by technicians, and advanced users that want to use PGP as users on an NT. This list was created when we had to find out which files is involved in PGP, in order to set proper file permissions in teaching class which had NT's. This lists the Business Security version, so some of these files might be missing in the lighter versions; Personal Edition, and the Freeware version. Nov –98. Send any comments to:
laszlo_baranyi@nai.comTo install PGP 6.0 in an NT, at least these files must be set to read and write for the users.
C:\Program Files\Network Associates\Pgp60\PGP Keyrings\*.*
C:\WINNT\randseed.rnd
C:\WINNT\PGP_sdk.prf
C:\Program Files\Network Associates\PGP60
\PGPgroup.pgr*.pgd (default is C:\New PGPdisk.pgd) The filename for the fixed disk space used with PGP disk. Contains encrypted information. Does not exist in the freeware version.
*.shf. Shared files by the split key. Typically the filenames are composed by;
[the share holders public key's user ID] [X Share.shf]
Where X is typically the digit one, to denote that the shareholder has one share. (it is possible to assign a shareholder several parts of the shared key, which thus gives the share holder more power)
C:\Program\Outlook Express
|
Filename |
Size |
Description |
|
PGPmsimn.exe |
36.176 |
Microsoft. Plug-in For Outlook Express, ver 4.72.3110.1. |
C:\Eudora\Plugins\
|
Filename |
Size |
Description |
|
pgpplugin.dll |
137.728 |
PGP Plug-in For Eudora E-mail Client, ver 6.0 |
C:\Program Files\Network Associates\Pgp60\PGP Keyrings
|
Filename |
Description |
Pubring-bak-x.pkr |
Backup generations of the public key ring. The x denotes a digit. Two backup files with the same digit are supposed to be in sync with each other. A new backup file is created every time a new key is generated. |
|
secring-bak-x.skr |
Backup of the private keyring. Se above |
|
pubring.pkr |
Public Keyring. This is the one that current is used. |
|
secring.skr |
Private Keyring. This is the one that current is used |
|
pubring.old |
Public Keyring that remains on disk after the creation of the client version. |
|
secring.old |
Private Keyring that remains on disk after the creation of the client version. Remove it from public access. |
Note.
Do not store your public/private key ring on a computer that is shared by several users. Instead keep it on a floppy. The setting above that enables every user to access the key rings is used on our training courses where we use test keys. When the students had finished the exercise on test keys, they change PGP's preferences (stored in file; PGP_sdk.prf) to instead point to the floppy. Then each participant can create his own keys and bring it home on a floppy.C:\WINNT
|
Filename |
Size |
Description |
|
PGPMacBinaryMappings.txt |
2.165 |
Mapping table for MacBinary and file extension format. Translates files MAC <-> PC |
|
randseed.rnd |
512 |
Contains binary random data used by generating random numbers to generate keys. |
|
PGP_sdk.prf |
254 |
Administration Preference file for ver 6.0. Contains path to where PGP stores the public/private keyring, randseed.rnd and PGPgroup.pgr. When PGPtray.exe starts, it reads this file, to se where the rest of PGP:s files exists. |
C:\WINNT\system32
|
Filename |
Size |
Description |
|
PGP60.hlp |
159.760 |
Help file for PGP. For unknown reasons, this is a duplicate of the one found in: C:\Program Files\Network Associates\PGP60 |
|
PGP60cl.dll |
1.079.296 |
Client Library, ver 6.0 |
|
PGP60mn.dll |
62.976 |
Shell Menu Extensions. Ver 6.0 |
|
PGP60sc.dll |
287.232 |
Cryptographic Support Library. Ver 6.0 |
|
PGPdskSE.dll |
60.416 |
PGPdisk Shell Extension. Ver 6.0.0.0 |
|
pgpExch.dll |
133.632 |
Plug-in for Exchange/outlook email client. Ver 6.0 |
|
PGP_SDK.dll |
551.936 |
Software Development Kit Core Library. Ver 1.5 |
|
PGPsdk.dll |
471.552 |
Software Development Kit, ver 1.1.1 |
|
PGPsdkKS.dll |
98.304 |
Key Server, ver 1.1.1 |
|
PGPsdkNL.dll |
172.032 |
Networking Library. Ver 1.5 |
|
PGPsdkUI.dll |
201,728 |
UI=User Interface ? Library. Ver 1.5 |
|
PGP60oe.dll |
118.272 |
Plug-in for Outlook Express E-mail client, ver 6.0 |
C:\WINNT\system32\drivers
|
Filename |
Size |
Description |
|
PGPdisk.sys |
173.976 |
PGPdisk Driver for Windows NT, ver 6.0.0.0. |
|
PGPmemlock.sys |
8.444 |
Page-locking kernel mode driver, ver 1.0. It has probably to do with preventing your pass phrase to be written to disk. In the list of devices it is called " PGP Secure memory driver". This file remains even if PGP is un installed. Thus it continues to run as a device driver in memory. It can however be stopped and disabled, if you want to remove any influence from PGP. |
More details. These two device drivers automatically start to run in memory when the computer is started. They can be viewed by clicking: Start -> Control panel -> Devices, and then browse down to the letters PGP.
C:\Program Files\Network Associates\PGP60
|
Filename |
Size |
Description |
|
Pgp60.cnt |
7.617 |
Contains text for PGP. The extension CNT could mean list of CoNTent for help? |
|
PGPdisk.hlp |
65.746 |
Help file for PGP disk |
|
Pgp60.gid |
41.658 |
Contains on-line help text for PGP. |
|
Pgp60.hlp |
159.760 |
Help file for PGP |
|
PGPadmin.exe |
314.880 |
Administration tool for creating client installations |
|
PGPdisk.GID |
15.976 |
Contains on-line help text for PGPdisk. |
|
PGPdisk.cnt |
2.654 |
Contains text for PGPdisk. The extension CNT could mean list of CoNTent for help? |
|
PGPdisk.exe |
837.632 |
PGP disk |
|
PGPdiskResident.exe |
48.128 |
PGP disk. Resident program |
|
PGPkeys.exe |
348.160 |
Key management |
|
PGPlog.exe |
83.968 |
Shows who has signed a message/file. |
|
PGPtools.exe |
143.872 |
The quick menu for using PGP |
|
PGPtray.exe |
30.720 |
Executed from Autostart. Start PGP's tray icon |
|
PGP_Admin.prf |
316 byte binary data in the beginning |
Profile. Contains 316 byte unknown binary data at the beginning. After PGPadmin.exe has been executed, the file is appended with the company name + the header that is attached with each created message + a block of those public keys that the administrator wants to be present in the client version that he creates. The binary data is possibly used to indicate which, if any, of the public keys should be used as signature, additional recovery or additional revocation key.. Note. In order to view what public keys there are in the file, one must edit it, so the public key block starts at beginning of a line. |
|
PGP_Client.prf |
2-3 kb |
Profile. Contains binary data appended by the users name and organisation that he enters at installation time. It also contains two default key servers, and any other key servers that is added by the administrator, is also stored here. For key servers that is connected to domain, that domain is also in here. |
|
PGPgroup.pgr |
958 |
Specifies the name of mailing list groups that has been created with PGPkeys.exe. |
|
uninstall.exe |
511.286 |
Uninstall PGP |
C:\TEMP\_ISTMP0.DIR
Contains files that where used at installation time. A new subdirectory (with an increasing number) is created with files, for each new installation. So if you have made several installations, the subdirectories will be created like this:Why are these temporary files remaining on the hard disk? Can they be deleted? Each directory contains these files:
C:\TEMP\_ISTMP0.DIR
|
Filename |
Size |
Description |
PGPdskIH.dll |
171.520 |
|
|
51c1d2.DLL |
91.136 |
Install shield ver 3.00.094.0. Probably used at the installation process. The number seems to be randomly assign to the file |
|
Install.dll |
30.208 |
Probably used at installation time |
|
License.txt |
16.166 |
The licence text that appears during installation time. |
|
Sidebar.bmp |
15.718 |
A bitmap picture that appears only during installation time. |
|
Sidebarx.bmp |
31.742 |
Another bitmap picture that also appears only during installation time. |
|
neta.bmp |
3.878 |
Bitmap picture of Network Associates logo |
|
pubring.pkr |
3.174 |
Public key ring with three keys that is included as default in the installed program; |
|
ReadMe.txt |
5.698 |
Latest release notes from PGP 6.0 development team about the Business Security version. Dated Oct -98 |
|
_SETUP.LIB |
147.057 |
No more information, than the filename itself. |
|
eudora.url |
71 |
Shortcut to http://www.eudora.com/eudorapro/updaters.html. Probably used if the installer wanted to fetch Eudora email client from the web. |
|
adobe.url |
78 |
Shortcut to http://www.adobe.com/prodindex/acrobat/readstep.html. Probably used if the installer wanted to fetch acrobat reader from the web in order to read the doc's |
The disks for the client version
C:\Program Files\Network Associates\PGP60\ClientInstaller\Disk1
C:\Program Files\Network Associates\PGP60\ClientInstaller\disk2
C:\Program Files\Network Associates\PGP60\ClientInstaller\disk3
C:\Program Files\Network Associates\PGP60\ClientInstaller\disk4
C:\Program Files\Network Associates\PGP60\ClientInstaller\disk5
The documentation
C:\Program Files\Network Associates\PGP60\Documentation\
IntroToCrypto.pdf
License.txt
PGPAdministratorsGuide.pdf
PGPInstallGuide.pdf
PGPWinUsersGuide.pdf
ReadMe.txt
whatsnew.doc
Run C:\WINNT\system32\regedt32.exe to view the registry. Log in as user, the registry can only be read, so you don't risk destroying something. The work to examine the whole registry was aborted. It's outside of my knowledge to interpret NT's registry.
|
Registry entry |
Content |
|
HKEY_CURRENT_USER -> |
Empty when PGP 6.0 has been un installed |
|
HKEY_LOCAL_MACHINE -> |
Empty when PGP 6.0 has been un installed |
|
HKEY_LOCAL_MACHINE-> |
Does contains information about PGPmemlock.sys. Even after PGP is un installed. |
|
HKEY_USERS on Local Machine ->
HKEY_LOCAL_MACHINE C:\PROGRA~1\NETWOR~1\PGP60\pgptools.exe %1 C:\PROGRA~1\NETWOR~1\PGP60\pgpkeys.exe %1 |
C:\Program\Outlook Express Note that the complete name is not always written out. Is that normal? |
|
Network Associates -> The same installation done once again. C:\PROGRA~1\NETWOR~1\PGP60 |
Note that the complete name is not always written out. Is that normal? |
---
End of list. There might exist more files that has not yet been found ---