Microsoft KB Archive/819027

= Description and Use of the ShowBinaryMFR Command-line Tool =

PSS ID Number: 819027

Article Last Modified on 6/22/2004

-

The information in this article applies to:


 * Microsoft Windows Server 2003, 64-Bit Datacenter Edition
 * Microsoft Windows Server 2003, 64-Bit Enterprise Edition
 * Microsoft Windows Server 2003, Datacenter Edition
 * Microsoft Windows Server 2003, Enterprise Edition
 * Microsoft Windows Server 2003, Standard Edition
 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows XP 64-Bit Edition Version 2003
 * Microsoft Windows XP 64-Bit Edition Version 2002
 * Microsoft Windows XP Professional
 * Microsoft Windows XP Home Edition
 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Professional
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server
 * Microsoft Windows NT Server 4.0
 * Microsoft Windows NT Workstation 4.0
 * Microsoft Windows Small Business Server 2003, Premium Edition
 * Microsoft Windows Small Business Server 2003, Standard Edition

-





SUMMARY
ShowBinaryMFR is a command-line tool that you can use to gather information about the binary files that are installed on a computer. ShowBinaryMFR gathers the following information:
 * Version number.
 * Company name.
 * Product name.
 * Whether Windows File Protection (WFP) helps to protect the binary.

Note The ShowBinaryMFR command-line tools runs on Windows NT 4.0, Windows 2000, Windows XP and Windows Server 2003.



Syntax
ShowBinaryMFR.exe [Drive:][Path][BinaryName] [-p] [-s] [-m/n] [-l<[:]LogFile>]

[Drive:][Path][BinaryName]
This syntax specifies the drive, the directory, and the files that you want to scan. With this syntax, the ShowBinaryMFR tool detects whether a binary is a Microsoft binary, and whether WFP helps to protect it. If you do not specify a binary name, it scans all the files in the specified path. If you do not specify a path, it searches the current directory for the specified binary.

You cannot use a wildcard character for a binary name. For example, ShowBinaryMFR *.dll searches for all the DLLs and detects whether they belong to Microsoft, and whether WFP helps to protect the files. You can specify several directories in the same search.

Note WFP is a feature in Windows 2000 only. It is not available in Windows NT 4.0.

To download the ShowBinaryMFR tool, visit the following Microsoft Web site:

http://download.microsoft.com/download/B/E/8/BE8199EF-4526-4F3C-836E-60B41900E51E/showbinarymfr.msi


 * -p This switch searches all the directories in the %PATH% environment variable for the specified binaries.
 * -s This switch searches the directory and all its sub-directories.
 * -m This switch scans the directory for all the Microsoft binaries. As output, you receive a list of all the Microsoft binaries and the information whether WFP helps to protect the binaries.
 * -n This switch scans the directory for all the non-Microsoft binaries. As output, you receive a list of all the non-Microsoft binaries. If it is available, the company name for the binary is part of the output.

If you do not specify the –m switch or the -n switch, ShowBinaryMFR displays the list of all the binaries in the path that you specified, the company each binary belongs to (for example, Microsoft), the product group the binary belongs to (for example, Windows Operating System, Office, or SQL), and the information whether WFC helps to protect the binary.
 * -l:LogFile This switch specifies the file where you want to print the output. By default, unless you specify a log file, the output is printed to the console.

Example 1
Syntax:

ShowBinaryMFR.exe c:\winnt\system32\kernel32.dll

Results:

C:\Winnt\System32\Kernel32.dll, 5.0.2195.6688, Microsoft Corporation, Microsoft(R) Windows (R) 2000 Operating System, Protected Total number of Microsoft Binaries found: 1 Total number of System Protected Binaries found: 1 Total number of Non-Microsoft Binaries found: 0 Total number of Binaries scanned: 1

Example 2
Syntax:

ShowBinaryMFR.exe &quot;c:\Program Files\Microsoft FactFinder&quot; -m -s

Results:

C:\Program Files\Microsoft FactFinder\Ff.exe, 1.0.0.2726, Microsoft Corporation, Microsoft« FactFinder, Not Protected C:\Program Files\Microsoft FactFinder\Ffapfh.dll, 1.0.0.2726, Microsoft Corporation, Microsoft« FactFinder, Not Protected C:\Program Files\Microsoft FactFinder\Ffcap.dll, 1.0.0.2726, Microsoft Corporation, Microsoft« FactFinder, Not Protected C:\Program Files\Microsoft FactFinder\Ffctrl.dll, 1.0.0.2726, Microsoft Corporation, Microsoft« FactFinder, Not Protected C:\Program Files\Microsoft FactFinder\Fffhs.dll, 1.0.0.2726, Microsoft Corporation, Microsoft« FactFinder, Not Protected C:\Program Files\Microsoft FactFinder\Ffmh.dll, 1.0.0.2726, Microsoft Corporation, Microsoft« FactFinder, Not Protected C:\Program Files\Microsoft FactFinder\Ffsh.dll, 1.0.0.2726, Microsoft Corporation, Microsoft« FactFinder, Not Protected C:\Program Files\Microsoft FactFinder\Ffsrch.dll, 1.0.0.2726, Microsoft Corporation, Microsoft« FactFinder, Not Protected Total number of Microsoft Binaries found: 8 Total number of System Protected Binaries found: 0 Total number of Binaries scanned: 8

Example 3
Syntax:

ShowBinaryMFR.exe C:\Winnt\System32\*.exe /n

Results:

C:\Winnt\System32\Dfrgfat.exe, 5.0.2195.6605, Executive Software International, Inc., Diskeeper (TM) Disk Defragmenter, Not Protected C:\Winnt\System32\Dfrgntfs.exe, 5.0.2195.6605, Executive Software International, Inc., Diskeeper (TM) Disk Defragmenter, Not Protected C:\Winnt\System32\Dmadmin.exe, 2195.6624.297.3, VERITAS Software Corp., Logical Disk Manager for Windows NT, Not Protected C:\Winnt\System32\Dmremote.exe, 2195.6605.297.3, VERITAS Software Corp., Logical Disk Manager for Windows NT, Not Protected C:\Winnt\System32\Dvdplay.exe, 1.0.0.1,, dvdplay Application, Not Protected C:\Winnt\System32\Nvsvc32.exe, 5.13.1.1570, NVIDIA Corporation, NVIDIA Driver Helper Service, Version 15.70, Not Protected C:\Winnt\System32\Promon.exe, 1.11.0.0, Intel Corporation, Intel(R) PROMonitor, Not Protected C:\Winnt\System32\Prounstl.exe, 4.9.0.0, Intel Corporation, Intel(R) PRO Adapter, Not Protected Total number of Non-Microsoft Binaries found: 8 Total number of Binaries scanned: 8

Keywords: kbdownload kbinfo KB819027

Technology: kbSBServ2003Pre kbSBServ2003Search kbSBServ2003St kbSBServSearch kbwin2000AdvServ kbwin2000AdvServSearch kbwin2000DataServ kbwin2000DataServSearch kbwin2000Pro kbwin2000ProSearch kbwin2000Search kbwin2000Serv kbwin2000ServSearch kbWinAdvServSearch kbWinDataServSearch kbWinNT400search kbWinNTS400 kbWinNTS400search kbWinNTsearch kbWinNTSsearch kbWinNTW400 kbWinNTW400search kbWinNTWsearch kbWinServ2003Data kbWinServ2003Data64bit kbWinServ2003Data64bitSearch kbWinServ2003DataSearch kbWinServ2003Ent kbWinServ2003Ent64bit kbWinServ2003Ent64bitSearch kbWinServ2003EntSearch kbWinServ2003Search kbWinServ2003St kbWinServ2003Web kbWinXPHome kbWinXPHomeSearch kbWinXPPro kbWinXPPro64bit kbWinXPPro64bit2002 kbWinXPPro64bit2002Search kbWinXPPro64bit2003 kbWinXPPro64bit2003Search kbWinXPPro64bitSearch kbWinXPProSearch kbWinXPSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.