Dameware Driver

• Dameware Development Driver
• Dameware Mirror Driver 64 Bit
• Dameware Virtual Keyboard Driver
• Dameware Drivers

Diagnostics tool for Dameware Remote Support (DRS)/Dameware Mini Remote Control (MRC) consoles is called Remote Support Diagnostic. Logs related to mirror drivers are found under keyword MirrorDriverGetUseMirrorDriver on agent side or server side for OTI. Dameware - Web Help Desk integration log file location. DameWare.Mini.Remote.Control may gain complete control of your mailbox to generate and send e-mail with virus attachments, e-mail hoaxes, spam and other types of unsolicited e-mail to other people. Download Exterminate It!

How to Remove DameWare.Mini.Remote.Control from Your Computer

To completely purge DameWare.Mini.Remote.Control from your computer, you need to delete the files, folders, Windows registry keys and registry values associated with DameWare.Mini.Remote.Control. These files, folders and registry elements are respectively listed in the Files, Folders, Registry Keys and Registry Values sections on this page.

• Dameware® Remote Support is an affordable and easy-to-use remote support software designed to simplify and accelerate remote IT administration tasks for IT admins and support technicians. Dameware Remote Support includes the built-in Dameware Mini Remote Control for gaining remote access to Windows®, Linux®, and Mac® OS X® systems.
• Software We are planning to remove Dameware Development Mirror Driver from Device Manager. We need to create the package and pushed on all the machine where its installed. We are able to manually remove it, but are not able to remove it silent (commandline or registry).

For instructions on deleting the DameWare.Mini.Remote.Control registry keys and registry values,
see How to Remove DameWare.Mini.Remote.Control from the Windows Registry.

For instructions on deleting the DameWare.Mini.Remote.Control files and folders,
see How to Delete DameWare.Mini.Remote.Control Files (.exe, .dll, etc.)

How to Delete DameWare.Mini.Remote.Control Files (.exe, .dll, etc.)^

The files and folders associated with DameWare.Mini.Remote.Control are listed in the Files and Folders sections on this page.

To delete the DameWare.Mini.Remote.Control files and folders:

1. Using your file explorer, browse to each file and folder listed in the Folders and Files sections.
Note: The paths use certain special folders (conventions) such as [%PROGRAM_FILES%]. Please note that these conventions are depending on Windows Version / Language. These conventions are explained here.
2. Select the file or folder and press SHIFT+Delete on the keyboard.
3. Click Yes in the confirm deletion dialog box.
IMPORTANT: If a file is locked (in use by some application), its deletion will fail (the Windows will display a corresponding message).You can delete such locked files with the RemoveOnReboot utility. To delete a locked file, right-click on the file, select Send To->Remove on Next Reboot on the menu and restart your computer. You can install the RemoveOnReboot utility from here.

How to Remove DameWare.Mini.Remote.Control from the Windows Registry^

The Windows registry stores important system information such as system preferences, user settings and installed programs details as well as the information about the applications that are automatically run at start-up. Because of this, spyware, malware and adware often store references to their own files in your Windows registry so that they can automatically launch every time you start up your computer.

To effectively remove DameWare.Mini.Remote.Control from your Windows registry, you must delete all the registry keys and values associated with DameWare.Mini.Remote.Control, which are listed in the Registry Keys and Registry Values sections on this page.

To remove the DameWare.Mini.Remote.Control registry keys and values:

1. On the Windows Start menu, click Run.
2. In the Open box, type regedit and click OK.
   The Registry Editor window opens. This window consists of two panes. The left pane displays folders that represent the registry keys arranged in hierarchical order. The right one lists the registry values of the currently selected registry key.
3. To delete each registry key listed in the Registry Keys section, do the following:
   • Locate the key in the left pane of the Registry Editor window by sequentially expanding the folders according to the path indicated in the Registry Keys section. For example, if the path of a registry key is
     HKEY_LOCAL_MACHINEsoftwareFolderAFolderBKeyName1
     sequentially expand the HKEY_LOCAL_MACHINE, software, FolderA and FolderB folders.
   • Select the key name indicated at the end of the path (KeyName1 in the example above).
   • Right-click the key name and select Delete on the menu.
   • Click Yes in the Confirm Key Delete dialog box.
4. To delete each registry value listed in the Registry Values section, do the following:
   • Display the value in the right pane of the Registry Editor window by sequentially expanding the folders in the left pane according to the path indicated in the Registry Values section and selecting the specified key name. For example, if the path of a registry value is
     HKEY_LOCAL_MACHINEsoftwareFolderAFolderBKeyName2,valueC=
     sequentially expand the HKEY_LOCAL_MACHINE, software, FolderA and FolderB folders and select the KeyName2 key to display the valueC value in the right pane.
   • In the right pane, select the value name indicated after a comma at the end of the path (valueC in the example above).
   • Right-click the value name and select Delete on the menu.
   • Click Yes in the Confirm Value Delete dialog box.

DameWare.Mini.Remote.Control Categorized as:^

RAT

Remote Access Tool. A program that enables a hacker to remotely access and control other people's computers. A RAT can serve a variety of malicious purposes, including hijacking and transferring private information, downloading files, running programs, and tampering with system settings.

Dameware Development Driver

Be Aware of the Following RAT Threats:

Network.Crack.Wizard, NetCrack, Stealth.alpha.beta, HTTP, Poor.

How Did My PC Get Infected with DameWare.Mini.Remote.Control?^

The following are the most likely reasons why your computer got infected with DameWare.Mini.Remote.Control:

• Your operating system and Web browser's security settings are too lax.
• You are not following safe Internet surfing and PC practices.

Downloading and Installing Freeware or Shareware

Small-charge or free software applications may come bundled with spyware, adware, or programs like DameWare.Mini.Remote.Control. Sometimes adware is attached to free software to enable the developers to cover the overhead involved in created the software. Spyware frequently piggybacks on free software into your computer to damage it and steal valuable private information.

Using Peer-to-Peer Software

The use of peer-to-peer (P2P) programs or other applications using a shared network exposes your system to the risk of unwittingly downloading infected files, including malicious programs like DameWare.Mini.Remote.Control.

Visiting Questionable Web Sites

When you visit sites with dubious or objectionable content, trojans-including DameWare.Mini.Remote.Control, spyware and adware, may well be automatically downloaded and installed onto your computer.

Detecting DameWare.Mini.Remote.Control^

The following symptoms signal that your computer is very likely to be infected with DameWare.Mini.Remote.Control:

PC is working very slowly

DameWare.Mini.Remote.Control can seriously slow down your computer. If your PC takes a lot longer than normal to restart or your Internet connection is extremely slow, your computer may well be infected with DameWare.Mini.Remote.Control.

New desktop shortcuts have appeared or the home page has changed

DameWare.Mini.Remote.Control can tamper with your Internet settings or redirect your default home page to unwanted web sites. DameWare.Mini.Remote.Control may even add new shortcuts to your PC desktop.

Annoying popups keep appearing on your PC

DameWare.Mini.Remote.Control may swamp your computer with pestering popup ads, even when you're not connected to the Internet, while secretly tracking your browsing habits and gathering your personal information.

E-mails that you didn't write are being sent from your mailbox

Dameware Mirror Driver 64 Bit

DameWare.Mini.Remote.Control may gain complete control of your mailbox to generate and send e-mail with virus attachments, e-mail hoaxes, spam and other types of unsolicited e-mail to other people.

Overview

Starting with Windows 8, mirror drivers will not install on the system. Mirror drivers described in this section will install and run only on earlier versions of Windows.

However, a special GDI accessibility driver model is available starting with Windows 8 to developers who want to provide mirror driver capabilities in assistive technologies for customers with disabilities or impairments. To learn more about this special driver model, please contact acc_driver@microsoft.com.

A remote display driver model that is based on the mirror driver architecture can also run starting with Windows 8, but has been removed in Windows 10, version 2004. For more information, see Remote Display Drivers.

Note

For instructions on deleting the DameWare.Mini.Remote.Control files and folders,
see How to Delete DameWare.Mini.Remote.Control Files (.exe, .dll, etc.)

How to Delete DameWare.Mini.Remote.Control Files (.exe, .dll, etc.)^

The files and folders associated with DameWare.Mini.Remote.Control are listed in the Files and Folders sections on this page.

To delete the DameWare.Mini.Remote.Control files and folders:

1. Using your file explorer, browse to each file and folder listed in the Folders and Files sections.
Note: The paths use certain special folders (conventions) such as [%PROGRAM_FILES%]. Please note that these conventions are depending on Windows Version / Language. These conventions are explained here.
2. Select the file or folder and press SHIFT+Delete on the keyboard.
3. Click Yes in the confirm deletion dialog box.
IMPORTANT: If a file is locked (in use by some application), its deletion will fail (the Windows will display a corresponding message).You can delete such locked files with the RemoveOnReboot utility. To delete a locked file, right-click on the file, select Send To->Remove on Next Reboot on the menu and restart your computer. You can install the RemoveOnReboot utility from here.

How to Remove DameWare.Mini.Remote.Control from the Windows Registry^

The Windows registry stores important system information such as system preferences, user settings and installed programs details as well as the information about the applications that are automatically run at start-up. Because of this, spyware, malware and adware often store references to their own files in your Windows registry so that they can automatically launch every time you start up your computer.

To effectively remove DameWare.Mini.Remote.Control from your Windows registry, you must delete all the registry keys and values associated with DameWare.Mini.Remote.Control, which are listed in the Registry Keys and Registry Values sections on this page.

To remove the DameWare.Mini.Remote.Control registry keys and values:

1. On the Windows Start menu, click Run.
2. In the Open box, type regedit and click OK.
   The Registry Editor window opens. This window consists of two panes. The left pane displays folders that represent the registry keys arranged in hierarchical order. The right one lists the registry values of the currently selected registry key.
3. To delete each registry key listed in the Registry Keys section, do the following:
   • Locate the key in the left pane of the Registry Editor window by sequentially expanding the folders according to the path indicated in the Registry Keys section. For example, if the path of a registry key is
     HKEY_LOCAL_MACHINEsoftwareFolderAFolderBKeyName1
     sequentially expand the HKEY_LOCAL_MACHINE, software, FolderA and FolderB folders.
   • Select the key name indicated at the end of the path (KeyName1 in the example above).
   • Right-click the key name and select Delete on the menu.
   • Click Yes in the Confirm Key Delete dialog box.
4. To delete each registry value listed in the Registry Values section, do the following:
   • Display the value in the right pane of the Registry Editor window by sequentially expanding the folders in the left pane according to the path indicated in the Registry Values section and selecting the specified key name. For example, if the path of a registry value is
     HKEY_LOCAL_MACHINEsoftwareFolderAFolderBKeyName2,valueC=
     sequentially expand the HKEY_LOCAL_MACHINE, software, FolderA and FolderB folders and select the KeyName2 key to display the valueC value in the right pane.
   • In the right pane, select the value name indicated after a comma at the end of the path (valueC in the example above).
   • Right-click the value name and select Delete on the menu.
   • Click Yes in the Confirm Value Delete dialog box.

DameWare.Mini.Remote.Control Categorized as:^

RAT

Remote Access Tool. A program that enables a hacker to remotely access and control other people's computers. A RAT can serve a variety of malicious purposes, including hijacking and transferring private information, downloading files, running programs, and tampering with system settings.

Dameware Development Driver

Be Aware of the Following RAT Threats:

Network.Crack.Wizard, NetCrack, Stealth.alpha.beta, HTTP, Poor.

How Did My PC Get Infected with DameWare.Mini.Remote.Control?^

The following are the most likely reasons why your computer got infected with DameWare.Mini.Remote.Control:

• Your operating system and Web browser's security settings are too lax.
• You are not following safe Internet surfing and PC practices.

Downloading and Installing Freeware or Shareware

Small-charge or free software applications may come bundled with spyware, adware, or programs like DameWare.Mini.Remote.Control. Sometimes adware is attached to free software to enable the developers to cover the overhead involved in created the software. Spyware frequently piggybacks on free software into your computer to damage it and steal valuable private information.

Using Peer-to-Peer Software

The use of peer-to-peer (P2P) programs or other applications using a shared network exposes your system to the risk of unwittingly downloading infected files, including malicious programs like DameWare.Mini.Remote.Control.

Visiting Questionable Web Sites

When you visit sites with dubious or objectionable content, trojans-including DameWare.Mini.Remote.Control, spyware and adware, may well be automatically downloaded and installed onto your computer.

Detecting DameWare.Mini.Remote.Control^

The following symptoms signal that your computer is very likely to be infected with DameWare.Mini.Remote.Control:

PC is working very slowly

DameWare.Mini.Remote.Control can seriously slow down your computer. If your PC takes a lot longer than normal to restart or your Internet connection is extremely slow, your computer may well be infected with DameWare.Mini.Remote.Control.

New desktop shortcuts have appeared or the home page has changed

DameWare.Mini.Remote.Control can tamper with your Internet settings or redirect your default home page to unwanted web sites. DameWare.Mini.Remote.Control may even add new shortcuts to your PC desktop.

Annoying popups keep appearing on your PC

DameWare.Mini.Remote.Control may swamp your computer with pestering popup ads, even when you're not connected to the Internet, while secretly tracking your browsing habits and gathering your personal information.

E-mails that you didn't write are being sent from your mailbox

Dameware Mirror Driver 64 Bit

DameWare.Mini.Remote.Control may gain complete control of your mailbox to generate and send e-mail with virus attachments, e-mail hoaxes, spam and other types of unsolicited e-mail to other people.

Overview

Starting with Windows 8, mirror drivers will not install on the system. Mirror drivers described in this section will install and run only on earlier versions of Windows.

However, a special GDI accessibility driver model is available starting with Windows 8 to developers who want to provide mirror driver capabilities in assistive technologies for customers with disabilities or impairments. To learn more about this special driver model, please contact acc_driver@microsoft.com.

A remote display driver model that is based on the mirror driver architecture can also run starting with Windows 8, but has been removed in Windows 10, version 2004. For more information, see Remote Display Drivers.

Note

As of Windows 10, GDI accessibility drivers are no longer recommended for new products and Microsoft will remove support in a future OS version. Support for GDI remote display drivers has already been removed in Windows 10, version 2004. However, creating a remote display solution is still possible by building a custom Remote Protocol Provider and an Indirect Display Driver.

Mirror driver description

A mirror driver is a display driver for a virtual device that mirrors the drawing operations of one or more additional physical display devices. It is implemented and behaves much like any other display driver; however, its paired video miniport driver is minimal in comparison to a typical miniport driver. See Mirror Driver Support in Video Miniport Drivers (Windows 2000 Model) for more information about miniport drivers in mirroring systems. The Windows Driver Kit (WDK) through the Windows 7 edition (Version 7600) contains a sample mirror driver which includes component source files that are contained in three directories.

GDI supports a virtual desktop and provides the ability to replicate a portion of the virtual desktop on a mirror device. GDI implements the virtual desktop as a graphics layer above the physical display driver layer. All drawing operations start in this virtual desktop space; GDI clips and renders them on the appropriate physical display devices that exist in the virtual desktop.

A mirror device can specify an arbitrary clip region in the virtual desktop, including one that spans more than one physical display device. GDI then sends the mirror device all drawing operations that intersect that driver's clip region. A mirror device can set a clip region that exactly matches a particular physical device; therefore, it can effectively mirror that device.

Note

In Windows 2000 and later, the mirror driver's clip region must include the primary display device.

In Windows Vista and later, the Desktop Windows Manager (DWM) will be turned off when the mirror driver is loaded.

The mirror driver code sample illustrates how to implement a mirror driver. For more information that will help you understand the sample:

• Use the sample INF file, mirror.inf, as a template. See Mirror Driver INF File for details.
• See the mirror.exe application, which demonstrates how the mirror driver is attached to the virtual desktop. See Mirror Driver Installation for details.
• Refer to the Windows SDK documentation for information about using the Win32 EnumDisplayDevices function. You use this function to determine the .Display# name associated with your mirrored display device. This number is required to change the settings for your mirrored device. For multiple instances, # is a different number for each instance; therefore you must determine this number by iterating through the available display devices.

Attaching the mirrored device to the global desktop

1. Add the REG_DWORD registry entry Attach.ToDesktop to your driver's services keys.

2. Set this key's entry to 1 (one).

To disable the mirror driver, set this entry to 0 (zero).

As mentioned previously, the driver is installed and operates in a drawing layer that resides above the device layer. Because the mirror driver's coordinate space is the desktop coordinate space, it can span more than one device. If the mirror driver is intended to mirror the primary display, its display coordinates should coincide with the primary display's desktop coordinates.

• After the mirror driver is installed, it will be called for all rendering operations that intersect the driver's display region. On a multiple-monitor system, this might not include all drawing operations if the mirror driver overlaps only the primary display device.

• It is recommended that a user-mode service be used to maintain the mirror driver's settings. This application can ensure that the driver is loaded correctly at boot time and it can respond appropriately to changes to the desktop by getting notifications of display changes via the WM_DISPLAYCHANGE message.

• GDI calls the mirror driver for any 2D graphics DDI drawing operation that intersects the driver's bounding rectangle. Note that GDI does not perform a bounding rectangle check if the surface is a device format bitmap; that is, if the SURFOBJ has an iType of STYPE_DEVBITMAP.

• As always, the mirror driver must be implemented without the use of global variables. All state must exist in the PDEV for that particular driver. GDI will call DrvEnablePDEV for every hardware device extension created by the video miniport driver.

• The mirror driver should not support DirectDraw.

• A mirror driver must set the GCAPS_LAYERED flag to TRUE in the flGraphicsCaps member of the DEVINFO structure.

• An accessibility mirror driver must set the GCAPS2_EXCLUDELAYERED and GCAPS2_INCLUDEAPIBITMAPS flags to TRUE in the flGraphicsCaps2 member of the DEVINFO structure.

• A mirror driver can optionally support brush realizations by implementing DrvRealizeBrush.

Dameware Virtual Keyboard Driver

GDI allows the same driver to run on both a single and multiple-monitor system. A driver in a multiple-monitor system need only track its position within the global desktop. GDI provides this position to the driver whenever a Win32 ChangeDisplaySettings call occurs, such as when a user dynamically changes the monitor's position in the desktop by using the Display program in Control Panel. GDI updates the dmPosition member of the DEVMODEW structure accordingly when such a change occurs. A driver can receive notification of such a change by implementing DrvNotify. See Mirror Driver Installation for more information.

Dameware Drivers

Note

Mirror drivers are not required to render with pixel-perfect accuracy when rendering on the client side with such accuracy may be difficult. For example, the adapter/monitor receiving the mirrored image is not required to render Grid Intersect Quantization (GIQ) line drawing and polygon fills with the same precision as the adapter/monitor being mirrored.