WINOSCFG.exe

[mendhak]

what is winoscfg.exe?

Mine's infected, according to Norton. It's irrepairable, so it's been quarantined.



What is this file? Can I replace it just like that, like say, I copy it from someone's PC.?

[Michael_Kamen]

What's your OS? I've searched for it on Win98 and Win2k but couldn't locate it.

[Michael_Kamen]

What's your OS? I've searched for it on Win98 and Win2k but couldn't locate it.

[Michael_Kamen]

What's your OS? I've searched for it on Win98 and Win2k but couldn't locate it.

[Michael_Kamen]

Cool, I got 3 posts for the price of 1 :)

[mendhak]

Windows 98
Windows 98
Windows 98



Mine's located at C:/Windows/winoscfg.exe

the term "win" in there means it HAS to have come with windows... right? How come you don't have it?

Also, after it was quarantined, during my startups, I'd get an error message telling me that win.ini was referencing it, but it wasn't there. SO I commented out that line in the file.

help?

[Tygur]

Originally posted by mendhak
the term "win" in there means it HAS to have come with windows... right? How come you don't have it?
That is so far from the truth. Many trojans throw themselves into the windows directory and give themselves some name so it looks like they belong there. And it looks like that's what this winoscfg file of yours is. I did some digging around (Google and Google Groups), and it seemed to further support my conclusion.

[chrisjk]

Looks like it to me too http://virusexperts.com/article.php?sid=27

remove the line containing it in win.ini and I suggest you search some other files to see if they refer to it

[mendhak]

Hey thanks!!! I never did a search in the first place, but then I realized that it's a virus. I have no idea how that got there, but thanks to Norton as well. :)