Results 1 to 9 of 9

Thread: WINOSCFG.exe

  1. #1

    Thread Starter
    I'm about to be a PowerPoster! mendhak's Avatar
    Join Date
    Feb 2002
    Location
    Ulaan Baator GooGoo: Frog
    Posts
    38,170

    WINOSCFG.exe

    what is winoscfg.exe?

    Mine's infected, according to Norton. It's irrepairable, so it's been quarantined.



    What is this file? Can I replace it just like that, like say, I copy it from someone's PC.?

  2. #2
    Banned Michael_Kamen's Avatar
    Join Date
    May 2001
    Location
    The Netherlands
    Posts
    1,180
    What's your OS? I've searched for it on Win98 and Win2k but couldn't locate it.

  3. #3
    Banned Michael_Kamen's Avatar
    Join Date
    May 2001
    Location
    The Netherlands
    Posts
    1,180
    What's your OS? I've searched for it on Win98 and Win2k but couldn't locate it.

  4. #4
    Banned Michael_Kamen's Avatar
    Join Date
    May 2001
    Location
    The Netherlands
    Posts
    1,180
    What's your OS? I've searched for it on Win98 and Win2k but couldn't locate it.

  5. #5
    Banned Michael_Kamen's Avatar
    Join Date
    May 2001
    Location
    The Netherlands
    Posts
    1,180
    Cool, I got 3 posts for the price of 1

  6. #6

    Thread Starter
    I'm about to be a PowerPoster! mendhak's Avatar
    Join Date
    Feb 2002
    Location
    Ulaan Baator GooGoo: Frog
    Posts
    38,170
    Windows 98
    Windows 98
    Windows 98



    Mine's located at C:/Windows/winoscfg.exe

    the term "win" in there means it HAS to have come with windows... right? How come you don't have it?

    Also, after it was quarantined, during my startups, I'd get an error message telling me that win.ini was referencing it, but it wasn't there. SO I commented out that line in the file.

    help?

  7. #7
    Tygur
    Guest
    Originally posted by mendhak
    the term "win" in there means it HAS to have come with windows... right? How come you don't have it?
    That is so far from the truth. Many trojans throw themselves into the windows directory and give themselves some name so it looks like they belong there. And it looks like that's what this winoscfg file of yours is. I did some digging around (Google and Google Groups), and it seemed to further support my conclusion.

  8. #8
    PowerPoster
    Join Date
    Jul 1999
    Posts
    5,923
    Looks like it to me too http://virusexperts.com/article.php?sid=27

    remove the line containing it in win.ini and I suggest you search some other files to see if they refer to it

  9. #9

    Thread Starter
    I'm about to be a PowerPoster! mendhak's Avatar
    Join Date
    Feb 2002
    Location
    Ulaan Baator GooGoo: Frog
    Posts
    38,170

    Thumbs up

    Hey thanks!!! I never did a search in the first place, but then I realized that it's a virus. I have no idea how that got there, but thanks to Norton as well.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width