|
msconfig.exe (5.1.2600.1106)
Contained in software |
|---|
| Name: | Windows XP Home Edition, Deutsch |
|---|
| License: | commercial |
|---|
| Information link: | http://www.microsoft.com/windowsxp/ |
|---|
File details |
|---|
| Filepath: | C:\WINDOWS\system32\dllcache \ msconfig.exe |
|---|
| Filedate: | 2002-08-29 14:00:00 |
|---|
| Version: | 5.1.2600.1106 |
|---|
| Filesize: | 147.968 bytes |
|---|
Checksum and file hashes |
|---|
| CRC32: | B9EB9E20 |
|---|
| MD5: | 17AB 7C22 3607 AFF4 AB73 3849 4D8F 1E33 |
|---|
| SHA1: | EF9A F07C 5715 4785 840D 9DE5 04A5 C56F 54DD 35CC |
|---|
Version resource information |
|---|
| CompanyName: | Microsoft Corporation |
|---|
| FileDescription: | Systemkonfigurationsprogramm |
|---|
| FileOS: | Windows NT, Windows 2000, Windows XP, Windows 2003 |
|---|
| FileType: | Application |
|---|
| FileVersion: | 5.1.2600.1106 |
|---|
| InternalName: | msconfig.EXE |
|---|
| LegalCopyright: | © Microsoft Corporation. Alle Rechte vorbehalten. |
|---|
| OriginalFilename: | msconfig.EXE |
|---|
| ProductName: | Betriebssystem Microsoft® Windows® |
|---|
| ProductVersion: | 5.1.2600.1106 |
|---|
msconfig.exe was found in the following malware reports:
|
|
|---|
Trojan.Ahero |
|---|
About Trojan.Ahero
...is written in Visual Basic. It will delete the file Msconfig.exe and attempts to delete the file Install.exe file from the root folder of some local...
Threat assessment
...Deletes files: Msconfig.exe ...
Technical details
...Trojan.Ahero also deletes Msconfig.exe, and then it copies the Kernel32.dll file--using the file name the Msconfig.exe--from...
...NOTE: Msconfig.exe by default exists only on Windows 98/Me/XP-based systems....
Removal instructions
...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun Replace Install.exe and Msconfig.exe if necessary. For details on how to do this,...
...To replace Install.exe and Msconfig.exe: NOTES:...
...not exist on all systems. By default, the Msconfig.exe file is found only on Windows 98/Me/XP-based systems....
...a backup or reinstall it. To determine whether the Msconfig.exe file is a copy of the Kernel32.dll file, use Windows Explorer to locate both files...
...If the both files are the same size, then delete Msconfig.exe and replace it. If the Trojan deleted Install.exe,...
Source: http://securityresponse.symantec.com/avcenter/venc/data/trojan.ahero.html |
|---|
Trojan.DiabKey |
|---|
Threat assessment
...Deletes files: Deletes regedit.exe, msconfig.exe, and regedt32.exe Releases confidential info:...
Technical details
...C:WindowsSystem32 (Windows XP). It deletes Regedit.exe, Msconfig.exe, and Regedt32.exe. It creates the value...
Removal instructions
...Win.ini and System.ini files. Restore Regedit.exe, Msconfig.exe, and Regedt32.exe. Remove the value...
...Click File, and click Exit. To restore Regedit.exe, Msconfig.exe, and Regedt32.exe: NOTE:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/trojan.diabkey.html |
|---|
Trojan.Prova |
|---|
Technical details
...Renames C:WindowsSystemMsconfig.exe to C:WindowsSystemSystem12.sys...
...NOTE: Msconfig.exe does not exist on Windows 95/NT/2000 computers....
...Because of this, the Trojan cannot rename Msconfig.exe on Windows XP computers. Pl.dll:...
Removal instructions
...98/Me, then navigate to the C:WindowsSystem folder and rename System12.sys to Msconfig.exe. To edit the registry:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/trojan.prova.html |
|---|
W32.Brid.A@mm |
|---|
Threat assessment
...Deletes files: MSconfig.exe in the %system% folder will be overwritten by the worm...
Technical details
...%system%Bride.exe %system%Msconfig.exe %system%Regedit.exe...
...%system%Bride.exe and %system%Msconfig.exe contains the virus W32.Funlove.4099....
Removal instructions
...Windows 98/Me computers, it is likely that the worm has overwritten the Windows file Msconfig.exe. Although this file is not...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.brid.a@mm.html |
|---|
W32.HLLW.Gemel |
|---|
Threat assessment
...C:WindowsRegedit.exe, C:WindowsSystemMsconfig.exe, C:Command.com Distribution...
Technical details
...C:WindowsRegedit.exe C:WindowsSystemMsconfig.exe C:Command.com...
Removal instructions
...C:WindowsRegedit.exe C:WindowsSystemMsconfig.exe C:Command.com...
...C:WindowsRegedit.exe C:WindowsSystemMsconfig.exe C:Command.com...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gemel.html |
|---|
Backdoor.Doly |
|---|
Technical details
...are running Windows 98 and you try to run MSConfig, you cannot do so because the Msconfig.exe file has been deleted. ...
Removal instructions
...If you are running Windows 98, you must restore the MSconfig.exe and Regedit.exe files. Please follow these steps:...
...In the Files to extract box, type Msconfig.exe and then click Start. In the "Restore From"...
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.doly.html |
|---|
W32.Noops.Trojan |
|---|
Technical details
...C:WinntRegedit.exe C:WindowsSystemMsconfig.exe C:WindowsRegedit.exe...
...C:WindowsPchealthHelpctrBinariesMsconfig.exe Sets the following values...
Removal instructions
...Also, you may need to re-install Msconfig on Windows 98/Me/XP. Update the virus definitions....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.noops.trojan.html |
|---|
W32.HLLW.LyndEgg |
|---|
Technical details
...C:WinntRegedit.exe C:WindowsSystemMsconfig.exe C:WindowsRegedit.exe...
...C:WindowsPchealthHelpctrBinariesMsconfig.exe Attempts to terminate the...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.lyndegg.html |
|---|
W32.HLLW.Winur |
|---|
Technical details
...important hacker tool ever!.exe msconfig.exe MSN Messenger commercial cracker.exe...
...Adds the value: msconfig C:winrunmsconfig.exe to the registry key:...
...Adds the value: winrun c:winrunmsconfig.exe to the registry key:...
Removal instructions
...right pane, delete the value: msconfig C:winrunmsconfig.exe Navigate to the key:...
...right pane, delete the value: winrun c:winrunmsconfig.exe Navigate to the key:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.winur.html |
|---|
W32.Ciosor |
|---|
Technical details
...It deletes these files: WindowsSystemMsconfig.exe WindowsSystemRegwiz.exe...
......
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.ciosor.html |
|---|
|
|
![[filename.info logo]](/img/logo.png){kind=logo}
![[cn msconfig.exe]](/img/nix.gif){kind=small}
