Re: win.ini and spyware

From: mayo (mayo_at_discussions.microsoft.com)
Date: 11/02/04 

Date: Mon, 1 Nov 2004 19:23:06 -0800

In consideration of the following Microsoft publication...

   http://support.microsoft.com/kb/310353

       ... I still doubt the validity of your statement.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

"David H. Lipman" wrote:

> Old software that was designed for Win9x/ME will use it. Therefore it exists. Newer
> software uses the Registry. Win2K and WinXP don't interpret the way that Win9x/ME did so it
> is safe. A program designed for Win9x/ME may write and read from win.ini so it exists to
> allow those "legacy" software to run under Win2K and WinXP.
>
> If you are using Win9x/ME then win.ini can be used by malware. For example...
> Under Win9x/ME the following is interpreted...
> [windows]
> run=
> load=
>
> That is NOT interpreted by Win2K and WinXP which uses the following Registry key(s)
> instead...
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
>
> HTH
>
> Dave
>
>
>
> "mayo" <mayo@discussions.microsoft.com> wrote in message
> news:3754446C-EB0C-40B0-BCC5-849410234572@microsoft.com...
> | That's strange. When I go to MSCONFIG in Win XP there is definitely
> | a WIN.INI Tab there with lots of options. When I search for the win.ini
> | file it's definitely there.
> | So, please explain to me again why this is a "legacy" component of Win XP.
> |
> | "cajunswabbie" wrote:
> |
> | > Thanks Dave. I am glad to hear it is a non-issue.
> | >
> | >
> | > "David H. Lipman" wrote:
> | >
> | > > Nothing -- it is a non-issue !
> | > >
> | > > Win.ini is a legacy component for old software. It was important to Win9x/ME but NOT
> in
> | > > Win2K and WinXP.
> | > >
> | > > Dave
> | >
> | > >
> | > >
> | > >
> | > > "cajunswabbie" <cajunswabbie@discussions.microsoft.com> wrote in message
> | > > news:36C10D2C-D9B3-4452-A228-4A8A96D3C6F9@microsoft.com...
> | > > | Running Windows XP Home. When running Spybot-Search & Destroy I received a
> | > > | yellow triangle and the following: "Error during check!: Cabrotor (Datei
> | > > | C:\WINDOWS\win.ini kann nicht geöffnet werden. The process cannot access the
> | > > | file because it is being used by another process)."
> | > > |
> | > > | Spybot-S&D, Adware and Spysweeper did not show any spyware. Also virus scan
> | > > | with Panda Active Scan on line and installed AVG did not show any virus. I
> | > > | can open win.ini in note pad, but I do not see any thing that relates to
> | > > | this. A search of the registry also had negative results.
> | > > |
> | > > | Any one have any ideals as to what this is, and how to correct the problem?
> | > >
> | > >
> | > >
>
>
>

Relevant Pages

  • Re: disappearing desktop
    ... Yes, it happens to all, including the administrator under Safe Mode... ... "David H. Lipman" wrote in message ... Have you tries logging in with different accounts and does this happen to all those accounts ...
    (microsoft.public.security.virus)
  • Re: disappearing desktop
    ... "David H. Lipman" wrote in message ... | Yes, it happens to all, including the administrator under Safe Mode... ...
    (microsoft.public.security.virus)
  • Re: Security Toolbar 7.1
    ... Leythos the stalker http://www.leythosthestalker.com, David ... H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: spyware included in windows security updates
    ... David H. Lipman wrote: ... Windows Update service -- NONE. ... as malware. ...
    (microsoft.public.windowsupdate)
  • Re: XP shutdown Explorer.exe problem
    ... Leythos the stalker http://www.leythosthestalker.com, David ... H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T. ...
    (microsoft.public.windowsxp.general)