CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Mswinpid32.exe I've found nothing about it

 
Post new topic   Reply to topic       All -> FavForums -> Startup Programs [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
casty64

Trooper
Trooper


Joined: May 12, 2004
Posts: 19
Location: Italy

PostPosted: Wed Oct 13, 2004 10:10 am    Post subject: Mswinpid32.exe I've found nothing about it
Reply with quote

I have in
HKLMSoftwareMicrosoftWindowsCurrentVersionRun

Name: Mwinpid32
data: c:\winnt\system32\mswinpid32.exe

what can be?
good or bad ?

no information on Properties in the .exe file

Back to top
View users profile Send private message
TonyKlein

Site Moderator
Microsoft MVP

Joined: Oct 15, 2002
Posts: 13120
Location: Netherlands
MIRT Moderators MVP Premium Security Experts

PostPosted: Wed Oct 13, 2004 5:59 pm    Post subject:
Reply with quote

Most likely bad, but without a closer look at your configuration it's impossible to say...

I suggest you proceed as follows:

Go to CastleCops Link/downloads-cat-14.html, and download Hijack This.

Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, and save the log somewhere.

NOTE: Most of what Hijack This lists will be harmless or even required, so do NOT fix anything yet.

Next, go to the Hijackthis - Spyware, Viruses, Worms, Trojans section of this board.

Press "New Topic", explain your problem, and copy and paste the contents of the Hijack This log into your new message.

Reply to this topic including a link to the new topic you posted, and I'll have a look!

Cheers


_________________
Tony image CLSID List
Back to top
View users profile Send private message
casty64

Trooper
Trooper


Joined: May 12, 2004
Posts: 19
Location: Italy

PostPosted: Thu Oct 14, 2004 1:25 pm    Post subject:
Reply with quote

Here my post with Hijack

CastleCops Link/t81075-As_told_in_forum_quot_Startups_quot_I_found_this_Mswinpid3.html

Back to top
View users profile Send private message
TonyKlein

Site Moderator
Microsoft MVP

Joined: Oct 15, 2002
Posts: 13120
Location: Netherlands
MIRT Moderators MVP Premium Security Experts

PostPosted: Thu Oct 14, 2004 3:14 pm    Post subject:
Reply with quote

OK, I posted. Smile


_________________
Tony image CLSID List
Back to top
View users profile Send private message
TonyKlein

Site Moderator
Microsoft MVP

Joined: Oct 15, 2002
Posts: 13120
Location: Netherlands
MIRT Moderators MVP Premium Security Experts

PostPosted: Sat Oct 16, 2004 3:57 pm    Post subject:
Reply with quote

... and, as I told you there, this file's a true baddie!

It has now been added to the Startup database:

CastleCops Link/s5772-mswinpid32_exe.html

Please follow all recommendation given!


_________________
Tony image CLSID List
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Startup Programs All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer