DIGIT-ARC read-only archive · snapshot: July 23, 2026

win32host.exe and win32bootcfg.exe

7 posts · originally from https://geek.digit.in/community/threads/win32host-exe-and-win32bootcfg-exe.28292/

K
karankalaria Original post #1
May 15, 2006 at 3:50 PM
win32host.exe and win32bootcfg.exe are there in my processes list and the are creating troubles for me like if i dont end their process I can't visit anywebsite and when i end its process it appears back after 5 sec or so.Even my fully updated norton antivirus cant detect it as a virus.What r they and how to get rid of them.If i delete it from its place(c:windows/system32 and c:windows/prefetch) it appears back.
anandk
anandk #2
May 15, 2006 at 9:03 PM
WIN32HOST.EXE is a Trojan.Hiddl-B
win32bootcfg.exe is another malware.

freeware prevx removes both, btw. ive tried prevx, its good.
click
*fileinfo.prevx.com/QQ385919232009-WIN314675680/WIN32BOOTCFG.EXE.html
*virusinfo.prevx.com/pxparall.asp?PXC=bc1520078305

else try ewido antimalware. scan in safe mode. also use 'ccleaner' to clear prefetcher and other pc redundant files/registry entries.
Desmond
Desmond #3
May 16, 2006 at 4:40 PM
These appear to be root kits.

Try what anandk says or alternatively download HijackThis. Run a system scan and fix these files when they appear in the list.

Hijack This can fix files which even AVs cannot detect.

Download HJT:
*www.majorgeeks.com/downloadget.php?id=3155&file=13&evp=3304750663b552982a8baee6434cfc13
QwertyManiac
May 16, 2006 at 4:52 PM
^^
Are you sure these are root kits? :|
Research first...
anandk
anandk #5
May 16, 2006 at 5:54 PM
even i dont think they r rootkits...they are our good old (un)friendly neigborhood trojans.
Desmond
Desmond #6
May 17, 2006 at 1:19 PM
All right All right, slipped on that,

They are trojans, but removable with HijackThis.
anandk
anandk #7
May 17, 2006 at 1:21 PM
47shailesh said:
WIN32HOST.EXE is a Trojan.Hiddl-B WIN32bootcfg.EXE is also a malware

i had just said that in my first post