Wintcpmod.exe

[vb86 0]

seems like some thing was forcing my cpu to run at 100%. Ive narrowed down to wintcpmod.exe in c:\windows\system32 folder. Any inpute as to what this might be?

[@ksh@T 20]

is there any dos module running......or what do1 thing open task manager..and see to it and type msconfig and see the startups and all

[Arun 795]

Can you scan the file at Virus Total and at Norman Sandbox ?

This is what I found in Google.

[Vishal Gupta 4]

This is what I found about wintcpmod.exe:

The process belongs to the software Microsoft Windows Operating System TCP/IP Module by Microsoft Corporation (www.microsoft.com).

Description: wintcpmod.exe is located in the folder C:\Windows. Known file sizes on Windows XP are 482816 bytes (75% of all occurrence), 495104 bytes.

There is no information about the maker of the file. The process is loaded during the Windows boot process (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). wintcpmod.exe is not a Windows system file. wintcpmod.exe is able to hide itself. Therefore the technical security rating is 6% dangerous.

If wintcpmod.exe is located in the folder C:\Windows\System32 then the security rating is 72% dangerous. File size is 482816 bytes. It is a file without information about the maker of this file. The program has no visible window. It is an unknown file in the Windows folder. wintcpmod.exe is not a Windows system file. The program uses ports to connect to LAN or Internet.

Important: Some malware can camouflage themselves as wintcpmod.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the wintcpmod.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security.

[vb86 0]

thanks for the reply.. ill respond asap.

[vb86 0]

vishal , i had come across the same page that you have quoted before dinner. My filesize did clash with the one mentioned and it is in the system32 folder only, but my zonealarm AV (basically vet av by comp ascosiates) doesnt detect a thing.

[Vishal Gupta 4]

U can do one thing!

Move that file to some other location (like some other drive), if it says The file is being used by another process, then move it by restarting in DOS mode (using Win 98 CD).

Now Restart ur comp and check whether all works fine!

If u face no problem, then u can safely delete that file.

And in case if u face some problem, like windows doesnt start, then u can again move that file to its original location. It means this file is essential to windows...