Link to home
Start Free TrialLog in
Avatar of pdsteam
pdsteam

asked on

IERESET.INF

Can anybody tell me what the purpuse is for the iereset.inf file.  I can't seem to find anything about it here or even doing google search.
I am using tripwire enterprise for monitoring my servers and now and again I will see this file show up for no apparant reason.
Thanks for your help.
Pete
Avatar of johnb6767
johnb6767
Flag of United States of America image

This is teh defualt configuration file for IE. If I wanted to reinstall IE, I would right click it and select Install. It is not a harmless file at all. Unless you are using IE created with an IEAK, them it might overwrite something in your user's installations...But hopefully they dont have those types of rights anyway...
My mistake...got that one confused with IE.inf..

IEReset.inf is used to reset your IE options to default. Some coders will use this file and alter it, with thier own search hooks in mind, so that when someone resets web settings, it gets configured to the bad guys site....For the most part though, it is not a malicious file, unless from a compromised PC.
Avatar of pdsteam
pdsteam

ASKER

 So, that makes sense rom waht I have seen during searchs, but the next obvious question, at least to me is what kinds of activities on a mostly static configuration of a windows 2000 server running SQL SVR 2000 would cause this file to get modified.
  The couple of people that have admin rights to this machine have told me that they have done nothing, we've all heard that before, but this time I actually believe them.
  Any suggestions?
Thanks Pete
ASKER CERTIFIED SOLUTION
Avatar of johnb6767
johnb6767
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of pdsteam

ASKER

The original question was answered adequately and helped me in the direction I needed to find out what happened.  It turns out that someone had an application that would check and modify this file periodically and run it to reset the defaults.  He apparently forgot that it was doing this.
Thanks for all your guys help!