hello
everyone heard of wincffg.exe?
cheers
peter
It could be a gaobot/agobt/sdbot Worm variant. Delete it in safe mode and delete the references to that file in the Registry.