chicchio wrote:
> Hi to all !
> I am new to the group.
> Looking in my WIN.INI file, I found the following:
>
> [annie]
> CaptureFile=D:\Temp\prova
> VideoDevice2=@device:pnp:\\?\usb#vid_093a&pid_2468 #5&1561aa82&0&1#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\global
> AudioDevice2=@device:cm:{33D9A762-90C8-11D0-BD43-00A0C911CE86}\VIA AC'97
> Enhanced Audio (WAVE)
> FrameRate=333333
> UseFrameRate=1
> CaptureAudio=0
> CaptureCC=0
> WantPreview=1
> MasterStream=1
> UseTimeLimit=0
> TimeLimit=0
>
> Unfortunately I have no more the file prova.
> I am using XP SP3, Symantec AV, ZoneAlarm, and I connect via a Netgear
> router with its firewall. A look in my PC with HiJackThis, Malwarebytes
> Antimalware, Gmer, Runscanner etc didn't show anything of strange and the PC
> is running fine, so I don't think to have infection issues. I used msconfig
> to deactivate, and the PC was running fine.
> So the question is: what is this ? Should I delete it from WIN.INI ?
> Thanks in advance, Chicchio

Just a guess.

[annie] could be associated with the amcap.exe application, which is used
for video capture. The vid_093a&pid_2468 belongs to a webcam.

http://www.linux-usb.org/usb.ids

093a Pixart Imaging, Inc.
2468 Cammaestro 2.5DU/X-EYE/Orite SC-120/ICGear TravelCam/Easy Snap Snake Eye Webcam

So it is possible you were using amcap.exe, to try to capture video from one of
the named web cams. amcap.exe was a sample application written by Microsoft,
and it is sometimes bundled with webcams or PCI capture cards.

I have a copy of amcap.exe on my Hauppauge WinTV Go CDROM, and the file
is pretty small (34304 bytes). The word "annie" can be found, with a hex
editor, inside that application.

So amcap.exe may have put that information there. Exactly why that file
was used, I don't know.

Paul