ms32.exe

  • Thread starter Thread starter Rick
  • Start date Start date
R

Rick

When the bootup of my WinXP Home system is almost complete I get an error to the effect that "ms32.exe has
failed to load". What is this and how do I correct it?
Thanks in advance,
Rick
 
From: "Rick" <[email protected]>

| When the bootup of my WinXP Home system is almost complete I get an error to the effect
| that "ms32.exe has failed to load". What is this and how do I correct it?
| Thanks in advance,
| Rick

Chances are it was a Trojan that was deleted but the StartUp entry was not removed so the OS
is calling a non-existent file.

Execute; MSCONFIG.EXE and go to the StartUp tab and find the line item that loads ms32.exe
and disable it, then reboot the PC.


To make sure that you are clean of Trojans, please perform the following...


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *
 
David H. Lipman said:
From: "Rick" <[email protected]>

| When the bootup of my WinXP Home system is almost complete I get an error to the effect
| that "ms32.exe has failed to load". What is this and how do I correct it?
| Thanks in advance,
| Rick

Chances are it was a Trojan that was deleted but the StartUp entry was not removed so the OS
is calling a non-existent file.

Execute; MSCONFIG.EXE and go to the StartUp tab and find the line item that loads ms32.exe
and disable it, then reboot the PC.


To make sure that you are clean of Trojans, please perform the following...


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Thanks Rick and Dave I will try your suggestions and report back.
Click to expand...
Rick Hanson
 
Rick said:
David H. Lipman said:
From: "Rick" <[email protected]>

| When the bootup of my WinXP Home system is almost complete I get an error to the effect
| that "ms32.exe has failed to load". What is this and how do I correct it?
| Thanks in advance,
| Rick

Chances are it was a Trojan that was deleted but the StartUp entry was not removed so the OS
is calling a non-existent file.

Execute; MSCONFIG.EXE and go to the StartUp tab and find the line item that loads ms32.exe
and disable it, then reboot the PC.


To make sure that you are clean of Trojans, please perform the following...


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Thanks Rick and Dave I will try your suggestions and report back.
Click to expand...
Rick Hanson
Click to expand...

I used the Multi-AV program as advised and ran the four scans in both normal and safe mode. Found two
instances of "Downloader-AWL" in the system32 folder. I took so long due to several electrical storms and
power outages here in Southern Ontario.This is the first trojan I've ever fought with because my systems are
well protected behind a firewall and I have AV and Spyware software. However, this past weekend I did a
complete repair/refresh install following InformationWeek's Fred Langa's step-by-step instructions. It worked
flawlessly except that my CA EZ Anti-virus was disabled (which I did not know at the time) by the re-install
and I downloaded Windows Updates unprotected. I suspect that is when the Trojan got through. Thanks to Rick
and Dave for pointing me to a soloution!
Cheers,
Rick Hanson
 
From: "Rick" <[email protected]>


|
| I used the Multi-AV program as advised and ran the four scans in both normal and safe
| mode. Found two instances of "Downloader-AWL" in the system32 folder. I took so long due
| to several electrical storms and power outages here in Southern Ontario.This is the first
| trojan I've ever fought with because my systems are well protected behind a firewall and I
| have AV and Spyware software. However, this past weekend I did a complete repair/refresh
| install following InformationWeek's Fred Langa's step-by-step instructions. It worked
| flawlessly except that my CA EZ Anti-virus was disabled (which I did not know at the time)
| by the re-install and I downloaded Windows Updates unprotected. I suspect that is when the
| Trojan got through. Thanks to Rick and Dave for pointing me to a soloution!
| Cheers,
| Rick Hanson

Hi Rick:

Thanx for updating the thread.

You din't note th AV module which found the Trojan but by the name I'll surmise it was
McAfee...
Downloader-AWL -- http://vil.nai.com/vil/content/v_139589.htm

I believe you got this by installing some "free" software.
 
Back
Top