mslib32

[Guest]

Does anyone have this problem? You start windows and
everything has an error messages that says mslib32 is the
problem. Please help me. This really stinks.

 

[Alan Edwards]

Yes, there have been a few. It is not clear to me yet if it is a virus
or parasite.

Please post the exact error message, details of what operating system
you have and the location and full file name of this file.

....Alan

 

[Guest]

The error message is
CFGWIZ caused an invalid page fault in
module MSLIB32.DLL at 0177:018124e6.
Registers:
EAX=00000000 CS=0177 EIP=018124e6 EFLGS=00010293
EBX=00000000 SS=017f ESP=00646804 EBP=00646858
ECX=00000000 DS=017f ESI=82c25000 FS=4967
EDX=00000000 ES=017f EDI=0000007c GS=0000
Bytes at CS:EIP:
8a 02 88 45 cf 6a 00 8b 4d e8 51 6a 00 e8 e8 03
Stack dump:
00646828 bff7a0fe bff7a558 81678000 00000000 c1706000
00000000 00000000 00000020 00000000 fdffffff 00000030
018301bc 00000040 00000000 00000000

I have windows 98 and this is really driving me crazy.
Please help

 

[Alan Edwards]

Location of Mslib32.dll?
Have you checked its Properties for ownership?
Have you scanned it with an up-to-date AV?
(definitions no older than 24 hours)

Have you had a look at Startup?
Check in Msconfig for any oddities.
(Start-Run-MSCONFIG-Startup tab)
If you cannot see anything in Msconfig then:

Start-Run-msinfo32
Click the + beside Software Environment to expand.
Click Startup Programs
Ctrl+A to Select All, Ctrl+C to Copy.
Paste that information in your message.

....Alan

 

[Guest]

Here is my system start up.

Iomega Startup Options Startup Group C:\Tools_95
\IMGSTART.EXE

Iomega Watch Startup Group C:\Tools_95\IOWATCH.EXE

Zip Disk Icons Startup Group C:\Tools_95\IMGICON.EXE

Microsoft Office Startup Group "C:\Program
Files\Microsoft Office\Office\OSA9.EXE" -b -l

Taskbar Display Controls Registry (Per-User Run)
RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY

MsnMsgr Registry (Per-User Run) "c:\Program Files\MSN
Messenger\MsnMsgr.Exe" /background

ScanRegistry Registry (Machine Run)
c:\windows\scanregw.exe /autorun

TaskMonitor Registry (Machine Run)
c:\windows\taskmon.exe

SystemTray Registry (Machine Run) SysTray.Exe

LoadPowerProfile Registry (Machine Run)
Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

AtiCwd32 Registry (Machine Run) Aticwd32.exe

AtiKey Registry (Machine Run) Atitask.exe

HPScanPatch Registry (Machine Run)
C:\WINDOWS\SYSTEM\HPScanFix.exe

Primax 3-D Mouse Registry (Machine Run)
3dmoused.exe

Keyboard Manager Registry (Machine Run) C:\Program

Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe

PE2CKFNT SE Registry (Machine Run) C:\Program
Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe

StillImageMonitor Registry (Machine Run)
C:\WINDOWS\SYSTEM\STIMON.EXE

QuickTime Task Registry (Machine Run)
"C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime

TkBellExe Registry (Machine Run) "C:\Program
Files\Common Files\Real\Update_OB\realsched.exe" -osboot

WinampAgent Registry (Machine Run) "C:\Program
Files\Winamp3\winampa.exe"

YBrowser Registry (Machine Run) C:\Program
Files\Yahoo!\browser\ybrwicon.exe

BJCFD Registry (Machine Run) C:\Program
Files\BroadJump\Client Foundation\CFD.exe

IPInSightLAN 02 Registry (Machine Run) "C:\PROGRAM
FILES\VISUAL NETWORKS\VISUAL IP INSIGHT\SBC\IPClient.exe" -
l

IPInSightMonitor 02 Registry (Machine Run)
"C:\PROGRAM FILES\VISUAL NETWORKS\VISUAL IP
INSIGHT\SBC\IPMon32.exe"

ViewMgr Registry (Machine Run) C:\Program
Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

LoadQM Registry (Machine Run) loadqm.exe

User Mansger Registry (Machine Run) user32.exe

Symantec Core LC Registry (Machine Run) C:\Program
Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
start

ccApp Registry (Machine Run) "C:\Program Files\Common
Files\Symantec Shared\ccApp.exe"

NAV CfgWiz Registry (Machine Run) C:\Program
Files\Common Files\Symantec Shared\CfgWiz.exe /GUID
NAV /CMDLINE "REBOOT"

LoadPowerProfile Registry (Machine Service)
Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

SchedulingAgent Registry (Machine Service) mstask.exe

EncMonitor Registry (Machine Service) C:\Program

Files\Encompass\Monitor.exe

ScriptBlocking Registry (Machine Service)
"C:\Program Files\Common Files\Symantec
Shared\Script Blocking\SBServ.exe" -reg

ccEvtMgr Registry (Machine Service)
"C:\Program Files\Common Files\Symantec
Shared\ccEvtMgr.exe"

ccSetMgr Registry (Machine Service)
"C:\Program Files\Common Files\Symantec
Shared\ccSetMgr.exe"

 

[Alan Edwards]

Please answer all questions.
Your anti virus should pick this up if up to date.
In the mean time, stop it starting.
Disable this line in MSCONFIG-Startup tab
(It is the only obvious nasty I can see)

User Mansger Registry (Machine Run) user32.exe

Report back after a reboot.

....Alan

 

[Guest]

Hey, it worked. I went into safe mode and deleted the
file user32.exe and everything is fine. Thanks for the
help

 

[Alan Edwards]

I hope that is all you needed to do as many viruses are more complex
than that.
Remove the Registry run key for "User Mansger"&user32.exe if you get a
"file missing" message. It will be somewhere under this key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
If you disabled it with Msconfig it will be:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-

....Alan