msconfigx32 keeps coming up

  • Thread starter Thread starter Michael
  • Start date Start date
Hi Michael,

I find nothing on msconfigx32. I do find this on msconfig32:
http://www.processlibrary.com/directory/files/msconfig32/

and it's not good. The legitimate windows file is msconfig, and it would not
be asking to access the internet. I would suggest you run a full system scan
in safe mode with an updated antivorus program.

How to start in Safe mode:
http://www.rickrogers.org/fixes.htm#Safe mode

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
If you mean msconfig32.exe, it's part of W32.Tulu virus. This Trojan allows
attackers to access your computer, stealing passwords and personal data.

Update your antivirus software and run a full system scan.

Sophos virus analysis: W32/Tulu-A
http://www.sophos.com/virusinfo/analyses/w32tulua.html

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Michael said:
my firewall says msconfigx32 wants to access the internet. What is it?
Click to expand...


Nothing good. It's most definitely not a Windows file. What specific
anti-virus application are you using? Are its virus definition files
current? What other sort of anti-malware applications are you using?

To deal with issues caused by any sort of "adware" and/or
"spyware," such as Gator, Comet Cursors, Smiley Central, Xupiter, Bonzai
Buddy, or KaZaA, and their remnants, that you've deliberately (but
without understanding the consequences) installed, two products that
are quite effective (at finding and removing this type of scumware) are
Ad-Aware from www.lavasoft.de and SpyBot Search & Destroy from
www.safer-networking.org/. Both have free versions. It's even possible
to use SpyBot Search & Destroy to "immunize" your system against most
future intrusions. I use both and generally perform manual scans every
week or so to clean out cookies, etc.

Additionally, manual removal instructions for the most common
varieties of scumware are available here:

PC Hell Spyware and Adware Removal Help
http://www.pchell.com/support/spyware.shtml

More information and assistance is available at these sites:

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

The Parasite Fight
http://www.aumha.org/a/parasite.htm

There are several essential components to computer security: a
knowledgeable and pro-active user, a properly configured firewall,
reliable and up-to-date antivirus software, and the prompt repair (via
patches, hotfixes, or service packs) of any known vulnerabilities.

The weakest link in this "equation" is, of course, the computer
user. No software manufacturer can -- nor should they be expected
to -- protect the computer user from him/herself. All too many people
have bought into the various PC/software manufacturers marketing
claims of easy computing. They believe that their computer should be
no harder to use than a toaster oven; they have neither the
inclination or desire to learn how to safely use their computer. All
too few people keep their antivirus software current, install patches
in a timely manner, or stop to really think about that cutesy link
they're about to click.

Firewalls and anti-virus applications, which should always be used
and should always be running, are important components of "safe hex,"
but they cannot, and should not be expected to, protect the computer
user from him/herself. Ultimately, it is incumbent upon each and
every computer user to learn how to secure his/her own computer.

To learn more about practicing "safe hex," start with these links:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

Home Computer Security
http://www.cert.org/homeusers/HomeComputerSecurity/

List of Antivirus Software Vendors
http://support.microsoft.com/default.aspx?scid=kb;en-us;49500

Home PC Firewall Guide
http://www.firewallguide.com/

Scumware.com
http://www.scumware.com/


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
Bruce,

Visited Ad-Aware to acquire LavaSoft's "free"
edition as you recommended but everything I
saw on the site required a purchase. Already
have Symantec Internet Security and PC Tools'
Spyware Doctor, so don't want to spend another
$40-50 bucks. I do have a old version of a free
Ad-Aware scanner but its definitions are dated
2004. LavaSoft offers no facility to update these
ancient definitions.

Do you have a specific "freeware" URL?
 
Thanks everyone. I did something quite brave after I found that it is
definitely not Windows msconfig file. I deleted it in the registry the one
that says run, runonce, runservices.

No more problem.
 
Michael,

If you did not get rid of the virus, you still have a problem. Is
msconfig32.exe still on your machine?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
It was msconfigx32.exe that kept asking to access the internet. I do not
know which program or which virus because EZ anitvirus found and deleted
several virus these past few days. But after I deleted msconfigx32 from the
Run, Runonce and Runservices registry it has stopped asking to connect and
is not found in the Task Manager / Processes. Hopefully the virus is
deleted.
 
Michael said:
Thanks everyone. I did something quite brave after I found that it is
definitely not Windows msconfig file. I deleted it in the registry the one
that says run, runonce, runservices.

No more problem.
Click to expand...

If you are nervous about removing something from the registry
you can always just rename the value and it has the same effect. Then
if you have undesirable results you can name it back to original. If
everything OK for a few days then you can delete it.

gls858
 
msconfigx32.exe is what I meant. Sorry about the typo.

Maybe EZ antivirus removed msconfigx32.exe but failed to remove the start
references in the registry.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
Michael said:
It was msconfigx32.exe that kept asking to access the internet. I do not
know which program or which virus because EZ anitvirus found and deleted
several virus these past few days. But after I deleted msconfigx32 from
the Run, Runonce and Runservices registry it has stopped asking to
connect and is not found in the Task Manager / Processes. Hopefully the
virus is deleted.
Click to expand...

<snip>
 
Back
Top