msqsrv32 or not

[ADS_Tech]

I have a customer who is adamant that he has an error message relating to msqsrv32. Thats spelt with a Q. I made the mistake of correcting him by saying its msgsrv32, but hes really getting persistant. He wants help over the phone, but how can I help him if we are looking at the wrong thing.
Its got to a stage where I now doubt myself. IS there a file called MSQSRV32???

Windows 98SE.

[Prince Abaddon]

Apprently there is, but it seems like the file is from windows ME. Maby a specific error message would allow for more research. Google also corrects the "spelling mistake"

found this:
http://www.computing.net/windows95/wwwboard/forum/12413.html

[ADS_Tech]

Cant find it on ME at all, and theres two ME boxes here.
Theres loads of folk whove googled it, but I cant see a single genuine thing about it, let alone on the MS knowledge base.

[ADS_Tech]

Every time I get somewhere, it points back to msG...

http://www.wintrouble.net/discus/messages/63/5023.html

But this guy is insistent its a Q.

[NooNoo]

virus checking - done that yet?
Its a standard trick, call the file something very close to a standard windows file.

[ADS_Tech]

The beligerent git wont run a scan until I fix the file. Im going round later so we'll see then.
But. Can I be positive that msQsrv32 is NOT a genuine file then?? I dont want to make a complete tit of myself when I get there! :thumbs2:

[The Computer Valet]

No, it's not a real file.

Interested to see what you come away with...

[ADS_Tech]

Went out to the PC yesterday to see it in the flesh for the first time.
PC was up to its neck in spyware, at 735 objects found by adaware, and 32 virus infections found before I stopped the scan. It was running at 34% system resources with more start up files than ive ever seen.
The guy initially tried to imply that id MADE the programs show that he had infections when really he didnt! I got up to leave at that point and told him to get a second opinion as he clearly thought I was a liar. He wife gave him a right b*ll*cking at that point for being a stubborn so and so, apologised for him, and asked me to sort it out.
I was quite sure when he first asked that it wasnt a genuine file, but some folk get so persistent that you start to doubt yourself...or is it just my paranoia. :rolleyes:

[confus-ed]

...or is it just my paranoia. :rolleyes:

Shhh! ... they'll hear you ! :devil:

[les]

Went out to the PC yesterday to see it in the flesh for the first time.
PC was up to its neck in spyware, at 735 objects found by adaware, and 32 virus infections found before I stopped the scan. It was running at 34% system resources with more start up files than ive ever seen.
The guy initially tried to imply that id MADE the programs show that he had infections when really he didnt! I got up to leave at that point and told him to get a second opinion as he clearly thought I was a liar. He wife gave him a right b*ll*cking at that point for being a stubborn so and so, apologised for him, and asked me to sort it out.
I was quite sure when he first asked that it wasnt a genuine file, but some folk get so persistent that you start to doubt yourself...or is it just my paranoia. :rolleyes:

Did you fix the problem? I am having trouble with this file, W98, networked & randomly cannot connect to the network, the switch connection lights are blank but then a reboot (but not the first) gets me on. Have reinstalled 98SE, run adaware which cleared out 111 objects but still having problems again today. Yesterday worked for 6 hours OK but today would not connect. Have now installed a spare pcmcia ethernet card & is corrently working after a fashion.

Any ideas?

[confus-ed]

Ah so welcome & all .. :thumbs:

Since I am my name, do you mean msgsvr32 (http://www.windows-help.net/windows98/troub-25.shtml) or msQsrv32 :D

So now you know msgsvr32 is just 'the message bearer' which alternative is your money on ?

[les]

It is the one with a "q"

[ADS_Tech]

msQsrv32 is not a genuine file. The message is thrown up by spyware. Remove the spyware and remove the problem.
I used adaware, spybot, CWShredder and kazaabegone.

[les]

Done all you suggested, I'll see what happens tomorrow, wish me luck.

[les]

This is still running, have had it running at restart & it not responding, only 3 other tasks running, kill msqsrv32 & machine continues. Have now run spykiller & we will see.

[confus-ed]

It is the one with a "q"

He-he-he ... I of course got confus-ed ! :D

So if its the one with a 'Q' then it isn't 'real' ... as said it's 'bad' :)

If none of your malware removers is getting it, try the 'daddy' - HijackThis (http://www.spywareinfo.com/~merijn/downloads.html)

[les]

He-he-he ... I of course got confus-ed ! :D

So if its the one with a 'Q' then it isn't 'real' ... as said it's 'bad' :)

If none of your malware removers is getting it, try the 'daddy' - HijackThis (http://www.spywareinfo.com/~merijn/downloads.html)


OK so I've downloaded Hijackthis, What do I do with the info?

PS it is still running when it feels like, screws up network connection & Outlook.

[NooNoo]

post the info here, we will help you dissect it.

[ghsam]

virus checking - done that yet?
Its a standard trick, call the file something very close to a standard windows file.

I'm not sure I knw how to that, name it something close to a standard file. I think your are right, though, I have a virus. Unfortunately I don'e even have a worinkg CD-ROM to load a new anit-virus program. I have and old version of Norton's running but haven't updated it for a long time. ihave ordered a new CD-ROM and am waiting for delivery.

do you think I can clear this thing up by just calling it another name? I'v heard of somenting about this before but it is burried under some heavy folds of gray matter.

I appreciate your help.

Thanks Gary

[confus-ed]

I'm not sure I knw how to that, name it something close to a standard file. I think your are right, though, I have a virus. Unfortunately I don'e even have a worinkg CD-ROM to load a new anit-virus program...

do you think I can clear this thing up by just calling it another name?

So NO it'll do no good ...

Okay dokey - so you don't have a virus, you have a trojan ! (similar yet different - a virus destroys data - a trojan pretends to be something 'nice' when its most likely spyware) - its collectively called 'malware' ;)

Post up the great long hijackthis log (as requested ;)) then we can advise .. :)

BTW - Anti-virus software is absolutely no damn good at all if you don't update the definitions ! :devil: ... For FREE - Try AVG free edition (http://www.grisoft.com/us/us_dwnl_free.php) (not the worlds greatest - but IMHO, pretty f. good, if you ain't paying ! :D)

[ghsam]

So NO it'll do no good ...

Okay dokey - so you don't have a virus, you have a trojan ! (similar yet different - a virus destroys data - a trojan pretends to be something 'nice' when its most likely spyware) - its collectively called 'malware' ;)

Post up the great long hijackthis log (as requested ;)) then we can advise .. :)

BTW - Anti-virus software is absolutely no damn good at all if you don't update the definitions ! :devil: ... For FREE - Try AVG free edition (http://www.grisoft.com/us/us_dwnl_free.php) (not the worlds greatest - but IMHO, pretty f. good, if you ain't paying ! :D)
Thank you for your input! How you distinguish between a virus and a trogan? and thanks for the free anti virus site. Unfortunately I have no way of injecting any athi-virus software, as I have no CD-ROM drive (it's broken, have been using an external) and I can only boot up in save mode, so I can't get on the internet to download anything. I guess there must be a way to operate in DOS, but I am not very adept in that operating system. do you have any suggestions as to how I can get around this set of obstacles?
Again, thanks for your input!

Ghsam

[confus-ed]

Thank you for your input! How you distinguish between a virus and a trogan? and thanks for the free anti virus site. Unfortunately I have no way of injecting any athi-virus software, as I have no CD-ROM drive (it's broken, have been using an external) and I can only boot up in save mode, so I can't get on the internet to download anything. I guess there must be a way to operate in DOS, but I am not very adept in that operating system. do you have any suggestions as to how I can get around this set of obstacles?
Again, thanks for your input!

Ghsam

So you are of course welcome :) ... & now I 'get' your problem - no cd & no internet access on your 'broken' machine :thumbs: ( you need to tell us all this stuff - so you'd have been better starting a new thread with all your symptoms & maybe linking that to this thread instead of 'hijacking' {tacking-on} to this one ...) I only just figured out you are the 3rd person asking on the same thread, 3 slightly different things ! ;)*

So let me try & answer (now I told you off!) .. :)

Briefly .. a virus is something that destroys data by alteration with a 'host', a trojan is a foreign process that pretends to be 'good' & a worm is a self replicating process that generally attacks networks - all refered to as malware - malicious software ... Malware vs. Virus vs. Worm vs. Trojan (http://www.utteraccess.com/forums/access/access560763.html) - so here I'd 'guess' it was trojan as its pretending to be msGsvr32 - like wot I wuz confus-ed wiff ! :D

They all though need something to 'work' that is either by infecting a file or getting something running to do it ...

You should be able to get these two tools onto a floppy & therefore your machine, as you must have net access to be asking me :D, so download these ..F Prot - dos anti-virus (http://www.f-prot.com/) (free for home users if you register) & the aforementioned HijackThis (http://www.spywareinfo.com/~merijn/) - malware remover (that's a 197k & I never got around to checking f-prot - BUT you can span pretty much any file over several floppies with something like winzip, just depends how many floppies you want to deal with ! So you could choose say avg as well & install that's dos version of AV & go with that if you prefer or 'whatever') ..

Then you run them :D - you probaly will need to copy the hijack this log maybe to a file & post that here, as they are very long & 'scary' & hopefully the av should do its stuff (though I think if it starts in safe mode hijackthis will reveal much as if it was a virus that stopped boot it'd stop safe mode too, while safe mode loads less 'stuff' dependant on whatever the hell o/s this is ...)

However ... hole in plot alert ! ... if this is on an ntfs file system (so NT anything, w2k or 50/50 on xp but not 9x that's FAT or FAT32) then you don't have dos but 'prompt' which is similar but not 'real' dos {file sytem is different} then the AV won't work & I'm gonna have a job on naming one ! like I said earlier though I think trojan ...

* Whoa I wrote loads .. & completely confus-ed whilst doing so ... no wonder it took to long to answer, when I didn't know which poster was asking what ! :D

[les]

Looks as though may have found where this little beast sits. Ended up setting up a new profle in Outlook & now for 4 days it has been absent. So does it attach itself to something in the user profile settings in Outlook?

[NooNoo]

what is it called?

[les]

what is it called?
MSQSRVexe

[xkite]

visit this link
http://www.annoyances.org/exec/forum/win98/1051678384