Printable View
When I usually go to sleep, I put my PC on standby. When I reload it, my resources suddenly get eaten up by an msmsgs.exe. I know thats Windows MEssenger, but I disabled it, because it was a pain in the ars. Anyone know what to do? :helpsmili :whistling :unsure:
Do you actually want the shit on your P.C still or do you just want to kill it?Quote:
Originally Posted by numba1xclusive
Go to: Start > Run > type msconfig > click 'startup' tab > UNcheck 'msnmsgr' (and MsgPlus if it's there).
Then open MSN Messenger and go to Tools > Options > click 'Preferences' tab > UNcheck 'Run Windows Messenger when Windows starts'. Also UNcheck 'Allow Windows Messenger to run in the background'.
I already disabled it, thats the funny part. I did the msconfig thing a while back, and it was fine. I dunno if I want to kill it, just make it stfu. It really j ust freezes my PC up like a faggot.
MSN Messenger & Windows Messenger are two different programs. You say that you have disabled Windows Messenger, but that exe file thats eating all your processing power is for MSN Messenger, a program which you havn't disabled.
msmsgs.exe is windows messenger, peerzy :P
now, msn messenger may run under the same executable
hell if i know, beause i dont use it :P
msnmsgr.exe is msn messenger
not sure about older versions, i.e 4.7
msn messenger is called msnmsgr.exeQuote:
Originally Posted by Peerzy
msmsgs.exe is windows messenger. :P
this only works in xp pro but try going to start>run>type 'gpedit.msc'>computer configuration>administrative templates>windows compnents>windows messenger>then there are two items on the list double click then enable each.
worked for me.
Even though you may have disabled it, another program you installed may have created a second instance which runs on start up. I had that problem several times(NAV is notorious for that with it's messenger protection). Even some hardware will reactivate it, i.e. webcams, digital cams...... and even some online games.Quote:
Originally Posted by numba1xclusive
Aha. I have NAV 2005,and it seems to eat my system resources for an AV.Does it really create a seperate instance, because if it does, i'll switch over to AVG or Kaspersky. Btw, its definately WIndows Messenger, because I dont use MSN Messenger, and it says msmsgs.exe.
Check in msconfig, if it's not a second instance, then, NAV just reactivated the start up. And yeah, NAV is a resource hog, always has been, but it's a good AV for all that. AVG is okay as a secondary AV, but I would still go with Kapersky or even keep NAV. Btw, are you using just the AV from norton or the entire system works suite?
It is also a virus .
http://www.auditmypc.com/process/msmsgs.asp
Don't mean to say you have it. Just a thought . Many spyware/malware programs use filenames of usual, non-malware programs.
I had to delete Msmsgs off the startup list using the regcleaner prgm. I thought it was gone using msconfig, apparently not. Would Msmsgs interfere with dialup prgms?
I have a question , Could you post a hijackthis log in this post ?
http://www.download.com/3000-8022-10227353.html
Not for me but others may see something .
Here it is
Quote:
Logfile of HijackThis v1.98.2
Scan saved at 11:25:58 AM, on 3/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Documents and Settings\Kedar\Desktop\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?link...67&clcid=0x409
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...3/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1094246344062
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/sh...20/mcgdmgr.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15009/CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0EB741FD-0F84-4119-9AA0-45CD6915C269}: NameServer = 165.87.194.244 165.87.201.244
O17 - HKLM\System\CS1\Services\Tcpip\..\{0EB741FD-0F84-4119-9AA0-45CD6915C269}: NameServer = 165.87.194.244 165.87.201.244
Most of those regkeys seem like innocent prgms.
I doubt it's related but fix this:
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
I used this on many pc and it seems to work at stoping that shit from loading with IE and OE as well...
You could check out the file Ive attched also.Quote:
Copy this code:
RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove
Go to Start - Run - CTRL+V
Quote:
Originally Posted by rossco
And whats this ? :lookaroun
C:\WINDOWS\system32\ssoftsrv.exe
dunno. didnt notice that before. ;)Quote:
Originally Posted by peat moss
fix that too. :schnauz:
Quote:
Originally Posted by rossco
Ya Ross it's one of those grey areas . But everthing I read about the virus angle was to look for sysyem32 entries. I 'm just looking at at all possible angles. I would appreciate if someone did that for me . :)