Computing.Net > Forums > Windows 95/98 > Runtime error 216 at 000043F2

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Runtime error 216 at 000043F2

Reply to Message Icon

Name: Jeff
Date: July 2, 1999 at 22:48:17 Pacific
Comment:

Ok stupid question here. I keep getting this runtime error and I can not seem to fix the prob. It usually Pops up when I have multiple programs working at once (when close one or the other). Does anyone know what I can do to fix it?



Sponsored Link
Ads by Google

Response Number 1
Name: Terry
Date: July 11, 1999 at 05:37:42 Pacific
Reply:

Hi I had a runtime error a few years ago after changing up to a Pentium II it was caused by the programs not expecting the speed of the pentium II you might be able to get fix's info from intel go to intel and type runtime in the search box hope this is of help to you,,,,,, bye


0

Response Number 2
Name: Nigel
Date: January 3, 2000 at 05:03:05 Pacific
Reply:

Did you manage to fix the problem?

I have exactly the same problem now - started appearing about 2 weeks ago. Been unable to fix so far despite trying many things.

Can you help? I'm getting desparate

Thanks and Happy New Year


0

Response Number 3
Name: Richard
Date: January 10, 2000 at 16:29:52 Pacific
Reply:

Same thing here, really getting up my nose now. Anyone please help!!


0

Response Number 4
Name: Tal
Date: January 11, 2000 at 01:27:23 Pacific
Reply:

The same thing is happening to me!! It's been like this for about 3 months now and it is driving me insane!! I think mine happened after i installed new drivers for my sound card. If anyone knows how to fix it please e mail me, thanx :)


0

Response Number 5
Name: runar lunde
Date: January 12, 2000 at 13:41:17 Pacific
Reply:

i have the same problem only i also have a runtime error at 0002938 which seems to be internet/explorer related and since i don't know much about computers help would be highly appreciated!


0

Related Posts

See More



Response Number 6
Name: Kurt Mastrovich
Date: January 18, 2000 at 00:01:46 Pacific
Reply:

I am having this runtime error as well, It ussually happens with OE/IE and NFS:HS when I shut them down. Does everybody find that they cannot restart or shutdown and pressing okay does nothing?


0

Response Number 7
Name: August Steinbacher
Date: January 18, 2000 at 06:02:10 Pacific
Reply:

Since 3 days, I have this problem, too. It happens, when I try to transfer files from a host in our local network to my PC. I think, it has to do something with the "NetBEUI" - protocol. Please help me!!!!


0

Response Number 8
Name: can
Date: January 19, 2000 at 08:49:15 Pacific
Reply:

the same problem appeared on my comp. just after smo. were inside it and changed some files.and since then i cannot be able to solve this problem.please help me!!!


0

Response Number 9
Name: can
Date: January 19, 2000 at 08:52:10 Pacific
Reply:

sorry for forgetting to say that intel.com could have no help for this problem.i wish YOU would help!!


0

Response Number 10
Name: Mike Kupiecki
Date: January 20, 2000 at 06:55:21 Pacific
Reply:

I have the same problem when I connect to my other ISP. It happens if I go to fast or try disconnect while still running?
Some one please help!


0

Response Number 11
Name: Ron
Date: January 23, 2000 at 15:01:41 Pacific
Reply:

Same 0002938 and 43f2 while in IE5.0?? any one find what problem is??


0

Response Number 12
Name: Chad
Date: January 25, 2000 at 13:37:53 Pacific
Reply:

I have been receiving this error for about 1 month now and ever sice then my computer has been acting erradicly. It happens when I run AOL IM, WINIPCFG, when I close Need For Speed 3, or close programs like AOL IM or my proxy server. IF ANYONE CAN HELP PLEASE TELL ME! This is causing me headaches because I have a network running off of 1 phone line over a proxy for 2 computers and it doesn't help having this error pop-up.


0

Response Number 13
Name: Kurt Mastrovich
Date: January 25, 2000 at 15:20:31 Pacific
Reply:

I was told by someon that it could be because of a Trojan and was told to try the Cleaner a Trojan finding program as well as do a scan with my Virus software, unfortunately I found nothing. But it may work for others of you.


0

Response Number 14
Name: Mary Otten
Date: January 27, 2000 at 15:07:04 Pacific
Reply:

I am going nuts here I have this error also
I can't tell when it is going to pop up but it is affecting my whole system My computer coompltely locks up!
I was wondering if the new icqb or the icuii program may be at fault. It does not have any particular program that causes it to appear......please help if anyone can thanks


0

Response Number 15
Name: Nan
Date: January 28, 2000 at 04:50:13 Pacific
Reply:

Try windows critical update page, http://windowsupdate.microsoft.com/ go to product updates & download internet explorer (& outlook express) 5.01 (about 2hr download), then download the two patches....this has seemed to cure the problem for me. I've been fighting furiously with this thing and hopefully I WON'T have to format my hard drive as several support sights recommended!


0

Response Number 16
Name: Nan
Date: January 28, 2000 at 05:14:46 Pacific
Reply:

OOPS! I spoke too soon....damn!

Well atleast I got a little while in and out of IE/OE without the error! I'm still not going to format my hard drive!


0

Response Number 17
Name: Andy Bale
Date: January 29, 2000 at 10:51:32 Pacific
Reply:

I just did a search to see if i could find any help for my problem. It came up with u guys! Im surprised that so many people have the same problem.

Does anyone know how to stop it??? If so please please help me!!


0

Response Number 18
Name: jonnyGURU
Date: January 30, 2000 at 17:15:03 Pacific
Reply:

It's a trojan "virus" and it's easy to remove. Take a look at http://home.tampabay.rr.com/jguru/SubSeven.html for information.

It is triggered by being online. Thus why the error pops up while you are using IE, ICQ, etc.


0

Response Number 19
Name: PuRePaiN14
Date: January 30, 2000 at 22:56:42 Pacific
Reply:

I have a runtime error and every time I log into windows it pops up. It wont let me go into any programs exept AOL. How can I fix this error?


0

Response Number 20
Name: Ross
Date: February 4, 2000 at 01:15:35 Pacific
Reply:

Jonnyguru - your blood's worth bottling! I've been having this runtime problem for 4 weeks and found this site a week ago and now just found your post. But after I did what your link said, (my trojan was called rundll16.exe) as soon as I re booted the damn file was re-created and the problem came back every time. So I found that there were two other files with the same create/amend date as rundll16.exe - (which was 6 oct 1999) and deleted them. CSP.EXE(328K) and WATCHING.DLL(14KB) CSP.exe was being started by my Windows Registry so I deleted that too ("Sonic"). Now I'm an amateur in this but it seems to have worked. The scary thing is that I read on a UK website (symantec I think) that trojans are used to collect passwords from your computer to access your ISP etc. So now I will change them! Where did I get it? The only thing I've done different in recent weeks is access and download free internet offers here in Australia and 2 USA sites that promise payment for surfing. The Symantec site says that they are common sources of this virus.
Good Luck Everybody


0

Response Number 21
Name: James
Date: February 7, 2000 at 12:58:19 Pacific
Reply:

I also had this problem. It too turned out to be a Trojan. It seems that all actions were being recorded by a program called windows\windos.exe, then appreantlly transmitted through IRC with windows\msrexe.exe.

If you have these files then you might have been infected. Read this page for help.
http://split.netset.com/miscfix/subseven.shtml

I had the *GOLD* version.


0

Response Number 22
Name: Ran Z. Goldstein
Date: February 8, 2000 at 09:23:18 Pacific
Reply:

Hi,
I used to have the same error - unfortunatley none of your solutions worked! HELP ME I AM DESPERATE!


0

Response Number 23
Name: James
Date: February 8, 2000 at 19:15:56 Pacific
Reply:

I had to remove the command to load "msrexe.exe" from the windows registry, then boot to dos mode, then delete "windows.exe" and "msrexe.exe" from the windows directory, then delete systray.dll from the windows/system directory (all while in DOS mode).

Then when I booted back to windows, no programs would run without the program "windos.exe", so I reinstalled windows ontop of itself and everything is back to normal...(thank gawd) AND I didn't lose any data.

Good Luck


0

Response Number 24
Name: James
Date: February 8, 2000 at 19:16:58 Pacific
Reply:

OOOPS!!!

I meant to say delete the file "windos.exe"

sorry.


0

Response Number 25
Name: Mr Clean
Date: February 10, 2000 at 01:06:32 Pacific
Reply:

I found an answer that worked for me .. very simply follow the instructions here...

http://vil.mcafee.com/vil/RAT10566.asp

I found it VERY helpfull. :)


0

Response Number 26
Name: No Virus
Date: February 10, 2000 at 14:45:16 Pacific
Reply:

Exact same problems as everyone else. All I did was rename the file MSREXE.exe in my windows dir to something useless like .xxx and removed the run command for it,from my win.ini file. All the errors have stopped. I sent the file to Symantic Antivirus Research Center and it came back CLEAN...?
Seems too easy, does anybody know what this file belongs to if it's not a virus and windows doesen't seem to miss it...?


0

Response Number 27
Name: Virus Fixed for Now....
Date: February 14, 2000 at 10:11:47 Pacific
Reply:

Just used the fix from URL posted in response #25. The virus seems to be gone.
We'll wait and see if it pops up again. I am NOT very computer literate, but was able to follow the directions and defeat this bug.
One problem persists: How to remove a command in the Run line that "points" to the download that started this whole mess. Any advice? Please feel free to e-mail solutions. Just don't expect me to open any attachments!


0

Response Number 28
Name: Tony
Date: February 26, 2000 at 10:54:17 Pacific
Reply:

I'm working on the same problem... will post results as I get them. Am starting the process today after 3 months+ of the 216 rte.
Wish me luck!


0

Response Number 29
Name: Lez
Date: February 26, 2000 at 16:01:23 Pacific
Reply:

Having read All the comments above I believe I have cleared the Problem. I had a very recent version of Sub-Seven Trojan causing the problem and a file called MSREXE.exe. see web page http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_SUB7GOLD.21 for help


0

Response Number 30
Name: Walt
Date: February 26, 2000 at 18:31:19 Pacific
Reply:

I had this problem too. The Cleaner found it
McAfee and Norton did not. It was sent to me as a jpg from a guy on ICQ His screen name is
C-V-3D -=DT=- ICQ number 24010286
email address cyris_76111@yahoo.com
Homepage is a hacker site. WWW.v3dworld.8m.com Watch out for this guy


0

Response Number 31
Name: ryan coke
Date: February 26, 2000 at 21:57:52 Pacific
Reply:

i downloaded The Cleaner and it found i had a trojan which was causing this error. go to download.com and download the cleaner 3.0 and register it using this:
name: CZY
serial: 37D6-0993-E49E-C838


0

Response Number 32
Name: Ted Baker
Date: February 27, 2000 at 05:16:32 Pacific
Reply:

The trojan is called SubSeven.
And it works like Netbus but is far more advanced.
I got the runtime error just after someone had installed the server file from Subseven on my computer.
Use The Cleaner 3.0 (www.moosoft.com) to get rid of all files connected to Subseven.
If you have done it right the error message should disappear.


0

Response Number 33
Name: John
Date: February 27, 2000 at 08:03:51 Pacific
Reply:

Most of your problems seen to be coming from the same MRSEXE.exe
It's from the Sub7 program, you download it, sometimes it's binded with another program so you can't see it. The reason why windows and antivirus programs can't find it is because it's not a virus. It's a server that allows people to enter your computer through a certain port. I also had that problem and I did some research of my own and this is what I got. So, just know what your downloading and that you know its from a secure site that wouldn't bind things to the programs. And for the people that have Sub7, and you have the server on your site, thats because you double-clicked on the server program. You don't need a cleaner, all you need to do is erase MSREXE.exe, erase it out of WIN.ini, erase out of the windows registry, and the windows.dll


0

Response Number 34
Name: Ted Baker
Date: February 27, 2000 at 08:43:59 Pacific
Reply:

That is also a good way to get rid of SubSeven. I used that method. But using The Cleaner is much more simple. And if you get any other trojans in the future there is always The Cleaner.


0

Response Number 35
Name: Max
Date: February 27, 2000 at 10:36:24 Pacific
Reply:

Uhh, ok. MSREXE.exe is NOT on my computer, but it still tries to run even when I erase it from win.ini. ok, so how do I get it out of the windows registry AND windows.dll?


0

Response Number 36
Name: Jarrod
Date: February 27, 2000 at 20:54:09 Pacific
Reply:

Hello,
I recently started getting runtime errors and errors starting up having to do with msrexe.exe. I updated my Norton virus definition files and then I saw that I had the virus. There were 3 files connected to it. msrexe.exe, mueexe.exe, and backdoor-g.x (x im not sure what the ending for that file was)

I deleted this file like an idiot, and now I cannot access anything on my computer because all the programs say they need "mueexe.exe" to run. I cannot even reinstall windows 98 because of something different. Now I really dont know what to do. Remember.. I cannot open regedit or ANYTHING. I have no idea how I am using netscape because this is the only program that will open. Thank God.
Any help is MUCH appreciated. Im in the dark here.
Thanx very much,
Jarrod


0

Response Number 37
Name: Nick
Date: February 28, 2000 at 03:10:46 Pacific
Reply:

I get "Runtime error 216 at 000043F2" whenever I sign onto the internet and I can't send files out, I can't open My Computer, once I get dissconected I can't reconnect, when I try to restart my computer it freezes so I have to turn it off and on, and ect. stuff happends. PLEASE! Someone help me!!


0

Response Number 38
Name: Tony
Date: February 28, 2000 at 09:23:49 Pacific
Reply:

For ALL runtime error 216 problems...
READ the messages from #25-#32 above for your answer to the rte216 problem.

I found an answer that worked for me .. very simply follow the instructions here...
http://vil.mcafee.com/vil/RAT10566.asp

I downloaded The Cleaner and it found I had a trojan which was causing this error. Go to
www.moosoft.com and download the Cleaner 3.0 and register it using this:
name: CZY
serial: 37D6-0993-E49E-C838


0

Response Number 39
Name: Chris Kampouris
Date: March 2, 2000 at 19:47:40 Pacific
Reply:

I'm having the same god damned problem. I always occurs when I run notepad. I guess NOTEPAD's infected......


0

Response Number 40
Name: Tony
Date: March 3, 2000 at 08:48:18 Pacific
Reply:

Chris, if it is in fact the trojan noted, then notepad is NOT infected... READ the messages from #25-#32 and go to the sites noted for your answer to the rte216 problem.


0

Response Number 41
Name: Steve
Date: March 3, 2000 at 13:34:48 Pacific
Reply:

I was planted with this virus and I found it to be called the backdoor-g2.svr.gen virus, after someone named viper66 IP address, 24.114.141.84 hacked into my computer, and then laughed saying have fun reformatting your hard drive.After doing several and I mean several scans nothing was found.But low and behold it was there.After several searches we found a netscape wallpaper.bmp that we did not download from anywere.We still had the problem. And again after several more searches we found another netscape wallpaper .bmp located somewere else also. We are still working on this problem. make sure your virus detection agent is very much updated.If you have any concretye ways of getting rid of this please e-mail me . We are still plagued with the error message can not find msrexe.exe


0

Response Number 42
Name: Chris
Date: March 3, 2000 at 16:31:45 Pacific
Reply:

I think I found the error to the problem...all you have to do is delete the file...

In my case though, I could not delete the file because the file (MSREXE.exe) was already running. All I did was go to DOS and type this: del "msrexe.exe". The problem is solved!!!


0

Response Number 43
Name: Chuck
Date: March 4, 2000 at 05:53:47 Pacific
Reply:

After 2+ months with this problem, i finally took someone's advice and downloaded The Cleaner 3.0 from download.com. It located the Trojan virus (windows\windll32.com). Norton's hadn't picked up on it. Problem appears fixed!!


0

Response Number 44
Name: Graham
Date: March 4, 2000 at 16:57:00 Pacific
Reply:

Hey in response to # 31, I got it at that web site when I downloaded a hacked program that gets rid of the advertisement bar for, bluelight, netzero ect.


0

Response Number 45
Name: dave
Date: March 4, 2000 at 20:12:15 Pacific
Reply:

I had the same problem and the updated virus definitions for Norton did catch it while the Cleaner on my computer did not. I suggest that you keep up your virus definitions as much as possible.


0

Response Number 46
Name: Charlie
Date: March 5, 2000 at 07:51:36 Pacific
Reply:

I seem to have noticed that I have the MSREXE file in my windows directory. I found out that I had as soon as my Cable Modem Company (Mediaone/Roadrunner) cancelled my service saying that I was doing some Hacking of anyother computer. This was on Feb 29th that they showed the "incident" and shut me off on March 2nd - after "they" determined my system to be "secure" for possible outside control! And because my ports showed security "they" deemed it to be me hacking another computer or someone in my house! I for one have no idea how to hack and my wife doesnot and I doubt my 3.5 and 2 yr olds know how too!!!
Anyhow Mediaone said since it appears to have been my house hold that is hacking they are shutting me down and there is nothing I can do about it other than get another ISP (which I did to research this problem that Mediaone appearantly does not want any part of!)
So thanks to a friend and this site and the links off of it I believe I have the problem nailed down. But will not take action with cleaning it till I speak with Mediaone tomorrow and explain the research that I did and what they think about it.
Either way I think I will contact the media in my area and alert them so that they can hopefully try to alert others of the dangers of SubSeven!
Thank you for listening/reading ...I will post a follow up as to what happens on my end.
Charlie
(the much wiser surfer)


0

Response Number 47
Name: Anish Shah
Date: March 5, 2000 at 08:10:04 Pacific
Reply:

Hi,
i stumbled onto the site by mistake... i used to get the error when i wanted to shutdown my computer... i could remove it by manually shutting down loadwc program in the close program dialog that appears on pressing CTRL+ALT+DEL.
I updated my Norton Antivirus and it detected the trojan..i have deleted the the file.. MSREXE.exe which was infected by Backdoor.Subseven Virus/trojan... hopefully my computer will work properly now... are there any effects of this virus ? and will i need the msrexe file again ?


0

Response Number 48
Name: LIZ
Date: March 5, 2000 at 08:48:20 Pacific
Reply:

the runtime error 216 at 00043F2 kept on appearing on my computer everytime i try to disconnect it appeared and my pc is kept on hanging


0

Response Number 49
Name: Paul
Date: March 6, 2000 at 21:11:19 Pacific
Reply:

Well i am a computer newbie..on the net a bit..and i have found this MSREXE.exe and cannot delete it.Says it is running already..seems to affect soundrecorder applications too. PLEASE HELP ME!!
Thanks


0

Response Number 50
Name: Paul
Date: March 7, 2000 at 14:45:47 Pacific
Reply:

MSREXE.EXE..well i went into dos and eliminated these files...checked the registry...and all is ok now...picked up a bit of memory too!!
Keep your eyes out for this one it is nasty!!
Paul


0

Response Number 51
Name: Glenn
Date: March 8, 2000 at 10:21:21 Pacific
Reply:

I recently bought and installed Norton System Works. I ran the antivirus and got a message that said that MSREXE.exe is infected and it asked me what to do. I deleted it and now whenever I start up Win98 I get 3 messages all saying some error about MSREXE.exe required to run and make sure its linked to the .DLL's and correctly used in my WIN.INI file. I deleted it out of my WIN.INI file but it still gives me the same 3 errors when I go into WIN98. I don't get any problems with any of my other programs but I am having a partition problem with partition 2's dos partition. What does this mean? It also says I'm missing 35MB of disk space. Any help would be great.
Thanks in advance,
Glenn


0

Response Number 52
Name: Michele
Date: March 9, 2000 at 08:29:29 Pacific
Reply:

I just cleaned up the msrexe.exe on my system. http://vil.Mcafee.com/vil/RAT10566/asp does work to correct error messages!...my only question now is anyone experiencing difficulty download from the net? Each time I click to download I lose my modem connection. I tried download a zip file and it said it completed but when I look in the zip it said I had '0' files! I cannot do any updates to any of my programs...help!


0

Response Number 53
Name: cindy
Date: March 11, 2000 at 15:37:18 Pacific
Reply:

I used the response in #26 but how do I remove the run command in the win.ini.file?


0

Response Number 54
Name: dragon39
Date: March 17, 2000 at 20:24:35 Pacific
Reply:

some fool sent me some file via icq. i was another bigger fool for opening it and he stole my icq# right before me! now i have the same error as you guys and hopefully can delete the damn trojan. any other help as to how i could get back my six digit icq?


0

Response Number 55
Name: steve
Date: March 19, 2000 at 15:55:47 Pacific
Reply:

had same problem it was a trojan virus i updated my norton anti-virus and it found it right away


0

Response Number 56
Name: Robert
Date: March 22, 2000 at 23:10:00 Pacific
Reply:

I was having the same problem as you all and have since cleaned my computer completely of the trojan. For the guys that are wondering how to get rid of the error messages that you are getting when you go into windows now.

First you will have to go to Run then type edit c:\windows\win.ini once that you enter that you will get a blue box with text in it. There is be a line at the top that has several options to select one of them i believe will be find. Click on the find option and type in msrexe.exe and anyline that it finds with that in it delete it. Once that all of the entries are deleted you will then need to click on the file selection at the top of the box and select the save command. You may also need to do this with the c:\windows\system.ini but i cannot remember for sure so check to be on the safe side.

Now to get rid of the Registry entry that is popping up a error message when you boot.

Go to Run once again and this time type in regedit. Once that you do this you will have a box pop up. On this one you will need to click on the Edit option at the top of the box. Once that you do this you will then need to select the Find option. Once that you do this you will have another little box pop up that says find at the top (DUH) in this type in msrexe.exe. Once that it does it's thing it will bring you upto a line that has the msrexe.exe in it to you get rid of this all you do is right click on where it says it and select the delete option then go back to the edit menu and it will have a find next option click that and follow the steps that I told earlier to clean the entries if there are anymore. Once that the registry is clean of that file name it will come up with something saying tha tthe name was not found or some thing along those lines. Click the little X at the top and you are done.

Atleast that was the case with my computer.

That was a little long but i am a little pissed that it was on my machine and I had to get it out somewhere.


0

Response Number 57
Name: SteveD
Date: March 24, 2000 at 09:47:06 Pacific
Reply:

So far so good... thanks to all for the GREAT help with this nasty little __________! The URL for the McAfee Virus Information Library, vil.mcafee.com/vil/RAT10566.asp, for this trojan was invaluable. A couple of info points: (1) the loader on my system was named MUUEXE.exe and came from UOHS.EXE, (2) my kid brought the trojan onto the system by downloading a "cheat type" of file for the Ultima Online game - the file was supposed to help him buy a house in this role-playing game (thus the name UOHS). Be sure to NOT remove the trojan with the CLEANER 3.0 until the registry and INI files have been cleaned up.


0

Response Number 58
Name: Bob
Date: March 26, 2000 at 07:22:28 Pacific
Reply:

I got the trojan at Netmeeting.

My Norton anti-virus version 4.04 with live update picked it up. The file was "mon2.jpg.exe". I don't even recall ever accepting the file. I had Norton delete it when it found it.

Then I used Robert's helpful "Response #56". In c:\windows\win.ini I found two files with "msrexe.exe" and I deleted them. In reg edit I found one file with "msrexe.exe" and I deleted it. I didn't find any files with "msrexe.exe" in c:\windows\system.ini.

So far everything is working normally again and no "Runtime Error 216 at 00002938"!

To Robert at Response #56 : My grateful thanks. I appreciate your taking the time to carefully explain the procedure to get rid of this trojan.


0

Response Number 59
Name: Bruce Malmat
Date: March 28, 2000 at 06:51:46 Pacific
Reply:

I have a different version of the problem (I think). None of the fixes suggested here (or at other sites offering help with Sub Seven) would work for me. I did not have the files in question. However, the information given was sufficient to help me figure it out. I think I have a different form of Sub7. In my case, I think C:\windows\unwise32.com was infected. Here's how I found and fixed it:

POSTED FIXES DID NOT APPLY:
C:\windows\win.ini contained Shell=
Explorer.exe, which is normal.

Did not have any of the peculiar files:
msrexe.exe
windos.exe

Did not have the specified, peculiar
entries in these registry areas:
HKLM\Software\Microsoft\Windows\
CurrentVersion\RunServices

HKLM\Software\Microsoft\Windows\
CurrentVersion\Run

I DID HAVE THIS REGISTRY ANOMALY:
[HKEY_CLASSES_ROOT\exefile\shell\open\
command]
@="muexe.exe \"%1\" %*" <--
TIP-OFF: THE SUSPECT windos.exe FILE DID
NOT EXIST, AS SUGGESTED IN VARIOUS POSTS,
BUT I DO HAVE A KEY CALLED WinDos IN
HKLM\Software\Microsoft\Windows\
CurrentVersion\Run
IT CALLS UP unwise32.com, WHICH WAS
LOCATED in C:\windows.

THIS FILE IS SUSPICIOUS. WHY WOULD THERE BE A FILE CALLED unwise32.com WHEN THERE IS ALSO A FILE CALLED unwise32.exe? PERHAPS ONE OF THESE FILES IS BOGUS.

AND WHY WOULD A 32-BIT VERSION OF unwise HAVE A .com EXTENSION? THAT EXTENSION IS LARGELY ABANDONED. ONLY LEGACY 16-BIT STUFF USES .com.

EXAMINING THE unwise32.com FILE WITH A HEX EDITOR, WE SEE THIS TEXT:
$Info: This file is packed with the UPX executable packer $..$Id: UPX 0.84
Copyright (C) 1996-1999 Laszlo Molnar & Markus Oberhumer $..$Id: NRV 0.61
Copyright (C) 1996-1999 Markus F.X.J. Oberhumer $..$License: NRV for UPX
is distributed under special license $..UPX!....W....n..............&..

MIGHTY STRANGE. WOULD MICROSOFT USE A THIRD PARTY PACKER? EXPECIALLY ONE
WITH NO REAL "BRAND" NAME?

---------------------------------------

MY FIX:

CHANGED REGISTRY:
[HKEY_CLASSES_ROOT\exefile\shell\open\
command]
@="\"%1\" %*"
WAS --> @="muexe.exe \"%1\" %*" <--

DELETED FROM REGISTRY:
[HKEY_CLASSES_ROOT\.dl]
@="exefile"
"Content Type"="application/x-msdownload"

RENAME FILE:
C:\windows\unwise32.com (try to add .not
extension).

Could not do so (file in use).
That file is dated 2/05/2000.

DELETED FROM REGISTRY:
Removed subkey "WinDos"="unwise32.com"
from [HKEY_LOCAL_MACHINE\SOFTWARE\
Microsoft\Windows\CurrentVersion\Run]

REBOOT TO DOS (SO THAT I CAN RENAME THE
unwise32.com FILE)

RENAME:
C:\windows\unwise32.com to to
C:\windows\unwise32.co
This prevents it from loading after reboot

EXIT DOS, RESTART WINDOWS

BOOT-TIME COMPLAINT:
Cannot run unwise32.com, please remove
from win.ini (OKAY, OKAY!)

RENAME:
C:\windows\unwise32.co to
C:\windows\unwise32.com.not

CHANGED FILE:
Edited C:\windows\win.ini, added ; comment
in front of run=unwise32.com


It's only been a short while since I did this, but so far, I get no more RTE 216.


0

Response Number 60
Name: Nicolas Rocca
Date: April 1, 2000 at 10:58:36 Pacific
Reply:

you have a trojan, download a program from :
http://www.moosoft.com/cleaner.html


0

Response Number 61
Name: Bucky Toofiss
Date: April 4, 2000 at 21:56:04 Pacific
Reply:

4 April 2000

Aloha Runtime error 216 at 000043F2 Blues Users,

I got that same error message again today, and on and off for many weeks if not months now. I think that a "trojan" has been causing the Runtime error 216 at 000043F2 message to occaisionally occur whenever I attempted to shut own my Windows 95 OSR2 system i.e., "Shut down the computer?"

Earlier, as a precaution, I just happened to update my InoculateIT Anti-Virus Software
program, today.

You can download the same updated version for FREE at URL:

http://antivirus.cai.com/ (News Flash: New version 5.1 released!)

And I installed the PROG. Guess what? Now I'm Searching for [ Win32.SubSeven.21.C+trojan ] ... and [ MSREXE.exe ] at www.37.com .

InoculateIT has "Deleted" a file.

C:\WINDOWS\MSREXE.exe was infected with Win32.SubSeven.21.C trojan. Not a virus. Deleted.

So, there you go.

Also, please visit my updated web site by leading your browser to
"welcome dot to slash rambo."

I look forward to your comments. Hee hee hee.

Enjoy,

Bucky (aka Haole, etc.)

STATS:

Napster:
buddyPhone: Bucky Toofiss
Bucky: bucktoof@hotmail.com
URL: welcome.to/rambo
Web: http://members.tripod.com/~R_Rambo/buckhome.htm
My ICQ: #13676251, "Haole"


0

Response Number 62
Name: Bucky Toofiss
Date: April 6, 2000 at 13:34:32 Pacific
Reply:

6 April 2000, Thursday

Aloha All Users Affected by Runtime error 216 at 000043F2,

Read this entire document as it may save you some trouble.

A "new" FREE A-V product as it has just helped me remove a trojan from my Pentium II 266 MHz IBM clone PC.

Tuesday evening, I updated my InoculateIT Anti-Virus product from Version 4.5 to 5.1 (5.1.0.6). It's located here: C:\Program Files\InoculateIT PE\Vet95.exe

NOTE: Upon running a complete system scan, InoculateIT reported this:

C:\WINDOWS\MSREXE.exe was infected with Win32.SubSeven.21.C trojan. Not
a virus. Deleted.

I have located other documents on the web related to this "trojan" and a web site which provides downloads of (a version) an actual client at URL:

http://subseven.slak.org/main.html

Periodically, I have received a Runtime error 216 at 000043F2 on and off for many weeks if not months now. I think that the Subseven "trojan" has been causing the Runtime error 216 at 000043F2 message to occasionally occur whenever I attempted to shut own my Windows 95 OSR2 system i.e., "Shut down the computer?"

The only other weird symptom that may have occurred was my PC seemed to have been remotely rebooted/restarted one day recently without a normal reset by me, while I was connected online and I may have been actively running ICQ.

SYMANTEC discusses the SubSeven 2.0 Server (Aliases: Backdoor.Trojan, Pinkworm, BackDoor-G2.svr.21) topic at their URL:

http://www.symantec.com/avcenter/venc/data/sub.seven.20.html

F-Secure Virus Information Pages for Backdoor.SubSeven is/are located at URL:

http://www.datafellows.com/v-descs/subseven.htm

I found a document on the web, The Basics of SubSeven (aka Sub7 or Backdoor_G) at URL:

http://www.commodon.com/threat/threat-sub7.htm

I've been investigating the SubSeven (aka Sub7 or Backdoor_G) trojan infection on my machine for the last three days. I'll be cutting out mention to it by EDITING my system.ini file today, and hopefully all parts or pieces of the sucker will have been removed.

Do you have any additional tips to offer in completely ridding my machine of this trojan pest?

Thank you for your help.

Mahalo,

Bucky Toofiss


0

Response Number 63
Name: Kurt Mastrovich
Date: April 7, 2000 at 22:22:46 Pacific
Reply:

I have been havng a runtime error for some time. I am running a reliotively new Gateway PC. I emailed Gateway and their technicians suggested that I download the latest Detonator Drivers for my nVidia TNT2 card. Since I have done this I have had no more problems.


0

Response Number 64
Name: Todd_The_Destroyer
Date: April 13, 2000 at 10:13:21 Pacific
Reply:

i've seen very thorough explanations on how to clean this, and feel confident i have enough information on that front...thanks to you. however, i think something is being glossed over here. does anybody have any explanations for how they're getting this in the first place? i see some people say that that are getting it from a jpg or bmp. well, i know that is impossible. perhaps they are getting it from a .bmp.exe or something to that affect. in which case, i don't particularly feel sorry for them. anyway thanks to all people that have given help and my response to particular messages is below:

response 18
jonnyguru
i'm sure this has been overplayed elsewhere, but a virus is not a trojan, and a trojan is not a virus.

response 30
walt
you trying to say that a jpg installed a trojan on your computer? see the above.

response 32
ted baker
"someone installed the server file?" not you, right? surely, you would not have done that to your own computer, right?

response 54
dragon39
you seem to be the only person responsible enough to admit your own wrongdoing. congratulations.


0

Response Number 65
Name: Tabatha Burger
Date: April 16, 2000 at 02:58:13 Pacific
Reply:

Look for the last 3 days I have had a error problem. Also I have had a virus and a computer hacker and I am getting tried of this bc it is scaring me bc of alot of things are going on.It saids I don't have the file mrsexe. It is stopping me from doing alot of stuff and I am sick of the crap.


0

Response Number 66
Name: PANKAJ AGRAWAL
Date: April 16, 2000 at 09:33:34 Pacific
Reply:

I'm facing the same problem since last 3 months . Everytime I switch over windows or closes one programme or another it comes up and I've to restart the computer from mains . Somebody please help...


0

Response Number 67
Name: tiijget
Date: April 25, 2000 at 09:55:29 Pacific
Reply:

hi, i had the same, my whole windows started to shit, i deleten reg. and installed se
wow should done it before


0

Response Number 68
Name: Beth
Date: April 27, 2000 at 07:20:50 Pacific
Reply:

Wow, I'm so glad I found this site! I was ready to clean boot my entire program. I guess when you play with fire (trojans) you get burned. I hope this works!


0

Response Number 69
Name: Deborah
Date: May 11, 2000 at 15:09:42 Pacific
Reply:

i have been getting this error for a while now. I thought that it was to do with Outlook Express as it always occurs when I am using it. But I am not to sure now. I did a virus scan with McAfee and it found that I had 3 viruses. So I deleted them and the problem still occurs so I am not to sure what it is. I am at my wits end!! Does anyone know how to get rid of it?


0

Response Number 70
Name: T
Date: May 14, 2000 at 08:46:35 Pacific
Reply:

I figured out how to get rid of the message. You have to go to "start" then "run" and type in "system.ini". When the box comes up go down to where it says "shell=Explorer.exe". For me, the problem was that i had something nxt to it called "msrexe.exe" which was the trojan. You have to delete that and save changes and then resart your computer. Then go to "start" and "find" and search for "msrexe.exe" and delete that file. You can't delete it before you change it from system.ini because when you try it says that the file is being used by windows.


0

Response Number 71
Name: Steve Lyons
Date: May 28, 2000 at 14:48:57 Pacific
Reply:

I got the solution for this.
It is a sub seven trojan sometimes called a predator I found a Program called the trojan fist aid kit and it worked really well for me especially as it is free feel free to e mail me and I will send it on to who ever needs it


0

Response Number 72
Name: Tiffany
Date: July 15, 2000 at 20:00:43 Pacific
Reply:

Hi!
I've had this error for a couple of months, someone told me to run MCAfee, so I installed the new version, and it found a virus on a file called "mueexe.exe", McAfee couldn't clean it, so it erased it, but since this happened no program can be opened; no Word, Excel, Power Point, ICQ, not a single application works!!! I'm really desperated, I need to replace this file in order to continue working... PLEASE SOMEBODY HELP ME!!!!... Thanks.


0

Response Number 73
Name: caleb
Date: July 27, 2000 at 20:25:00 Pacific
Reply:

i HAD the same problem about 2 months ago, it appeared that i had a virus called "server.exe", which i downloaded with sub seven. a good virus scanner that deletes most virus' straight away is called "tauscan" which can be found at http://www.agnitum.com/download/ asnd the free 30 day trial is there


0

Response Number 74
Name: alexi
Date: July 31, 2000 at 09:17:57 Pacific
Reply:

Ho yhe it's a trojan and i did have it too.
"www.AVP.com" it's the best thing you can do to move it, it's shareware but it works very well guys.


0

Response Number 75
Name: Chris
Date: August 14, 2000 at 12:21:16 Pacific
Reply:

The only solution is the cleaner. Check it out at www.moosoft.com.


0

Response Number 76
Name: Steve
Date: August 26, 2000 at 00:08:03 Pacific
Reply:

OK I GET THIS ERRO ONE IN A WHILE TO~BUT I RAN A VIRUS SCAN & IT PICKED UP 5 DIFERNT INFECTED FILE'S I TRIED TO CLEAN THEM BUT COULDNT SO I DELETED THEM, EEPT FOR ONE (MSR.exe OR SUMTIN) IN THE PROESS I THINK THAT ONE OF THE VIRUSES WAS HOOKED ON MY "MUEXE.EXE" FILE & I DELETED THAT NOW I CANT RUN ANY PROGRAMES, WHI INLUDES SHUTDOWN/RESTART, I ANT USE "AOL" NOTHING WILL WORK WWITHOUT THAT FILE (ITS SUPPOSLY THAT MAIN FILE FOR RUNNING "APPLICATIONS") & I DELETED IT~~NOW I WAS WONDERING IS THERE ANY WERE I CAN GET THAT FILE PLAEZ SOMEONE PLEAZ RESPOND THANX sTeVe


0

Response Number 77
Name: Marcello
Date: October 9, 2000 at 10:48:39 Pacific
Reply:

Hi!
I've had this error for a couple of months, someone told me to run MCAfee, so I installed the new version, and it found a virus on a file called "mueexe.exe", McAfee couldn't clean it, so it erased it, but since this happened no program can be opened; no Word, Excel, Power Point, ICQ, not a single application works!!! I'm really desperated, I need to replace this file in order to continue working... PLEASE SOMEBODY HELP ME!!!!... Thanks.


0

Response Number 78
Name: Marcello
Date: October 9, 2000 at 10:56:24 Pacific
Reply:

Hi!
I've had this error for a couple of months, someone told me to run MCAfee, so I installed the new version, and it found a virus on a file called "mueexe.exe", McAfee couldn't clean it, so it erased it, but since this happened no program can be opened; no Word, Excel, Power Point, ICQ, not a single application works!!! I'm really desperated, I need to replace this file in order to continue working... PLEASE SOMEBODY HELP ME!!!!... Thanks.


0

Response Number 79
Name: Jasper Holl
Date: October 29, 2000 at 06:41:59 Pacific
Reply:

The same thing happened to me. My computer needs the file muuexe.exe to start any exe file. So I can't do anything right now. Please help me


0

Response Number 80
Name: Idiot
Date: December 30, 2000 at 00:19:41 Pacific
Reply:

This recently happened to me. A person named Harvey on ICQ was interested in trading me Everquest accounts. So he sent me a "picture" of his character. Like a Dumba** i opened it. From that point on i had this runtime error. But who cares about that when someone has complete control of your PC. He not only caused problems with some programs but he STOLE my EQ account by getting my password. I had over a year and a 1/2 invested into this account. He then pretended to be a represtative of the company that made the game and said my account was deleted and not to call about it. As I said the User name on ICQ was Harvey and the number is 93214465. Beware.


0

Response Number 81
Name: marc
Date: December 31, 2000 at 09:28:17 Pacific
Reply:

just remove in windows.ini msrexe.exe.


0

Response Number 82
Name: comp_loser
Date: January 1, 2001 at 16:50:56 Pacific
Reply:

well i had the same prob, but i have had it for a while. well i think i got rid of it. it appears that its the MSREXE.exe, it was infected. just use an updated virus scan and its prob gonna find a proab or a virus. if it does youll proab have to delete it cuz so far thats been one of those files that when it gets infected its too late to save it. if it gets deleted a win.ini message will show up. just come back to this site and search for msrexe.exe?. it has a crap load if info in it


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 95/98 Forum Home


Sponsored links

Ads by Google


Results for: Runtime error 216 at 000043F2

Runtime error 216 at 000043F2 www.computing.net/answers/windows-95/runtime-error-216-at-000043f2/43367.html

runtime error 216 at 00002021 www.computing.net/answers/windows-95/runtime-error-216-at-00002021/7.html

Runtime Error 216 at........ www.computing.net/answers/windows-95/runtime-error-216-at/8057.html