I'm having the same exact problem with Runtime error 216 at 00002938 and when i hit ok, it brings up another I can't get rid of which is runtime error 216 at 000043F2, then my computer freezes up and I'm forced to reboot. It mostly happens when I am using FIND from the windows start menu (I'm running windows 98). DOES ANYBODY KNOW HOW TO FIX THIS!??!

0

same thing guys, 00002938, then hit ok and i get 000043f2, and it happens when im usin or leain internet explorer, its really gay because i have to reboot, i read all kinds of things to get of this, but i hear a different thing each time, ive heard it has something to do with the sb sound system, and on and on, but im workin on it.

0

Same problem ..runtime error 00002938 and the then the 000043f2 pops up...what the hell....you think its a virus or something

0

I get runtime error 00002938 and then when i hit ok i get runtime error 216 at 000C334F, and no matter how many times i hit ok it keeps popping up until i turn my computer off...it won't let me do anything else and freezes my computer...somebody please help me figure out how to fix this, because it's really starting to piss me off.

0

I think I might have something here -- we might all have a new virus/trojan. It appears to be a varient of the Sub-7 trojan -- not pretty. See http://www.nohack.net/sub7.html for more details. In the meantime, boot your computer to safe mode, command prompt only, rename c:/windows/msrexe.exe to something that won't run (msrexe.xxx, for example), then reboot. Go into system.ini and win.ini and delete the references to msrexe.exe. That should get rid of the error.

0

Yes..it is version of the Sub-7 trojan. Read the response above mine....follow it and problem sloved pretty much...check out this site for more info http://www.westyorkshire.co.uk//viruses/troj_subseven.html

0

i too have this error. i have not tried the above but i presume it works due to the lack of further responses. just about to try. fingers crossed.

0

I tried the above solution. It did not work. Still getting runtime errors.

0

I tried the above solution. It did not work. Still getting runtime errors. Also, I cold not get to the link above. I did find some info on www.symantec.com, but the soultions they offered did not work. I GIVE UP. Guess I just have to live with it or reformat my hard drive. Any suggestions would be greatly appreciated. Andrea

0

i too recently suffered from this runtime error, which does turn out to be the SubSeven trojan virus but using the above tactics is quite hard since the server is abe to change the name of the actually file you need to delete. I tried the latest version of norton antivirus but the sub7 virus was not detected. however, when i used Protector Plus(www.pspl.com), the sub7 virus was detected and i was able to delete it. all i ad to do after was remove it from the win.ini --i hopes this helps all you out cause i almost cried when the runtime errors stopped. questions? file.

0

I feel like I have found my new home. I have been having this prob since my computer was violated by a hacker. I have been searching for info - please explain to me how to get rid of this as it is making me CRAZY!!!!!! THANKS!! I will send the winner cookies!

0

The solution for the virus suggested by Paul to be found at: http://www.nohack.net/sub7.html is very thorough...Protector Plus ver 6.7.C04 failed to find it but Norton did...however Norton insisted on deletion of the file "windoc.exe" which renders the box unable to run executables until the registry is relieved of the entry "windos " NOTICE THE SPACE in the key hkey_classes_root\exefile\shell\open\command where it starts out as "WINDOS \"%1\" %*" and ends up as "\"%1\" %*" after repair. However, here is the big factor...if you rename or delete the file (as was suggested by Norton) "Windos.exe" in the windows directory, executables will no longer run...including REGEDIT.exe !! even in dos. Solution: get your windows 95 emergency boot diskette out...on it you will find "regedit.com" which you notice does not have the extension ".exe"...copy it to your root directory (C:\). Reboot the box in safe mode. Run that file ...type in the run dialog box "regedit.com" ...follow the directions to fix the regsitry at: http://www.nohack.net/sub7.html and you are fixed!! That is for the latest versions = 2.1 and 2.1 gold. good luck!!

0

Hi again! I have finally gotten rid of the trojans and I wanted to celebrate. No more Runtime Errors for me! But now my problem is that i need to reinstall systray, setup and a few other files that were affected. I do not want to do a full restore from CD - any help would be appreciated. BTW - I had Subseven, PWStealer and Backdoor.Trojan. The only programs that helped was Norton AV 2000 Version 6.0. The web site service.symantec.com was helpful - but your info posted here was what really helped! Most support personnal are clueless! Thanks!

0

Yep. I read the info at nohack.net and it didn't help, but it DID point me in the right direction. In my WIN.INI file, there it was: SHELL=EXPLORER.exe KERNE132.DL. I simply removed the KERNE132.DL and then exited to DOS where I could remove the KERNE132.DL file from my C:\WINDOWS directory. Now to figure out where the hell it came from!

0

I'm having the same problem all these other people are having. I get a runtime error almost everytime i try to do someting sometimes when i just start up my computer. And it doesnt go away when I press ok. Help!! It's annoying.

0

I too was getting the runtime errors: runtime error 216 at 00002938 runtime error 216 at 000043FZ I found the cure for mine was different than everyone elses. After trying several of the responses above which gave me some insight on where to look for this "BUG" or virus. I found a line in my WIN.INI file that read RUN=MSREXE.EXE that was not in any of my backup win.ini files, so I disabled that line and it eliminated the problem. I then looked at that file and found that the creation date was Sunday, January 09, 2000 12:59:33 AM, which is about the time i started having all these problems. One thing I found odd was that the date this file was modified was a day earlier than it was created... is that even possible?? Saturday, January 08, 2000 1:59:36 AM, How can a file be modified a day before it was created?... unless whoever created it changed the date on their computer to do so... maybe its there to be a hint???... Just glad its gone.... it appears that this "bug" manifests itself in a variety of different ways.... Do anyone know the intention of this file?.... is it there as a backdoor?... or just to cause you greif? Bryan

0

Can anyone plz explain this problem to me? I am only 14, and lost by all this msdos stuff. plz e-mail me at Britn3y@hotmail.com thx

0

Further to response 23, i have since confirmed that this msrexe.exe is indeed a trojan file, if you have this file, you need to delete it and check your win.ini file and remove any reference to this file, also check your system.ini file where it says "shell=" it should be explorer.exe, not msrexe.exe

0

i have searched the net to find out how to get rid of runtime error at 00002938! it usally comes up when i log onto the net, and when i use ICQ and internet explorer 5.0 . most times i have to restart my computer! can anyone help??

0

I too had the same runtime errors. I also found the file MSREXE.exe in my windows dir.I booted into dos and renamed the file to something useless like .xxx. Then I rebooted and removed the Run=MSREXE.exe from my win.ini file. All the errors have stopped! The strange thing is that I sent the MSREXE.exe file to Symantic Antivirus Research Center and they checked it and said it was CLEAN? One more thing I found, was in my registry. In HKEY_CLASSES_ROOT there was a key(folder) named ".dl" that permitted files with that(.dl) extension to be run as an executable file. This prevents antivirus from recognizing the virus because of the .dl extension.As suggested I removed the entire key.Hope this helps some of you.

0

Check out this url to disinfect the subseven trojan !http://split.netset.com/miscfix/subseven.shtml A former fellow-infectee

0

i have runtime error 216 at 7fe8227e norton detected it as a trojan in c:\windows\ststem\favpnmcfee.dll. norton tells me to delete it. i need more info before i do can someone help?

0

garry! u're infected with subseven( as u may already know) check this site: www.commodon.com/threat/threat-sub7.htm

0

Had the same error runtime error 216 at 00002938 then pressed ok got runtime error 216 at 000043FZ found in system.ini shell=explorer.exe systray.dl edited line to read shell=explorer.exe deleted systray.dl from windows dir also found in registry in HKEY_CLASSES_ROOT .dl key deleted .dl key thanks to everyone with info at this site im pretty sure i got this virus from someone at work who gave me a program that he insisted i had to try. Just the day before he was talking about back doors and how they cant be detected. i will from now on make his life very hard.

0

I had similar problems. but the error message appeared on windows exit in succesive multiple windows, a new one appearing on top of the other after presseing teh ok button (finally could be killed with task-manager, although it was not clear wich task occasioned the error); in my win.ini, mstcp32.exe was added recently under the "shell=" entry, as reported in response 23 also with modification date earlier than creation date... I deleted the entry and the corresponding file in the windows directory, everything seems to be fine. norman virus control (V. 4.73, signatures as of 15/02/00, subseven docuemted aup to V2.1) did not recognize this particular variant, provided it was subseven). good luck to you all

0

Bryan, YOU DA MAN!!!! I've spent hours trying to figure out the problem. About 5 minutes after reading your post about win.ini and msrexe.exe I had the problem fixed. Thanks.

0

Guys, you are the best. All your information was most helpful. I knew I was infected with the subseven virus, and I thought I had gotten rid of it. Then the runtime error 216 dialogue boxes started. They have been popping up for some time now, and I had no idea they were related to the subseven virus. Now I am confident that I have erradicated it for good. Thank you all again for all your help.

0

If your mouse has a Scroll-Wheel then check out http://support.microsoft.com/support/kb/artic les/q189/9/89.as

0

I was having the same problem. If you go to www.commodon.com/threat, they will have a set of instructions for you to follow on removing the Trojan virus. I followed them and my machine come up working.

0

RUN TIME ERRORS ARE CAUSED BY VISUAL BASIC OR vbrun files 1. goto start 2. goto Find 3. goto files and folders 4. look for vbrun in the C: drive these files are vbrun100, vbrun200 and vbrun300. any vbrun files are visual basic programs and are *.dll files. My computer had two vbrun100.dll files in C:\WINDOWS\SYSTEM directory... all you have to do is delete one them save it in the recycle bin. reset your computer and then uninstall your outlook express email program !!! then reinstall it from Microsoft updates. notes***(READ THIS)...If you install and delete many programs on your hard drive you will end up with orphan files or duplicate files. and when your computer goes to access two files of the same name at the same time you will usually end up with an error message... all runtime errors are caused by "vbrun" files corrupted or if you got two files on your computer of ***same name and same size*** ****date does not matter***...If this works for you please email me and let me know... crusher@ncweb.com Good Luck CRUSHER

0

I seem to have noticed that I have the MSREXE file in my windows directory. I found out that I had as soon as my Cable Modem Company (Mediaone/Roadrunner) cancelled my service saying that I was doing some Hacking of anyother computer. This was on Feb 29th that they showed the "incident" and shut me off on March 2nd - after "they" determined my system to be "secure" for possible outside control! And because my ports showed security "they" deemed it to be me hacking another computer or someone in my house! I for one have no idea how to hack and my wife doesnot and I doubt my 3.5 and 2 yr olds know how too!!! Anyhow Mediaone said since it appears to have been my house hold that is hacking they are shutting me down and there is nothing I can do about it other than get another ISP (which I did to research this problem that Mediaone appearantly does not want any part of!) So thanks to a friend and this site and the links off of it I believe I have the problem nailed down. But will not take action with cleaning it till I speak with Mediaone tomorrow and explain the research that I did and what they think about it. Either way I think I will contact the media in my area and alert them so that they can hopefully try to alert others of the dangers of SubSeven! Thank you for listening/reading ...I will post a follow up as to what happens on my end. Charlie (the much wiser surfer)

0

please helpme!!!! someone sentme a trojan and i dont know what to do! i know where it is cant delete win says "windows is still running this program" please mail to me HEEELLLPPP MEEEEEEEE!!!!!! trojans name must be msrexe i scanned for viruses burt coudnt find anything please mail me

0

hi!! i got an error (runtime error at 216 000029) everytime im connecting to internet and it usually happened when i also connected to icq. then after i disconnect to the internet connection the erro will after, i will hit the "ok" button then the error will appear is runtime error at 00043F2. then computer will hang so i need to reboot or restart it again. i need to know that error as soon as possible. pls try to help me with this. how to get rid of that error. thanks. waiting for your reply

0

Alas, I have been experiencing the same problem. I was completely aware of the trojan called SubSeven that some idiot had sent to me. However, I thought I had got rid of it - how wrong I was :) Frankly, McAfee don't have a clue about viruses. I frequently get this error and I just ran a virus check on McAfee - nothing. This is pretty poor performance so I am switching to Norton. The Cleaner program I have got is very handy although it is unregistered :( Thomas.

0

i have read all of the comments of all the other people today and i have no idea what to do. one person says to delete this then anothere person says that i doesnt work that way. will someone give me step-by-step instructions through this? i would be very greatful. anyways i wanted to say.....please....someone please help. im on edge here oh yeh can you get this from netbus ?

0

John I just recently got infected with the SubSeven virus and Norton picked it up right away but could not do any repairing or quarnetines. I had to delete the c:\WINDOWS\MSREXE.exe file and remove the run command for thatt file from my win.ini to avoid any start-up errors. I found it easier to start my laptop in MS-DOS mode and delete it from there. I then restarted my machine in Windows98 and edited the win.ini file. I have had no problems since then.

0

I have the virus as well, deleted it from the the system and winini entries. But I could not find the file msrexe.exe on my comp anywhere. Norton 2000 never found anything either. Although my comp no longer has the error at bootup, it is still running slow, any suggestions?

0

I found that msrexe.exe is on my computer but i was wondering how to get rid of it and that win.ini file...people say go through DOS. I thought i had a corrupt file from a faulty shutdown a week ago. I been suffering and thank god i found you guys. I just want to know how to get rid of these files cuz i know for sure that i have them. Please post an answer or email me at the provided email address. Thanks alot!!!

0

I had this "runtime" shit for about 3months, I thought i would just have to deal with it for the rest of my life (rebooting 10 times a day !!!) But I did solve it with the help of some replies here. All I did was erasing the command RUN=MSREXE.exe in the win.ini thing ( juste search for it in the search thing in the start up (démarrer) menu) After I searched my hardisk for MSREXE.exe, I found it, I deleted it, emptied the wasbasket and reboot my computer FOR THE LAST TIME !!!!!!! It works !!!! My comp runs faster than ever ! Thanks, I can Rest in peace !!!!

0

Also !!! It is really important to get a Firewall ( I got two) like Black Ice defender or At guard It's amazing to see how many people went on your PC before the firewall (about 15 a day). Good Bye !!!

0

Chris, in response 44 you said " Norton 2000 never found anything either. Although my comp no longer has the error at bootup, it is still running slow, any suggestions? " Go into norton 2000 options and deselect "scan files when they are run or opened " this causes every file to be scanned when u run it, even tho its already been scanned many times. This causes everything to run super slow.... If the file is on your puter and virus free, and everything you download is scanned, you dont need to scan it when you run it every time. Example, after I installed norton 2000, my quicken program took almost 5 minuites to open and another 5 mins to close. after I unticked this, it took only a few seconds. ( I have a rather large data base ) It makes a PII 300 run like a commadore vic 20 with a tape drive!

0

You guys are a life saver. I ran into this problem at work and it followed me home. I have done almost everything on this page and found that www.hackfix.org/subseven/fix2.1.shtml was the most helpful for removing Subseven. "Norton 2000 SHOULD NOT BE USED" on this virus, it causes you tremendous problems. If you do use norton it will delete a file called windos.exe After this is deleted you will not be able to run any applications at all. Not even regedit. So almost all of this help is not helpful. You need to get a copy of the file windos.exe and paste it back it the windows directory. It can not be found on the Windows CD. If you need it email me. This virus is a pain in the ass, but don't give up and you will defeat it.

0

I also got the msrex on my computer - fortunatley I am running ZoneAlarm firewall and it immediatly informed me that msrex was attempting to access the internet! - I logged off and started searching for that program. Once I found it I deleted it and rebooted - but got an error that the program could not be found - edited win.ini and registry and removed the run= line and everything seemed to work ok! BUT - a couple of days later I started getting the Error 216 popup everytime I tried to start an internet utility (aolim, icq, etc.) - thats when I looked here, but most of the suggestions were to do what I had already done. The only fix I have found (and I may still not have the darn thing killed!) was to boot to dos, cd to windows, and list the files. Then look at the files with todays date. I had one file that I did not recognize. It started with an underscore (can't remember the name of it now). I deleted it and was able to restart windows and use the internet utilities with no problem. F-Prot did not find any problems with any of these files either! If this dang thing returns I'll have to start looking again! Jim

0

Thank you all very much .... I too had this problem and I had no idea what caused it but thanks to this site I got rid of the problem. I am sincerely grateful.

0

I have been havng a runtime error for some time. I am running a reliotively new Gateway PC. I emailed Gateway and their technicians suggested that I download the latest Detonator Drivers for my nVidia TNT2 card. Since I have done this I have had no more problems.

0

I experienced exactly the same as described in response # 21. I also removed kerne132.dl but I also needed to restore my registry. After that, no problem. I was pretty sure that this was a virus because I tracked down the date when I received this kerne132.dl file by looking in the \windows\sysbackup directory (looking for rb*.cab files). I found that Windows98 created an backup of the registry and system.ini file at 4.4.00 this backup didn't include the kerne132.dl entry in system.ini but a second backup from 5.4.00 did. So I restores the registry and system.ini from this rb*.cab file sucessfully. I thought I accidently started an exe file I downloaded from a news server at this date. The file was named something like 1.avi.exe. In my explorer it looked like an avi file but unfortunately it was an exe file. Hope this helps.

0

In responce to number 47. This is how I discovered I had the trojan. I have not had any problems with my machine but I recently installed a firewall called ZoneAlarm2. It immediately started reporting a program called MSREXE.exe was attempting to access the internet. I didn't grant it access since I had no Idea what it was. A little research on the name led me to several sites including this one that showed what it was. I have no idea how long I was infected for, its a little scarry to know this file was broadcasting my existance everytime I booted my computer. I've got rid of it and my firewall logs no longer show attempts by unknown programs on my system trying to get out. Even if you think your safe I recommend getting some kind of firewall. I'm getting several hits a day from people looking at various ports.

0

i downloaded then ie v5.1 and it seems to be much more stable than v5.0 i havent had an error in weeks!

0

Hey I have had this virus for about a month now the same error blah blah blah... I got loads of people to check it out and they said it's not a virus it's just where a program won't start in time were the wrong or were the wrong!?!? I didn't think nothing of it till the other day I had a hacker online and my C.D Rom draw flipped open and my cap lock was coming on and off then my curser was flying around the screen so I D/C and came back on to find ten minutes later a hacker...but this time here to cause a little bit of trouble started to delete things from my hard drive but I quickly D/C again since that I haven't had a hacker like that but I still had the error message after searching everywhere on the net about this error I came across this site and now I have my problem fixed! Thanks you guys your my God! If there's one thing I've learnt from this it's I know a little more about computers stored in my brain. Big Ups to your guys and I've recently installed a firewall and I haven't seen a problemo in ages hey (touch wood) but after getting rid of this Trojan I was trying to sus where I got it from I kept the modified date in my mind and did I whole search on my hard drive and found out that some **** of a friend sent me Napigtor and that's where the problem was thanks friend! R.I.P Thanks guys for the help!

0

ow phuck phuck phuck! can someone pls send me help on how to work things out of this whole mess!!??? this trojan subseven thing is already getting in my nerves!!! help pls..!

0

the runtime error is caused by a file called "kerne 132" here is a web site that will help you out with your problem. http://biz.onramp.net/ranger/wwwboard/jws/messages/867.html or http://www.michelson.com/ranger/wwwboard/jws/messages/872.html

0

Well, I guess I put my 2 cents worth in since I haven't been back in so long. Here's how I solved the dreaded Runtime Error 216 at blah blah blah: I downloaded a trojan scanner called The Cleaner at www.moosoft.com/ and I installed InoculateIt at http://antivirus.cai.com. I installed both of these on my computer and I also installed Zone Alarm. Between these three programs I found a file called Game.exe. I deleted the file and all is well. I have found that using the three programs I named above works better than anything else I have found so far to keep those viruses and trojans away. Hope this helps someone.

0

Thank you all for your help. Ive deleted the msrexe.exe file and removed any reference to it in win.ini and i think it has done the trick. Finally! Ive spend ages trying to find a cure and was going to reinstall windows next week! Thank again

0

When ever I start windows, and error message comes up that says can not find kerne132.dll, make sure the specified path exists. I press ok and then it goes away. But both of my Cntrl keys don't work. Whenever I press them it makes a beeping noise and it won't work. Please help.

0

I have gotten: Runtime error 216 at 00005292 followed by Runtime error 216 at 00002F98 These are different numbers than the rest of you have reported. Yes I have used Norton with the latest updates and checked for files that may be SubSeven executables. Nothing. These errors are RANDOM. I cannot make them happen by doing a specific thing. The error messages cause only Explorer.exe to crash, all my other apps continue working fine. However, I must eventually restart to get the start menu, desktop, and taskbar back. I emphasize again that the errors are RANDOM. I have literally gotten up to go to the bathroom, came back 2 minutes later and found the error message - completely unprovoked. Any new suggestions appreciated. - Mike

0

Mike I get runtime errors while running Internet Explorer, and while trying to solv my problem I came across this, http://216.167.71.32/windows98/troub-345.shtml , go there and see if it helps you. Bob

0