I just recently killed the Sircam virus and this qm mgr is accessing the internet. My firewall, Zone Alarm asked me if I wanted the SCam32.dll to be allowed to access the internet and I one time said yes. My system is almost at max so my system suggested I run a disc cleanup and when I said no I began deleting files. I immediately searched for new or modified files and found the virus. Now I do not think this new dll is part of the struff but can anyone here tell me what on earth it really does? I have spent days, 4 or 5 E-Mailing peeps and helping them rid their system, websites and all kinds of research. Feel free to E-Mail me......I am up for anything, I just hate messing with dll's Thanks Bern

Sorry I never get a message of ERROR.....it is just accessing the internet.....:)

I've heard that LoadQM has to do with sending info for MSN Explorer for E-mail and instant message notifications, but i've "end tasked" it from Ctrl-Alt-Del, and MSN Explorer still works normally, can anyone figure what exactly does it do?

Loadqm is bugging me too! There isn't an MSCONFIG with winME ! IS THERE?

I have started getting the same thing. It just appeared one day on the fire wall pop up.Its comes from computers beginning with 213 such as 213 122 146 90 TCP Port 3263 and so on. It must be gathering information. I allowed it thru a couple of times and my browser began acting strangely so I always deny it access now.

I am running WIN2000 and IE 6 never had this as a problem until I loaded Netscape 6.1 then my Zone Alarm started reporting this as an access I did not care for... After several hours on MS (lack of ) knowledge base to no avail I found this forum... My fix was to remove it from my system by renaming it to loadqm.old. No more Zone Alarm pop ups... Nevertheless the one time I allowed it to run my DSL got slow... I wonder how much information I fed gates and friends... Does anyone really know what it does...

No one really knows what it does... it's little Billies joke on all of us for taking him to court I guess, heh. It's nothing to do with the varoius lines of bull you may have been fed as to date hundreds have reported no such problems with their appications after disabling and or removing the app. To the guy that asked yes there is an MSconfig in WinME just type in "msconfig" in the box for "RUN..." this file and it's mates seem to come from various MS applications, and being as reports of it are sparce I'd say it's added to their applications at will, and not always there... I can only assume they're spying on us, which is why I intend to remove the whole stinking thing... simply you will need to find a way to delete the following files, and or directories to ensure it's no where to be found anymore; LOADQM.EXE QMGR.DLL QMGRPRXY.DLL PROGDL.DLL QMgr (this is a folder) QMgrCache.tmp (also a folder, within the above) qmgr.inf (the install file) qmgr.cab (the install source) Drizzle.cab (usually in QMgrCache.tmp) drizzle.cif (usually in QMgrCache.tmp) ident.cab (usually in QMgrCache.tmp) ident.txt (usually in QMgrCache.tmp) LOADQM.LGC (the programs log) I hear they don't make it easy to get rid of it, lol... you may have to rename the file and remove several registry entries referencing it, but if you're persistent you can kill it completely.

I find this topic kind of funny you know. The whole concept of 'spying' over the internet. I mean think about it for a little bit, if Microsoft is really spying on us (which I have no doubt in my mind that they are) why would they do it through a secondary program like LoadQM. Why not hard-code it into a program that always accesses the interent like Internet Explorer or MSN Messanger, or better yet, hard-code it right into the OS!!! I think that LoadQM is simply a method of code re-use. I have written a code for hours on hours on hours and I know that if the code reuse is essential in the software development process. If they were spying they would make it so they could not get caught, trust me. peace

i just installed a firewall logger on my system and noticed this loadqm.exe doing its thing. I removed it from the regestry in the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RUN entry and renamed the extension from exe to xxe.. it is now disabled totaly and is no longer appearing as a Trojan to the Logger. I also discovered one other little ditty while cleaning up from my initial log and that was at some point someone had visited a site which dropped a cookie to the USERNAME@www.doubleclick.com for market web usage. Its gone now too but a good check might be to see if you have any cookies with the above signature. I don't thinks it has to do with MSN as other systems running MSN have no Loadqm.exe in them.. Please note that if the file extension is renamed it then appears as an 8kb ZIP file which is very common to most low level trojans such as SortWar,Shadow Thief,etc. Let me know if you find out anything for real

I just installed the "latest" version of MSN and loadqm.exe started to run on my pc. I denied it access to the internet, but it still runs at startup. It's probably a simple queue manager for MSN messaging and not a spy program. The easiest way to disable it at startup is probably to go to programs/accessories/system tools/system information and from the tools menu choose system configuration utility then choose the startup tab and uncheck loadqm then restart your pc. Loadqm will no longer show as running when you check with cntl/alt/del. This way you don't have to play with the registry or delete the pgm (and if MSN does require the pgm it will still be around-for those who use MSN).

Just a note to all of you who are concerned about loadqm: When I installed MS Messenger, Norton Internet Security (version 2.5, I think) asked if I wanted to automatically create the permit/deny firewall rules for it. I told it to go ahead and it added one called "MSN HTTP rule" which is defined as follows: Action: Permit Direction: Outbound Protocol: TCP Category: Web Browsers Application (Tab): Application shown above: c:\windows\loadqm.exe Service (Tab): Remote Service: List of Services: 81,82,83,aol-4,http,http-proxy,http-proxy-1,https,socks Local Service: Any service Address (Tab): Remote Address: Any address Local Address: Any address Logging (Tab): (All options left blank. i.e., no logging) In other words, it appears that Symantec knows what this file does (or is supposed to do) and they feel that it is at least safe enough for it to send messages out onto the Internet. However, because it doesn't appear to do anything useful for me, I am disabling it in the registry and changing the security rule to "Block" instead of "Permit". Just thought I'd be of assistance.

People who do not have MSN Explorer must be scratching there heads because loadqm comes with the latest version of MSN Messenger Service as well as MSN Explorer. When i install Windows ME which has MSN Messenger Service, no loadqm untill i upgrade MSN Messenger Service to version V3.6.0039. I do not have MSN Explorer installed! I since then disabled loadqm and MSN Messenger Service still works. I would still like to know why the older versions of MSN Messenger Service do not use it and why?

I have rid myself of this annoying little blighter. It is downloaded with the latest version of explorer. Just use find files and folders and delete the lot. I did it last week on three machines and I have had no problem with Explorer or messenger. All it does is check for updates to IE and MSN Messenger, or so we are supposed to think !!!!!!!!!!!!!!!!!!!!!!

I asked an old friend from Redmond about this (old timers like me have some nice contacts) and he told me it was part of MSN's project "Hailstorm", whatever that is. A future project to take over the Internet or some damn thing. I wiped it from my system just to be sure.

You can prevent loadqm.exe from starting up by going to MSCONFIG, START UP and uncheck loadqm.exe

A couple of weeks ago I checked for an update for windows media player and it downloaded a whole heap of stuff, and ever since then I noticed when ever I went on the internet it started downloading something straight away...I didn't know what ...I let it go for 4 hours one day untill my ISP disconnected me (I have 4 hour blocks) and it got upto something like 20 Mb received... Everytime I logged on it was the same untill I stopped 'loadqm' from the task manager. Straight away the download stopped (whatever it was....) so I did the same as you guys and searched and found the registry entry and deleted it. (won't update my media player anymore!!) Ferdie

Hey everybody, I know what these files ALL are from. Your computers are infected with the W32.Sircam@MM virus. It is a worm that places itself in the startup files and even if you remove it with MSCONFIG, it will still come back. Updated anti-virus programs usually will remove the bug. Sirc32.exe, SCam32.exe, and qmload.exe are all parts of this virus, so run Norton or something to get rid of it all.

Hello: I am just a simple user of puters but this thing has bothered me a bit too. I think the loadqm creeping up in the open programs list and "getting away" with it is the device trouble maker. I don't know where I got it but some of the mentions such as Netscape 6ish and the updates and such seems to be at least as near as I can figure. I have learned much since comming to this forum and I do appreciate that and felt a need to offer the lil' tidbit of info as I saw fit. If you want to use the LOADQM.exe then close it as is a good idea for most things before it goes and screws things up. Good luck and out.

So you think they are spying huh? Quite possible. All that I know is, ever since I have noticed this Loadqm, I had recieved some other strange DLL errors on 2 of my PCs. F-Secure.com has no listing for it, so I know it isn't virus related. However, just to be safe I'll use MSConfig to disable it.

I found an answer, no, a fix! I went again after a re-install of Windows OS and I downloaded the MSN 4.5 I guess or the new thingy and got it (loadqm) again. What I did is, as soon as the dnload completes, I looked in the windows folder and confirmed it and YEP! it's in there. Then here's the thing. Going into the registry after the deletion of the file itself, using ms configuration tool type a find for the loadqm just as it types out (is what I did) and the find tool shows one key in "hkey users" so I did'nt panic there, I went to find next and there it was as loadqm.exe (again, lower case if that matters ) and I had planned on deleting the whole thing in the entire registry but ONE AT A TIME. This one, in local machine, was the deleted item and restart to check the program entry at all in msconfig where I want (of course), to get it gone. It was!!!!! Thanks to all and good luck if you wnat to try this fix.

Following my last reply there was a lil' error in (at least one ,lol) mentioning the registry location. It was hkey current user and NOT "hkey users" so don't get lost! Thanks again.

Whenever i want to download msn messanger .net it says done at the bottom of the screen but yet the screen shows nothing.

Hi guys, I too started to wonder about what loadqm.exe is when I noticed my internet connection was very slow. I found that loadqm was RECEIVING enormous amount of data and started to wonder if it was some sort of trojan installing itself on my machine. What I did to have this enormous data transfer is as follows: I installed MSN Vsn 3.6 I later downloaded myself mmsetup.exe for MSN 4.5. And installed it. As I found I had trouble making audio connections to my old contacts (still using 3.6), I decided to revert to 3.6. I de-installed 4.5 and re-installed 3.6. From this point I noticed the high reception activity on my network connection. After a bit of internet searching and my own personnal searching, here is what I found: loadqm.exe is INDEED delivered with MSN version 4.5 which installs it and add entry in the registry for run at boot (was in 3.6 too btw). If you open the MSN setup program (mmssetup.exe) with WinZip, you will notice that it contains a file called Qmgr.cab. Qmgr.cab itself contains QMGR.DLL, QMGRPRXY.DLL, PROGDL.DLL and LOADQM.exe. I then decided to sniff on my network interface to see what it was doing. I have found nothing malicious with it. All it does is to contact windowsupdate.microsoft.e.com (HTTP) to get a file call IDENT.cab which seems to contain code signing certificates and other MSN version information. (request GET /ident.cab HTTP/1.1). A cookie is involved in that transaction. (The cookie I found on my machine contains: MC1 V=3&LV=200111&HASH=136E&GUID=35506E132D3A49E68E78EDBC0EA8795D microsoft.com/ 1024 4129511424 29591931 2941329312 29455303 * ) It then looks for the Drizzle file with: "HEAD /qmgr/rel1083.11/x86/w9x/fr/Drizzle.cab HTTP/1.1" and receives back: "HTTP/1.1 404 Object Not Found" Apparaently, if your MSN is out of date, it makes a standard DNS query to find a download site and gets the updated MSN version via (in my case) it was from the site a767.ms.akamai.net with the request "GET /download/msnmessenger/install/4.5/win98me/fr/mmssetup.exe HTTP/1.1" The download now starts and the download of 1'718'848 bytes ! (note that I made several sniffing and the downlaod site varies from one time to another). As you can see, the transaction probably uses some info from me to know which OS and in which language I am running. The file mmssetup.exe was stored in my Windows\Temp directory. I kept capturing untill the end of the download and everything stopped after the last packet of the file. I could see no more activities. I then used the program manager to kill the loadqm.exe and I installed the new MSN version 4.5 (from the C:\Windows\Temps\mmssetup.exe). I then started my capture again and used Start->Execute to restart loadqm.exe. This time, it started with the frist GET /ident.cab (and got it), followed by the HEAD "/qmgr/rel1083.11/x86/w9x/fr/Drizzle.cab HTTP/1.1" which received back the "HTTP/1.1 404 Object Not Found" and stopped at that point which is confirming that it makes some version checking and stops because I am now up to date. I also conducted some research on the files (DLL and EXE) that compose this Qmgr service with DEPENDS.exe (dependency walker) and did not see anything that really looked harmful. I would like to reverse-engineer those files but that would be illegal .... My CONCLUSION is that loadqm indeed is an auto-update engine that checks for the latest version of MSN and DOWNLOADS it if you are not up to date and this BEHIND your back. When it has downloaded it, it THEN asks you if you want to update or not. I do not think it makes any harm, I do not think it is spying (cookies are anonymous). I also have to agree with people who say "if MS wanted to spy us they would be smarter..".. I totally agree with this ! If I had to spy somebody's PC and install my spying as part of an application, I would NOT install it as a separate program running as a service (which cannot go unnoticed for long), I would rather imbed the spy in the application itself using some cryptic way of sending the information back ... In that case, only reverse engineering would eventually uncover the spy... The mistakes here, which did rise so much questions, is: 1. MSN NOT TELLING us that it installs this auto-update 2. MSN downloading the stuff BEHIND our back 3. Why not check, ASK and then (if we accept), download the stuff (or not) 4. An option in MSN to disable this auto-update feature all-together! Microsoft, once again, makes decisions for its users without even warning them ! Typical arrogant behaviour of Microsoft !!!! Hope this helps and contributes to make you feel safer. Francis.

Thank you for all your hard work Francis! This has been bothering me too... I only new of it because of ZoneAlarm.

I really knew that if I kept reading this thread long enough some sort of sensible person had to appear and provide a good answer. Thanks Francis for helping me keep the faith! I can't believe some of the stuff I had to read to get here though...yikes!

I still wish I was 100% certain about this being harmless. An embedded spy prog. would be thrown out by alerting software..why not dress it up as an innocuous app,?? - which also works in the true behind back MS fashion...Mmmm....Keep on trucking :)

Not directly related to loadqm, but.. If MS is spying on us, it would be extremely difficult to keep it a secret. Implementing sophisticated Microsoft-independent monitoring software is not impossible. Just think about forgein goverments and rival companies using windows, they must have performed extensive tests to reveal any spying activity. Have they found any? Who knows. Just browse the net for articles, interesting stuff. For example here's what germans say about it: "We are convinced that we have sufficient firewalls to protect our sensitive database," he said. "In addition to these firewalls, we have additional crytographic techniques that have been approved by Germany's Federal Office for Data Protection. These additional security measures are independent of Microsoft software." http://computers.sympatico.ca/news/stories/0,1856,24,00/0,1572,42502-24,00.html

This is real interesting about Loadqm.exe. Found this thread thru Google cuz I just discovered it in my Programs Files folder---I don't think it has anything to do with MSN. I've never had MSN Explorer, and I don't have MSN Messenger---the 3 files I'll paste below, if this site will allow it---they might shed some light: 1) Drizzle: MSCF � D   d   � � ` � �(�\ drizzle.cif ;�cw �CK��]k�0���R��J?b���������nDFLb k��D���R���`R8�}�y��3-J&�FUb�pT��m�0JD[UV�):E(��ӪΗ�JiGU�o�{�ț�ci�M�9�UO�U�q1�Sx�}���ln&���3'�� �������p�ׁI,����ml���ELF��N1#һZLM�5�ʺ��V�ڪ�,C�|7�i�� > >0 0*�H��  h�k�I��)QA��S���0�@0� �Ǐ7ے(��w��C����ʣ���A�="HH� 0  *�H��  �� ���uj����dxç2ur�&`0L�H4�RJQ��S-{�1��e�AA/�cz�s��z�AЎ:��84D�u��qā85J��>2�!�����8\���8d��T�����_����݈)��O��qd106@�����YQ�m�Qt+n�]n�: ��;�Q]N� ��Z0�V0 U0 0U�0��U ��0���{���C�h��8�n;���c0a10UInternet10U VeriSign, Inc.1301U*VeriSign Commercial Software Publishers CA�Ǐ7ے(߄P � B��.hs��3�/]��d�ċ`��`m��v٢� NJ�����i���J�y�t� ��¡�M0�I *�H�� 1�:0�6 0��0��10U VeriSign Trust Network10UVeriSign, Inc.1,0*U#VeriSign Time Stamping Service Root1402U+NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc. ����,���3{TT0*�H��  �Y0 *�H�� 1 *�H��  0 *�H�� 1 000503192909Z0 *�H�� 1f`9pAAY�?]+�s� 0  *�H��  � w�"):��V�{����a�J�t�����F(6,�w�\�7��ġA_��Sw"0&'�)�8I�B�tV�s�.+q�^y��,�� ��@s�O2�����ʌC>�� �;%�?7X���o\o+Dr. ����y�~-P��`��|��8L6��vo�7�븑;w>�7���l�L�վ�.ø��pl�h�TT��{�)Ut����t�`��m��9�?��"�͌��\�F^���C��2X�qh� 2) ident.cab file MSCF � D     � X ^ u 5,� ident.txt ���kCu CK�V�n�@}.���1��v+���zQ��}��h�u�X���4_��݀�XM_���33;g.�W1�J�3y�:�T�8�U��u�!U�@��T����u=Lx]d�$Ú�eU&D�a�s/���i�������h��]�j7�K6=��ǟ�Xp�7��t��m��[�aQݫ��>�?�ׂ�[_2E�Ә��E�=¾����G�>�_pޘ^8T�Mp8��c] [�?S�P u��z��:\�~�:Y��_N�C׉pQ �����&(��l��-W�l��d�U�l��-W���j=�ӡ��b)Q铢�C��!���V��b�Q9B��1��8�k?|l?\��� ��^[G;�C[�۞�-l�>�9��'����) �F��O�f���#*L���D�D�ȔWY2(�Dt hIaՒ��.1P���d����1��9���h��v)�z��"�8��i�aY��7���[����p�#�{���{�����3����a�F�/�ԋy���o?��93�����Ž��Q�fβ���)�����s?��^�����Y���au�O���T�mi�)�H�:��O�q�8.\'��K�A����aIQe�� �P�P���B�-RZ�| �F�ʠ�z��5��ت)����R´� ���l�Í@Q�0E�R�R��C e��t�J���b�`�5����r0@�E�4 > >0 0*�H��  �_#R�~1��yu1g��80��0�%J�8��Y�]s_]ܣ0  *�H��  0��10U VeriSign Trust Network10UVeriSign, Inc.1,0*U#VeriSign Time Stamping Service Root1402U+NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.0 970512000000Z 040107235959Z0��10U VeriSign Trust Network10UVeriSign, Inc.1,0*U#VeriSign Time Stamping Service Root1402U+NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.0��0  *�H��  �� 0���� �. �h|,-.����� W�S�u��3*��� [4��� ��Z���������%�}Xsjx�q��X�)�X^��-bX��q��"X/���6����MJ��;"�V�~!�l��JG�j��6�� -Ӵ9� 0  *�H��  �� aU>{ǒ~�"�Գ+[�D�x��~�r�Y�̄㉔L�Naﳤ�F=P4�pV��*��c�yis.��(������]� � �γ�(��y)�����gBH���a��S��s?���O��U��cc0�0�k� zm\ob�O���C��0  *�H��  0��10U VeriSign Trust Network10UVeriSign, Inc.1,0*U#VeriSign Time Stamping Service Root1402U+NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.0 010228000000Z 040106235959Z0��10U VeriSign, Inc.10UVeriSign Trust Network1;09U2Terms of use at https://www.verisign.com/rpa (c)011'0%UVeriSign Time Stamping Service0� "0  *�H��  �  0� � �za�벧c+aހ����=�'��9��)�fH�O��O��^�/Ǒ�{�!����N����X�c-��)�p�P�햻@۾%�BU����狙1��L�$*�����M������h�aX�r��0HO�/oc ىʂ{�K�(Łh��@�F:��?6�L�TBZze{����GT��=����3���*��^:����.u��k�=�`�B �O�[�?"1��s���+�FLm�P.�K*x�t=��,G1 ���0��0@+  40200+ 0 �$http://ocsp.verisign.com/ocsp/status0 U0 0DU =0;09`�H ��E  0*0(+  https://www.verisign.com/rpa0U%0 + 0U�0  *�H��  �� -�Oc`,��$R�볼g��#�F �M��|z 02h���2��;'{> �!�� Ř�@W�%误j��;��#��)]@U�S��6:9ess�2ү����c��@0  *�H��  0p1+0)U"Copyright (c) 1997 Microsoft Corp.10UMicrosoft Corporation1!0UMicrosoft Root Authority0 970110070000Z 201231070000Z0p1+0)U"Copyright (c) 1997 Microsoft Corp.10UMicrosoft Corporation1!0UMicrosoft Root Authority0� "0  *�H��  �  0� � ���p�;�N(��x^0ꢩ�%_���L����� >|Q����`2k�Bdy�v�T��뜆���f��kzb#�8�,�(9��I�B���lUa��|�`-wL陴d;�P1$���+�=�c`Xe�7R�����ӿUE����:�T�N���zmtN�̖ (! W�`i7�K�c��@0  *�H��  � �����5�� $�w�\`2���>����:�!��W�,��G�b����;;Z�6Ti�$m?�̪�|�1�=�pj��Oi���C�Z O�b{���+7%-�e��%c��T�!���R�nC2����gl Q���Rǽ��0� 1 ��)M�����[����W�eI�RT��(�����~��ū7,�z�w�v� �j?��6��A�5jj�5���E�Z38nM b� ����T?F�U�p�:��u��Ҡ0��0�s�  a*� 0  *�H��  0��10 UUS10U Washington10URedmond10U Microsoft Corporation1+0)U"Copyright (c) 2000 Microsoft Corp.1#0!UMicrosoft Code Signing PCA0 010329212726Z 020529213726Z0��10 UUS10U Washington10URedmond10U Microsoft Corporation1+0)U"Copyright (c) 2001 Microsoft Corp.10UMicrosoft Corporation0��0  *�H��  �� 0���� �o���E������1=ć�NH��V�+�c�D�0���x����r LFf��bFn��D������;�G�Q^�wg"{S*-�"�|N��3����v�a� �`4;I�,�َ�.-k��U���n�p��`/ �� @0� �5+��}�W�K�� ��0��0��� j�O� ު��@����0  *�H��  0p1+0)U"Copyright (c) 1997 Microsoft Corp.10UMicrosoft Corporation1!0UMicrosoft Root Authority0 001210080000Z 051112080000Z0��10 UUS10U Washington10URedmond10U Microsoft Corporation1+0)U"Copyright (c) 2000 Microsoft Corp.1#0!UMicrosoft Code Signing PCA0� 0  *�H��  � 0� � ��S�04��:��/{m7#M�Ҍ�����4$���T�~tG��2XQ)8�~���:G�9NnT�1:m����P�����J&?��ˏ��I�m��>���U7�/`̀aB�ITJ�Kٓ�0ZGud�ӻݶ��O�s;:�������MON�3�� :doD�4�J�����#N`)��*򄚙��� p{�4A���f�\�3�T?�����=tC��9泬Hzk*b a9vn�>�K� F� �G�O��% �� (0� $0U%0 + 0��U ��0���[�p�ir�#Q~�M��ˡr0p1+0)U"Copyright (c) 1997 Microsoft Corp.10UMicrosoft Corporation1!0UMicrosoft Root Authority� � ��c��@0 +  �7  0U)\���3Y}���.� 4(0 +  �7 S u b C A0U F0U �0 �0  *�H��  � EX�A���Hww�����W����_�Ej9Y��'�-M����8�8d"B߹/*Ϸ���*���|�Q=�"���m��D_d�dĩ�,�ې7J���a�vv��%�$���VT��:>����Ky_�I�^2i:T�uM�d�0|Cb�;�eK�,�TB��"A� v�?�ǭ* g��.�@��q�Z&U�dB'�^�@�\%^Ht��+eUR��ov������& g�7y��u;P������_��=��L0�H *�H�� 1�90�5 0��0��10U VeriSign Trust Network10UVeriSign, Inc.1,0*U#VeriSign Time Stamping Service Root1402U+NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.zm\ob�O���C��0*�H��  �Y0 *�H�� 1 *�H��  0 *�H�� 1 020121103514Z0 *�H�� 1����"i ������,0  *�H��  � 6���k���n��mջ��wae����|� >Ƞ��E�p����. �����^�r� I�%B��'Vd�!.`�3 �_�8ALk��_�0�ԜR?n�l�i��6O��3��7����G��m�Xѫ��(, 3) ident.txt file [cabpools] ServerCount=1 default=1 Server1=http://www.download.windowsupdate.com/msdownload/update/v3-19990518 [v3] ServerCount=4 default=1 Server1=http://windowsupdate.microsoft.com/R911 Server2=http://www.windowsupdate.com/R911 Server3=http://www.windowsupdate.microsoft.com/R911 Server4=http://windowsupdate.microsoft.com/R911/v31site [content] ServerCount=1 default=1 Server1=http://windowsupdate.microsoft.com/v3contentA [content31] ServerCount=2 default=1 Root=2 Server1=http://windowsupdate.microsoft.com/R911/v31content Server2=http://windowsupdate.microsoft.com [V2Header] arch=V2Arch os=V2OS lcid=V2LCID browser=V2IE server=V2SRV [AUHeader] arch=AUArch os=AUOS lcid=AULCID browser=AUIE server=AUSRV [WUV3Header] arch=WUV3Arch os=WUV3OS lcid=WUV3LCID browser=WUV3IE server=WUV3SRV [QMgrHeader] arch=QMgrArch os=QMgrOS lcid=WUV3LCID browser=QMgrIE server=QMgrSRV [DUHeader] arch=DUArch os=DUOS lcid=WUV3LCID browser=DUIE server=DUSRV [V2SRV] server= [AUSRV] server= [WUV3SRV] server= [QMgrSRV] server= [DUSRV] server= [V2Arch] x86=/x86 alpha=/alpha ;rel number is arbitrary but should not be repeated [AUArch] x86=/rel1083.11/x86 alpha=/rel1083.11/alpha ia64=/rel1083.11/ia64 [WUV3Arch] x86=/V31controls/x86 alpha=/V31controls/alpha ia64=/V31controls/ia64 [QMgrArch] x86=/qmgr1109.0/x86 alpha=/qmgr1109.0/alpha ia64=/qmgr1109.0/ia64 [DUArch] x86=/DuRel2517/x86 ia64=/DuRel2517/ia64 [V2OS] w98= w95= NT4= NT5= [AUOS] w98=/w9x w95=/w9x NT4= NT5= mil=/mil whi=/whi [WUV3OS] w98=/w98 w95=/w95 NT4=/nt4 NT5=/nt5 mil=/mil whi=/whi [QMgrOS] w98=/w9x w95=/w9x NT4= NT5= mil=/mil whi=/whi [DuOS] w98= w95= NT4= NT5= mil= whi= [V2LCID] ar=/ar zhtw=/zhtw zhcn=/zhcn cs=/cs da=/da de=/de deat=/de dech=/de el=/el el_ms=/el el_ibm=/el en=/en enza=/en engb=/en enau=/en enca=/en ennz=/en enie=/en en_arabic=/en en_hebrew=/en en_thai=/en fi=/fi fr=/fr frbe=/fr frca=/fr frch=/fr he=/he hu=/hu it=/it itch=/it ja=/ja nec=/ja ko=/ko nl=/nl nlbe=/nl no=/no pl=/pl ptbr=/ptbr pt=/pt ru=/ru sk=/sk sv=/sv th=/en tr=/tr sl=/sl es=/es esmx=/es esve=/es esco=/es espe=/es esar=/es esec=/es escl=/es [AULCID] ar=/ar zhtw=/zhtw zhcn=/zhcn cs=/cs da=/da de=/de deat=/de dech=/de el=/el el_ms=/el el_ibm=/el en=/en enza=/en engb=/en enau=/en enca=/en ennz=/en enie=/en en_arabic=/en en_hebrew=/en en_thai=/en fi=/fi fr=/fr frbe=/fr frca=/fr frch=/fr he=/he hu=/hu it=/it itch=/it ja=/ja nec=/ja ko=/ko nl=/nl nlbe=/nl no=/no pl=/pl ptbr=/ptbr pt=/pt ru=/ru sk=/sk sv=/sv th=/en tr=/tr sl=/sl es=/es esmx=/es esve=/es esco=/es espe=/es esar=/es esec=/es escl=/es [WUV3LCID] ar=/ar zhtw=/zhtw zhcn=/zhcn cs=/cs da=/da de=/de deat=/de dech=/de el=/el el_ms=/el el_ibm=/el en=/en enza=/en engb=/en enau=/en enca=/en ennz=/en enie=/en en_arabic=/en en_hebrew=/en en_thai=/en fi=/fi fr=/fr frbe=/fr frca=/fr frch=/fr he=/he hu=/hu it=/it itch=/it ja=/ja nec=/ja ko=/ko nl=/nl nlbe=/nl no=/no pl=/pl ptbr=/ptbr pt=/pt ru=/ru sk=/sk sv=/sv th=/en tr=/tr sl=/sl es=/es esmx=/es esve=/es esco=/es espe=/es esar=/es esec=/es escl=/es [V2IE] ie4= ie5= [AUIE] ie4= ie5= [WUV3IE] ie4= ie5= [QMgrIE] ie4= ie5= [DUIE] ie4= ie5= ____________________ Last, there is a "Drizzle" Easy CD Creator Image File icon, 689 bytes with the .cif extension. When I click it, Easy CD Creator says it is not a valid CD image file. John

Removal on Win2000/WinXP Remove the Messenger crap: Start Regedit. 1. Locate and click the following registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft On the Edit menu, point to New , click Key , and then type Messenger for the name of the new registry key. 2. Locate and click the following registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger On the On the Edit menu, point to New , click Key , and then type Client for the name of the new registry key. 3. Locate and click the following registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client On the Edit menu, point to New , click DWORD Value , and then type PreventRun for the name of the new DWORD value. 4. Right-click the PreventRun value that you created, click Modify , type 1 in the Value data box, and then click OK . 5. Quit Regedit. Remove the startup of QueryManager by removing the key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\LoadQM

Been reading this thread....And diggin... I have pulled these stings out of the loadqm file.I am not a engineer by any means. I was interested after I read what someone wrote about Microsoft denying the files creation.I looked thru it.....dont really know what I am seeing besides microsofts name in the code.It calls kernal32.dll? Also says GETMESSAGE and DISPATCHMESSAGE. Below are the strings. 00004Dh="!This program cannot be run in DOS mode." 0000B0h="Richs" 0001C0h=".text" 0001E8h=".data" 000210h=".rsrc" 0006E0h="QueueManagerLoader" 0006F8h="Software" 000701h="Microsoft" 00070Bh="Windows" 000713h="CurrentVersion" 000722h="QMgr" 000728h="RegisterClassEx returned " 000744h="DelayLoad" 00076Dh="@Gp" 000773h="Y1 " 000795h="SOB" 000811h="k6w" 0008C4h="XPVj" 0008F8h="WVV" 000973h="WSW" 00097Bh="WPPPPh" 000985h="VVW" 00099Eh="EWP" 0009F4h="Ht1Ht" 0009FFh="udj" 000A2Dh="PhD" 000ACAh="QQQj" 000BFEh="RegCloseKey" 000C0Ch="RegQueryValueExA" 000C20h="RegOpenKeyA" 000C2Ch="ADVAPI32.dll" 000C3Ch="ExitProcess" 000C4Ah="GetModuleHandleA" 000C5Eh="GetStartupInfoA" 000C70h="SetErrorMode" 000C80h="GetCommandLineA" 000C92h="GetLastError" 000CA0h="KERNEL32.dll" 000CB0h="DispatchMessageA" 000CC4h="TranslateMessage" 000CD8h="GetMessageA" 000CE6h="ShowWindow" 000CF4h="CreateWindowExA" 000D06h="wsprintfA" 000D12h="RegisterClassExA" 000D26h="FindWindowA" 000D34h="DefWindowProcA" 000D46h="SetTimer" 000D52h="PostQuitMessage" 000D64h="KillTimer" 000D6Eh="USER32.dll" 000D7Ch="CoUninitialize" 000D8Eh="CoInitialize" 000D9Eh="CoCreateInstance" 000DB0h="ole32.dll" 001180h="FE2X" 001B00h="PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING" 001B41h="ADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGP" 001B82h="DDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPA" 001BC3h="DINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING" 001C0Ch="exe" 001C10h="LOADQM.dbg" 001C1Bh=".exe" If anyone finds out what this exe does...I am very interested....I have disabled loadqm in my system config.....but loadqm is still running.Want to know exact procedure to edit my registry if someone would email me with it.I feel violated....Is this America?? RG gmtech@woh.rr.com Sorry about the length......

A Microsoft KnowledgeBase search for "loadqm" found Q309418 (http://support.microsoft.com/search/preview.aspx?scid=/search/viewDoc.aspx?docID=KC.Q309418%26url=kb;en-us;Q309418%26dialogID=10399453%26iterationID=1%26sessionID=anonymous|9224615). This article contains a brief description of loadqm and its role.

Well glad to hear Im not the only person who was wondering what this loadqm was. After doing some research I found out that loadqm is part of Qmgr. Loadqm is a "quality monitor", which collects and transmits anonymous info back to microsoft. Qmgr is a queue manager, which compiles the information to be sent to microsoft. The official line is that it is Microsoft's Quality Manager, a component of MSN Explorer and MSN Messenger. Its purpose is to check if updates are available for MSN Explorer or MSN Messenger. So when you log on to MSN Explorer or MSN Messenger you receive the latest update of the software available on the market - it gives Microsoft the ability to know what version you're using and automatically update it.

Interesting thread. In the past 30+ minutes reading it I have gone from feeling pissed off, to impressed, to exposed, to relieved to relaxed and back to standing here with my pants down again. Isn't high-tech wonderful? I'm deleting it.

I started simply to try and determine what this strange Loadqm error was that popped up almost every time I started Windows ME up. I have used this OS for only a short time and am about to switch to new computers and WinXP. I have been a long time believer, customer, and user of MS Windows Operating System. Now, in my "golden years" I am at the point where I am beginning to wonder. I have nothing to hide, but I do not like to have anyone trying to sneak a peek at what I am doing. I am deleting this file, and hoping I do NOT see it reappear in WinXP.

this is a Query Management Application that works in association with other programs, such as checking for Updates at Windows Update, Checking for Messenger Updates, etc. it installs with several different things one may download from Microsoft or Windows Update, such as Critical Update Notification, Internet Explorer Error Reporting, MSN Messenger, MSN Explorer, it Manages Queries from these different applications and conducts a single combined Query to MS to check for Updates or if you have an Explorer Error, it has some to do with Gathering Info Critical to the DeBug Process so a reason for the error can be better attained. I am not an employee of MS or anything so my answers and observations may mean little to nothing to most people, but I do Tech Support and am a System Builder and this prog bugged me for a short while, after watching the many little things this little prog Manages, I was quite Impressed actually with how seamlessly it works, but one thing I would be aware of and watch for would be the "Script Kiddie" types figuring out how to use this little tool for less than Honorable Purposes, as for MS "Stealing" your info or "Spying" on your activity, that is seriously Doubtful, there are much Simpler ways for them to do that "With Your Permission".