Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
Hey, I have this firewall that tells me what's connected to the internet [not Zone Alarm]
and I don't know why, but there are these 2 files that keep connecting to the internet.
Can you please help me find out
-Why it's connecting to the internet
-Which program does it "work" for?
Thanks
The file names are:
C:WINDOWS/SYSTEM/SSDPSRV.EXE
C:WINDOWS/SYSTEM/LOADQM.EXE
(I'm running Windows ME and have T1 - if it helps)
I am running M.E. but i dont have those files in my system. Find the selected files then right mouse click on the file, and select properties, then you should be able to find what the file does and what program it is associated with.
0 
http://pub1.ezboard.com/fthescreamhackattempts.showMessage?topicID=266.topic&index=1
and
LOADQM.EXE ======== more MS spy ware
0
People who have firewalls report to have this file running (SSDPSRV). Wouldn't supreise me if is a Firewall file of its own.
0
SSDPSRV is universal PnP. turn it off by uninstalling it from add/remove programs>>windows setup>>communications
0
OK , that file (SSDPSRV.EXE) is used with the Windows ME updater it should be the little Icon next to the clock, it loks like
a little earth... I have tested it and that file just listens to the update server but will not allow any transfer without telling you... so nothing to worry about.
0
I too have that question. I have WinMe and it is in the windows folder. I disabled it in startup, and doesn't seem to have hurt anything.
0
Loadqm.exe seems to be associated with msn explorer and is used in checking if buddies are online and email...and advertising Micro$oft products.
0
SSDPSRV it is a P&P manager. You can read about it at http://support.microsoft.com/support/kb/articles/Q262/4/58.ASP?LN=EN-US&SD=gn&FR=0&qry=ssdpsrv&rnk=1&src=DHCS_MSPSS_gn_SRCH&SPR=WINME
If you want know about MS programs look for them at the Microsoft Knowledge Base (the site above). There are info there you cant find anywhere...
0
Hi I have windows ME and I get this little icon on bootup Which has PCW, inc. TRD 1996 on it then it flashes off. Does anyone know what this is?? Kinda irritating. This Icon is about 1/2 " x 1/2" and appears on the lower left part of my screen. Any help would be appreatiated. Thanks,
Dantin Hart
0
ssdpsrv.exe this file is a backdoor
he runs on port 5000
a lammer put it in my windows ME
but I take it
0
I also get alerts from my firewall, (Zone Alarm)telling me that Loadqm.exe is trying to connect to the internet. I refused permission and tried to delete the file, but am unable to. I get a message that says THE FILE IS IN USE. How can this be? Now That I've refused permission, I can't open MSN EXPLORER. I have WINDOWS 98 SE. I'm going to allow access and reboot and see what happens.
0
From what I know loadqm.exe has something to do with MS Query manager and is loaded automatically at startup. The file is created as some have already mentioned with MSN Explorer and also with the latest update for MSN Messenger - perhaps its purpose is to update your buddies list and notify you of mail, of this I am not sure. You can selectivly remove the file from startup by the two following methods in Windows 98, whether this adversely hinders the operation of MSN Messenger I don't know but someone above has already mentioned that denying it access to the internet when using MSN Explorer causes the program not to operate... MSN Messenger so far seems fine to me. The first method is through selective startup, the safest option as it is easily reversible. The second is by deleting the file from the the registry, more permanent, not as safe(if you are unfamiliar with the registry) and less easily reversed.
Method 1:
- Click on... Start->Programs->Accessories->System Tools->System Information
- From the menu choose... Tools->System Configuration Utility
- Click on the tab which says Startup
- Scroll down the list that appears till you see the entry for loadqm.exe and remove the tick from the box beside it then click apply followed by Ok... you can then close the open windows.(You may want to restart your computer at this time)
-To reverse, follow the steps as above and replace the tick you removed.
Method 2:
- Click on Start... Run
- Type regedit in the window
- Now hold down the Ctrl key and type f
- In the window type loadqm.exe
- When the enry is found, right click it and select delete, then click yes. Registry Editor may now be closed (restart if you like).
- The key you deleted was found at...
My Computer\HKKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Run- To reverse the deletion run Registry Editor once again and browse to the key above.
- Right click under the entries in the right hand window (They look like a list of AB's)and select New->String value.
- Name this string LoadQM
- Right click on the new string value LoadQM and select modify then type in loadqm.exe then click Ok.
Hope this helps, let me know if it does... Byeeee Ian :-)
0
I allowed acess to Loadqm.exe and rebooted and was able to open MSN Explorer. I agree that this could be spyware. It's running all the time, even when I'm not signed in. Does anyone know for certain if this is a necessary file? Has anyone heard back from Microsoft re: it's purpose?
0
This is a microsoft exe i have had it since i installed MSN explorer untill i got bored with it and went onto netscape again, and then when i got the new MSN messenger it downloaded it again and started to run it on startup, havne a clue what it does, other than stop my ICS (internet sharing) working properly.
0
I found loadqm.exe after having problems with my connection. to delete or rename it you need to stop it first (ctrl-alt-del then select it and hit end task). I also removed it from the registry. I run 98SE, ms-messenger and IE 5.5 - everything works fine (better if anything) since i got rid of it. I think it must have come in when I updated messenger.
Gabe
0
Loadqm.exe is just a loader for two dll's:
qmgr.dll and qmgrprxy.dll
these files appeared on my system after I updated MS Messenger... what do they do? well... prxy stands for "proxy", and it opens port 8088 on your computer... (it's all easy to prove, if you know how). Basically, it allows anyone to use your computer as a proxy.
0
I deleted the loadqm.exe and cleared the
registry, and everything works fine.
I have also ZoneAlarm and i was wondering
what the hell is Microsoft QMgr, so i wasted
the b---tard but so far everything is working
just fine, msn messenger and so on...
0
when i hit alt-ctrl-delete, i see a program called Ezulamain. Does anybody know what this program is or what it does?
0
loadqm.exe is a messed up program. its created by the microsoft corporation,
and it was never on my comp b4 i installed msn messenger... it blocks
all my control over appearance and display properties (desktop themes,
display...) if you close it (cntrl-alt-del) it is ok. i opened loadqm.exe
in a program editor and it called itself a "Queue Manager Loader"...
further down in the code it listed .dll files and error messages...
interesting, no? i also found a scrambled image file and internet
port logs... if you ask me, big brother is not only watching, but
trying to control...
-t-
0
about LoadQM, i noticed it open yesterday so i decompiled it and didn't like what i saw, that's how i got here, trying to find out more about it bfore wasting time checking further, but it looks like it deserves more attention.if i find anything suspicious i'll u all know ;)
DiLo
0
I thought you guys might be interested in reading this thread I found on another site:
http://www.sysopt.com/forum/Forum9/HTML/002496.htm
Also, there is a hidden folder in C:\Program Files\QMgr, which contains files that are linked to loadqm.exe. The thread listed above explains a lot...over three pages worth, with lots of links. I have currently deleted loadqm.exe from my system, and it's run file in the registry...as well as the hidden QMgr folder in program files. I downloaded Ad Aware and Zone Alarm and am using both. I have not had a problem yet, and I have even noticed a performance gain both on and off the internet (and the benchmark tests prove it). Please keep me posted though if someone finds the correct way to uninstall this from their system. Thank you.
0
had a customer in the other day with a "lockup" problem. he said he had downloaded ms mesenger and it seemed to start locking up his system whenever he used his dialup with at&t (usually about a minute after he connected). he uninstalled it and the problem continued. i reinstalled win98se, installed aol 6.0, changed modems, deleted dial up adapters, scanned for viruses...blah blah blah.
i did notice loadqm.exe in the task manager, but was unfamiliar with it. i took a chance and ended it..it stopped the "lockups"
so i searched the web and found these interesting responses and thought i would throw this in the pot of interesting conclusions.
0
Here it is what ethereal application captured when i run loadqm.exe(entire tcp exchange).Obviously getting ident.cab from micro$oft, but what is it sending out?
hope it helps....GET http://windowsupdate.microsoft.com/ident.cab HTTP/1.0
Accept: */*
Range: bytes=0-1024
User-Agent: Progressive Download HTTP check
Host: windowsupdate.microsoft.com
Pragma: no-cache
Cookie: MC1=V=3&LV=20019&HASH=0A74&GUID=0DE9740A54434AE5B437D49D9BD6D35DHTTP/1.1 206 Partial content
Server: Microsoft-IIS/5.0
Date: Wed, 12 Sep 2001 01:47:35 GMT
Content-Type: application/octet-stream
Last-Modified: Mon, 27 Aug 2001 18:30:08 GMT
ETag: "9ac6eb4c262fc11:87d"
Content-Length: 1025
Content-Range: bytes 0-1024/7433MSCF D X ^
+d ident.txt KK
CKVN0}&R!?
mA*R/*t!'C|}g$ (939sً繼 5{0(|p,!3X 7;K 36~RM5ٳ<'Fn*Z77R}qR"NJId'~VR? )J W"
U!-dqa %{bul
J7Q 1KXƪ*#L+:15St((_=dPFV}B;@
L"!qz8Q3hK
JAjwrk~0_Kv/A18=+(~.Gփ< 3EL 0R *H
C0?10 *H
0`
+7R0P0,
+7 <
0
I have the same question than everybody.
I use to turn off my laptop pretty often. I will avoid to load this program.
There is another way to avoid loading this program. In the START/RUN type msconfig and obviously ENTER. This program will give you access to any program that it is loading without supervision. Go to the STARTUP tab and uncheck this program.
Best regards,
Rafael : )
0
It tries to connect to the Internet since i've been installed the f--- MICROSOFT MESSENGER (MSN), after starting windows.
--> C:/WINDOWS/LOADQM.EXE
(Win 98 SE German)
Greetz from Berlin...
Tom
0
I have noticed both LoadQM and SSDP files on my system and I thought that I would mention that when I tried to connect to port 5000(the port that SSDP is running on)I got a msg from ZA asking if I wanted to allow SSDP to act as a server. I think I will get rid of them both.
0
LoadQM.exe is a file developed by Microsoft for MSN (Explorer and Messenger) which checks for and downloads updates for both. If you blast it, you'll be fine you just won't get automatic updating.
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
