Virus Alert – USER32.EXE

User32.dll is a valid Windows files. User32.exe is probably part of a virus. The most notable of these is the Sasser worm. Microsoft offers background information at http://www.microsoft.com/security/incident/sasser.asp.

If you use Windows 98/Me and get a "fatal exception 03H" referencing user32.exe, please see this article in Microsoft's Knowledgebase: http://support.microsoft.com/?kbid=182142.

User32.exe installs with the backdoor.Freeweb trojan. If you have this on your system, you'll also find mmtask.dll. We'd recommend removing both files using WinPatrol.

User32.exe insalls with backdoor.nettrash. If you have this on your system, you'll also find xsedition.exe and nettrash.exe. We'd recommend removing these files using WinPatrol.

User32.exe installs with PWSteal.Pport. A file called user128.dll will also appear on your system. We'd recommend removing these files using WinPatrol. More info on this trojan can be found at http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.pport.html.

Virus

Remove