| All comments about msmsgs.exe: |
 Alex | MSN Messenger for Online Chat and Instant Messaging |
| Crazyboy74 | this is the exe for MSN Messenger |
 ProArt | msmsgs.exe is a Windows Messenger executable which is automatically loaded during XP boot, not a MSN Messenger (msnmsgr.exe). It is safe to disable and does not effect usage of the MSN Messenger. Easy removal: See also: Link |
| | Windows Messenger also in C:\ProgFiles\Messenger\ (XP) |
| gman | This is MSN 6.2 messenger program |
| Ricky Jones | MSN Messanger See also: Link |
 amadeuz | alle msg egal welche sind ein hohes sicherheitsrisiko, da hacker über irq auf ihr system gelangen können |
| syrynxx | Windows Messenger, not MSN Messenger - correct. However, that other link from ProArt is wrong - that refers to disabling the Messenger Service. Try this: See also: Link |
| Hank. | This is Windows Messenger that comes bundled with Windows OS. MSN Messenger is seperate from the OS and can be shut down fully or started up whenever you want. |
| Techie | Like ProArt said, it's the Messenger service that XP uses to alert Microsoft of updates and such, different from the MSN Messenger. |
| Spinning | NEW Hijack! This file is located in c:\program files\messenger and 1.7Mb. IE is Hijacked with Win32/TrojanDownloader.Small.UT Trojan and NOD32 was unable tot rename or delete the file c:\windows\system32\crtv2_32.dll (size: 4k). After killing msmsg.exe (not MSN Messenger!!!) I was able to delete the DLL and the hijack was solved.... STM reported this msmsg.exe also as dangerous! Didn't found more articles on this yet! |
| Sam | msmsgs.exe is not very dangerous for most intents and purposes. It's annoying though if someone knows how to exploit it. Imagine working online and suddenly a messenger box opens up from someone wanting to chat with you... and all without MSN Messenger being open. I got rid of it. Syrynxx's link is accurate on elmination techniques. See that. |
 ogre8fluffy | I've not been able to disable this executable. Even when it says disabled it seems to run anyway sending data to "keylime stats". This attempts to log data several times an hour and this is verified through my firewall. |
 Swanson | All I know is there is no way to stop this from running in your background processes unless you uninstall it permanately!!Everything else just seems to disable it for a short period of time. |
| Isaac | Windows Messenger, not MSN Messenger If you want to dissable it (it is safe to do) simply erase it from your disk. I have tried other options and none really worked. |
| Merkur | there is a new virus using the name "msmsgs.exe" because you THINK its a normal executable. Watch out for it |
| me | This is NOT Msn messenger, msn messenger comes up as msnmsgr in your startup |
| WATCHMAN | Going by BlackViper it just waste's memory, disable it. See also: Link |
| cyberblob | Some ports are not published by Operator ! |
| Commissar | WOW, syrynxx!! Thanks for the info!! |
| | found as spyware, not messenger! |
| Lenisterman | Can connected to worm_agobot.ab or worm_wootbot.bd See also: Link |
| Xtra_Zero | Quite malicious and annoying at times, but normally harmless. |
| Carina | annoying but not dangerous... |
| Dustin D. Cook, A+ | ProArt is referring to the "Messenger Service" used by network administrators, but this process (msmsgs.exe) is related to the Microsoft Windows Messenger instant messaging client. This is also *not* MSN Messenger. MSN Messenger is used by consumers to communicate with friends and family. Windows Messenger is the enterprise variant of the product designed to work with Microsoft Exchange Server 2000 and 2003. So to recap, this is *not* the "Messenger Service" used to alert users and administrators across networks. This *is* an instant messaging client. It is *not* MSN Messenger. |
| Pitopito | 1)msmsgs.exe could be a virus as long as it is located into the system directory (../system32 for win xp) 2)Windows Messenger is not MSN Messenger and you could stop thi service by going to control panel-- system and maintenance-- services (I can't remember exactly since now I'm working on Win NT). Anyway even if removed the task "msmsgs.exe" still run onto your pc 3)I would try to remove MSN Messenger (see syrynxx's link) and then (if you want) reinstall it. After reinstalled it go to options and unchek the flag which enable it to run in background |
| jose | is a spyware. because i dled and they it prompted me to restart the computer. |
| Mike H | I have uninstalled windows messenger and only use msn messenger. Msn messengers proscess is msnmsgr.exe not msmsgs.exe, and i dont know why its still running! |
| Charybdis | Knew Nothing until my Firewall kept going off with this file asking to act as a server. =...and launching IE. Annoying, irritating, potentially dangerous. |
| Boris | msmsgs.exe is not msmsgr.exe(MSN Messenger) or messenger service. It's a downloader virus. |
| Nene | Worm downloader!, i just updated windows messenger from official website and a worm was found after installation, deleted, and then a different one appeared, you can delete the worm, but the msmsgs (located at /Program Files/messenger, not at Windows/System32) will be still there. Wierd, at least |
| Mark | You can get rid of it. Trust me here - I've used this on many computers and it's never reappeared. To disable it for good got o RUN and enter this command: RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove |
| | part of windows messenger exe but not used any more because of msn messenger |
| Freefall | Also a worm which is called AGABOT.AAB , use this name (c:\windows\system32\MSMSGS.EXE) |
| Messiah | The file hasn'ts been dangerous with my computer. It's just annoying to see soemthing start up that you don't use. My one gripe is that you can't really uninstall it. |
| rvoltaire | Did not have before Norton AV. Found after NAV. Disabled NAV-MSN Messenger protection. MSMSGS stopped completely. |
| | windows messenger, 100% useless program since i never heard of anyone using it, it's junk, wasting CPU and RAM, so i blocked it from launching on startup |
| bertrand | pour le desinstaller , il est considéré comme un spyware par PREVX,et s'execute a l'ouverture de windows comme application par defaut et le seul moyen de le desinstaller est demarer, executer, et copier coller dans executer :RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove |
| dick brenholtz | WIN XP Pro: with eMule can get lost and eat CPU like made. Hard to find, Explorer Search & CMD: dir doesn't find msmsgs.exe. I found it finally in C:\Programme\Messenger with free download of Security Task Manager. I killed the process via WIN TaskManager, RENAME msmsgs.exe false_name_msmsgs.exe. Doesn't get lauched anymore, By the way, not being in C:\Windows\Sys32 does not mean that it is other than Bill's crap software. |
| Benjy | Msmsgs is detected as trojan.small (+ others :: See my link). Msnsgs is the legitimate messenger. See also: Link |
 Expresso | This file is the Windows messenger program you get with a fresh install of XP. It could be hijacked...but usually is just harmless and a waste of ram if you have MSN 6.2 from. 6.2 is more secure than the default windows programmy. See also: Link |
| sckoobs | I tried the process outlined in syrynxx's link and Windows Messenger does appear but I can't remove the check from the checkbox. |
| Angie P | MSMSGS.exe first showed up on my start up and I found it because I my puter froze and I lost my mouse and part of my keyboard a tech told me it was a virus or spy ware but neither my spyware or my virus scanner caught it so I found it and tried to delte it but it would not go i had to put it in safe mode then it deleted or so I thought since this my computer now shows that I have something in start up called UserFaultCheck and MSconfig not sure what it's doing but it had to all come from this MSMSGS.exe.. |
| zollie | became suspicious when it was taking up 99% of CPU process, and I wasn't running MSN messenger. |
| Jared | deletes all ms office files and stops efficient internet use |
| Jamie | i ain tno wizard with things like this but i agree on this file definalty being a virus! i'm currently trying to delete it, but can't seem to find a way! i'm sure it's got throw on my winmx downloading program, so if you have winmx look out for this file! it disguises itself as msn messenger but isn't!!!! :( |
| Anand | Windows Messenger, which comes with Windows XP. Can easily disable it from loading at startup by removing it from Msconfig.. [Start Run Type MSconfig. Select the startup tab, un-check msmsgs.!! |
| | Found the messenger login screen different - logs sign in passwords to c:\folders.fpd. Watch out! |
| EnnoxX | Twice I came back after several hours and it was using over 50% of my cpu trying to do something. Don't trust it at all, deleted it |
| pako | rvoltaire is right, after unchecking the scan option from Norton AV msmsgs.exe stops running forever. could be the simplest way to get rid of it |
| WTF | I have msmsgs in task manager even if i'm not running messenger, even though I instructed it not to start. It also tries to act as a server. Most people know that it is NOT a part of MSN so please refrain from adding just another post stating the obvious |
| Chris | Some hackers are using msmsgs.exe to attempt to install trojans, at leats on my PC. Norton 2005 allows you to see the IP address of the attacker as well as the process being used for the attack. After I uninstalled Messenger, and deselected it using msconfig, it would return in 10 seconds or less. Got a command to run from a different site to remove all vestiges of it, then I was able to remove it permanently using msconfig. Once I did this, about 1/3 of the resident programs running disappeared, and I haven't had any more trojan attacks. |
| Pontisteve | I think it's a backdoor messenger service for system administrators to communicate with networked computers such as in a large office. It is NOT the MSN messenger. You can disable it from running in start control panel administrative tools services Messenger. I disabled it, which cures a LOT of popups!! However, I still have a problem that if my computer sits for a long while it starts up. Which boggles me, since I just scanned for viruses with NAV. Something triggers this thing to start even though its disabled. I know hackers and popup creaters use this as a backdoor to get around blockers. |
| clgan | make the computer very slow |
| ShivalWolf | flods network with broadcasts looking up arp asking who is at whatever address, compleatly lags network makeing it unstable |
| Brair | Syrynxx's link to removal of msmsgs.exe caused system instability - it wouldn't allow me to open Control Panel - don't know why - use with caution. |
| | Have try everything to stop this file. then i use microsoft antispyware beta 1. and it found this and stop it never have problems with it again |
| Elvis123 | sehr nervig und cpu auslastung dauernd 100% bei unserem alten rechner |
| steve | 'WIN XP ' It reboots my PC everytime my family logs off from one users to an other |
| Jmack b..... | There is a program that can disable it called Safexp just do a google search, It is eaither a very annoying thing that starts up or a worm |
| Timber Wolf | M$ XP component, NOT MSN. It does not seem to do any thing but use resources (at least that I want to do). I have tried to shut it off using Msconfig and other XP service controllers as well as three programs that let you control services. NOTHING shuts it off, it continuosly restarts without reboot. Can be a virus, but not this version. |
| 13incher | I have tried everything to disable this file, I disabled it in msconfig, in 'services' it must be a virus or spyware of some kind takes too much RAM to be the normal msmsg.exe that is windows messenger (about 4X the amount it uses on my other PC) |
| sillyMe | I have only noticed that this file appears on hacked copies of win xp |
| NO IDEA | I dunno what happened, but my desktop wallpaper changed to a BSOD-like with a warning of spyware, couldnt changed it, there was no tab TO! it was gone. It added a toolbar which is called Virtual Maid and run msmsgs.exe as shell with explorer.exe. Also added proxy setting in my IE and kept crashing it each time i try to run IE. |
| jouni | it is trojan,and very annoying one hard to get rid of |
| candy | I removed MSN Messenger from my computer as well as Windows Messenger. But I still can see this file in my task manager and whenever I end the task it disappears and come back in a few seconds. It slow down my PC, must be a virus. I don`t know what to do with it. |
| | It's an annoyance, i block it from starting up |
| | not it's not a virus. its the standart-messenger you 've installed with windowsXP.. the downloaded msn messenger isn't the same file , right.. so NOT dangerous |
| bobo | I have disabled windows messanger through msconfig, and add/remove programs, but it still runs under my processes and uses 100% of my recources and i'm running 1gig of ram! |
| Thomas | virrus also installs wp.exe at the root. you must stop it from running before deleting. |
| wildebras | it sets of an auto-dailer for 80 euro cts/a minute |
| | this files keeps running in the process, even after totaly disable it pops up on the tool bar at the bottom for a split sec. if you try to click on it , no luck. I have rebooted hard drive and it still came back, i have no idea what it really is but think it is a worm. |
| helpmeplease | I kill the process and 2 minutes later it's back. I've tried everything to get rid of it, renaming files, anti virus scan, removal from registry but it just keeps coming back, entire local network is infected |
| Michael Dubar | It is normally in the Programs folder, not sytem32 as stated |
| Rene-gad | Sollte sich msmsgs.exe im Ordner C:\Windows\System32 befinden, dann ist diese zu 100% gefährlich See also: Link |
| JRA | Msmsgs.exe keeps triggering complaints from Norton Security. Also the "Messenger" button on the MSN web page now points to clk.atdmt.com/AVE/go/msnnkonm0020000888ave/direct/01/ that domain is owned by a marketing company! |
| justhank | Suddenly appeared on Programs running. i do not have XP. I am using ME. Removed it according to instruction from another forum but it has reloaded. It does not show up on HiJackThis scan. |
| Raven | I instructed it not to start and deleted it as well as all references to it in the registry. Yet after a while It always re-appears in the win/system32 folder AND starts itself without asking. Also unchecked it in msconfig and it just checked itself again! Ive never seen that before!?. Very suspicious. See also: Link |
| Sparky | rvoltaire is correct. The other fixes like msconfig/startup and the sysoc.inf file didnt work. |
| wghost | Msmsgs won't start automatically if msn messenger is not under the protection of Norton AV, provided you unchecked the start up option in window messenger. |
| Air | msmsgs.exe runs my cpu speed at 100% and doesn't stop until I end the process what can I do to stop this from happening? |
| AleX | Well, i found it in the "system32" folder soon after the installation of MSN 7. I don't know if it is dangerous or not, but i deny its access with AntiVir |
| geer | it's not dangerous, but it's just annoying. If i want to start ms messenger, i start it myself. |
| whenheco | after unchecking the scan option from Norton AV msmsgs.exe stops running forever. could be the simplest way to get rid of it |
| Sparkman555 | There are three similar services that get mixed up: 1. messenger service, 2. windows messenger, 3. MSN messenger, please see the link for a very clear explanation. Msmsgs.exe is used by #2. (windows messenger), See also: Link |
| Michael | Okay, I finally figured out why I have msmsgs.exe running in the background. MSMSGS.EXE is an OLD version of MSN Messenger. So basically, I have two MSN Messengers on my Windows XP. The OLD MSN Messenger, which can be found under Program Files / Messenger, should be opened. Then go to Tools / Options / Preferences. It has an option which says "Allow Windows Messenger to Run in the Background." Turn that off. Problem solved. Or you could simply uninstall the second MSN Messenger, which I plan to do. |
| | firewall |
| PC | ...whatever msmsgs.exe is, unchecking the scan option within Norton AV put an end to those annoying error alerts here also. My fried brain thanks everyone who suggested it. |
| Darth Vader | Do not remove ms mesenger(msmsgs.exe). Because It is API. MSN mesenger and other MS office programs actually use this API. MSN Mesenger use this API for aplication sharing, remote Assistence for example, If you remove msmsgs.exe from OS, you can not use all fuctionalty of MSN Mesenger, sorry for my English |
| Top NISS | To remove msmsgs.exe for good. Run regedt32, nav to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService. This displays the rollback command and rollback parameters to remove msmsgs. To use: go to START, Run, enter RunDll32.exe, followed by a space, then enter the rollback parameters exactly as displayed in the registry, and enter. The syntax must be right on. Give the system a reboot and presto, no msmsgs.exe. Do not make any changes in the registry. Hope this helps, let me know. |
| Acidus | This will rid u of this for good. run regedt32, nav to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService. This displays the rollback command and parameters. Run this (START, Run) with the command first [RunDll32.exe], a space, then the parameter exactly as displayed. The syntax must be right on. Give system a reboot and bye bye msmgs.exe |
| kitkat | Any program that unexpectedly appears on your computer trying to access the internet is suspicious. I could not delete or rename the file initially because the file was running in the background. I performed ctrl-alt-del and ended the program after which I could delete the file. I found other comments here to be very helpful. Thank you. |
| BG | On June 7, 2005 I went to MSN messenger and unchecked run in background and run at startup. After saving these settings MSN messenger removed the entry "c:\program files\messenger\msmsgs.exe /background" from my registry. This confirms that in my case the file was not a virus/spyware and that the file is tied to Microsoft Instant Message. |
| Darth Vader | Do not unistall this file. It is actually a Windows API. Same program including MSN Mesenger and MS Office Outlook use this API to function correctly. For example MSN Mesenger use this API for remote assistance. If you uninstal msmsgs.exe, you can not use same future of MSN Masenger and other programs. |
| | There is a virus that is downloaded through an executable called msmgs.exe... it's probably not related to the windows messenger, but given the same name. I recommend uninstalling it, so you know if you have the virus or not. I got it recently, and it shut down my computer unless in safe mode... |
| g-unit | msmsgs.exe is anormal windows file but on my pc it has been overwritten and is being used by a spy-ware company but i cannot find it to delete it beacue the spy ware has found a way of hiding it and none of theideas in this forum have worked does anybody else know how to do delete it See also: Link |
| Jeff | More Thanks to Mark. Out of all this I read...he had the correct answer. To disable it for good got o RUN and enter this command: RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove . Quit speculating. He hit the nail on the head. Read all the posts. |
| Gotlandix | It must be a spyware of some kind, as many of you guys write it eats process capacity and killing the process doesnt stop the problem. I did as some of you mentioned I killed the process and removed the folder "Messenger" underneith "Program Files" it solved all my problem. |
| rod | definitely from norton antivirus go options msn messenger scan or something under the internet tab and deselect the msn check - that gets rid of it, but does it also mean messenger is now not virus protected? i deselected it anyway.. |
| terencio | Does any one know what 's wrong with this. I down load msn messenger 7.0 and I can run it. it gives me and error messege. error starting program: The DNSSAPI.DLL.file is linked to missing export KERNEL.32. DayLoadFailureHooK. |
| bubi | Das hat mit Windows XP nichts zu tun !! Ich hab es auf Windows 98. Und Zone Alarm fragt regelmäßig an, ob ich dieses Prog ins Internet lassen will. Seit zwei Tagen. Da stimmt was nicht. Leider erkennt AntiVir es noch nicht. |
| M.A.C. | Sometimes a Trojan downloader with a legal XP-MS file name. Got rid of it deleting registry's key: LOCALMACHINE-Microsoft-Windows-CurrentVersion\Policies\explorer\Run |
| | author is Eternal order of the impossible triangle,I agree with jamie,think it has something to do with winmx. |
| | it's the file u can use to send messages over a network, by using NET SEND in the msdosprompt! |
| denise smith | msn wont run with wimdows messenger on it wont let me sighn in dont no why |
| mossespa | agree with rvoltaire! Turned off messenger scan in NAV. process now gone |
| john | virus if located in windows/system32 folder....remove! |
| Hayley | How do i get the EXE file for MSN messenger |
| fvsdcdv | sxasc sdvdfvdf adfbvdfavbad f b See also: Link |
| Kurt | Might be used by Trojan.Zlob.B See also: Link |
| commie | The "NOTE" on top of this site is bullshit. If msmsgs.exe is in your Windows/system32 folder (for xp) then yes you probably have a virus - check this out for yourselves at Symantec (Noton) - It is also NOT the messenger that you can turn off in the control panel - that one is the annoying one that would give you pop-ups all the time. If msmsgs.exe is located in C:program files/messenger -- then this is the old version of msn messenger it is called windows messenger - and it most likely came with your computer. I've removed the little bastard from the "remove windows componets" thru the con |
| Shadowbird | I have read the above. In regard to it being an old version of MSN Messenger, maybe for some. But mine already had the option turned of for "Allow Windows Messenger to Run in the Background," so it could not be Windows Messenger. (I had to go through "my computer" to find Windows Messenger., and it is just called "Messenger." So maybe it's not even Windows Messenger but something that was installed without my permission. It also does not have an "uninstall" feature. ALSO REGARDING going to MSConfig and turning it off, it does not show up in MSCONFIG. So I am betting this is a virus or such. |
| Aktrys | rvoltaire, you are awesome. I never thought to check Norton AntiVirus. Trying to right-click, exit the program from the task bar always gave the error that another program (such as IE or Outlook Express) was using it, but I never figured out what that could be. It all makes sense now! Thank you! Whoever has Norton, scroll up to rvoltaire's sage advice, it works like a charm. |
| RRRode | I have to dearly thank you folks that informed of disable the messenger scan in NAV. This has been driving me nuts ever since I loaded XP. Msmsgs.exe has been freezing my system almost every day since. I kept deleting in Task Mgr after every boot and it kept reappearing sometimes three times and still locking up. Now, GONE! Thank-you. My system is lonely for CPU action. |
| Rats | I only know according to my firewall logs it tried to get on the internet all the time. I got rid of it. It tried to go on even though I didn't have it set under tools to start at windows startup, and if you end the process from taskmanager, you would see it back there eventually, so I found the site with the link I am putting on here and got rid of it. See also: Link |
| Pietro | it's NOT MSN Messenger but it IS necessary for MSN Messenger to run. If you don't use MSN messenger you wanna take msmsgs.exe out by doing what syrynxx suggested;it will prompt you to uninstall MSN messenger as well.In my pc it has been exploited by a spyware program so the point is: if you don't use MSN Messenger (suggested) uninstall both programs |
| Computer Whizzzzz | msmgs.exe is windows messanger, but i dont get why you cant uninstall it, its useless, especially with the msn patcher wher you can have msn messenger sign in multiple times, msnmsg.exe is msn messenger but msmsg is not harmful at all, however, it is prone to get many viruses attach itself to that fie because peopl know you cant uninstall it |
| Shadowbird | Figured it out. In my case, it was a Norton Antivirus to protect Windows Messenger. Click on Norton Antivirus 2005, Options, Instant Messenger, unclicking protect Instant Messenger gets rid of the msmsgs.exe in Task Manager. But not sure this is a good idea unless there is a way to uninstall Windows Instant Messenger. |
| Martin | To disable "msmsgs.exe" close the process from the Task Manager ( Ctrl+Alt+Del). Then go c/program files/mesenger/ and just rename the two .exe you are going to find :" msmsgs.exe" and "msmsgsin.exe" ( I usually put an "X_" before the name). The MSN Messenger should be not affected |
| qwerty | Windows Messenger. If you don't use it it's better to remove it (delete or rename the ?:\Porgram Files\Messenger or delete from the Registry (HKCU\Software\Microsoft\Windows\CurrentVersion\Run) |
| Paxa | It could be a part of the Windows Messenger, but, if it not (i.e. because you are not using the W.M.), it's a kind spyware.. See also: Link |
| sharon | you can always rename the file, it won't load that way. if you need it, you can put back proper name. |
| zeero | your definition for virus is not clear - my msmsgs.exe is located in c:\Program Files\messenger See also: Link |
| Dontales | was ist wenn die datei im windows messenger ordner ist also C:\Programme\Messenger |
| Rose | Check this link: http://www.windowsnetworking.com/articles_tutorials/Windows_XP/ |
| | Is a part of the microsoft messenger (To uninstall the messenger use XpAntispy) |
| Gary | Mark's solution of going to "Run", inserting info, WOKKED! Thank you, Mark!! |
| broomhead | i know my windows messg is disabled and this was running in taskman wtf |
| SnypaStarr | its harmless. its just windows messenger |
| d0rr | virus hoaxes!! please guys, dont teach us to delete windows important files!! other users, please take note that some of the steps are harmful to your good programs!! |
| Glenda Gammel | PS Truth Miners advises Turn OFF msmsgs.exe. Enabling it allows anyone online anywhere in the world to pop up Windows on your screen to fool you into taking actions that may not be in your best interest or instruct you to take actions that divulge sensitive info, change your password, link you to a web site. SPAM senders use msmsgs.exe to distribute ads. Disable instructions at |
| | After I noticed the file didnt close the messenger, I looked for it with the find command. It was indeed, as people mentioned, the file running "Messenger" Windows messenger. Not MSN Messenger. It had been replaced by a trojan with the same name. Deleting the folder: C:/Program Files/Messenger solved the problem. It tried to prevent me from deleting it by running as soon as the computer started, but I ended the process through task manager and then quickly deleted the folder containing the file, and now I have no problems so far. |
| bil77 | It is a file for standard windows messenger NOT msn messenger, but has been used as a virus taking up system time and so on |
| Fingers | keeps restarting syrynxx rocks |
| | depends. There are many malwares that hide as this program (is a fake program) It is supposedly necessary to run certain programs, including the messenger itself. I didn't really trust it, so I deleted it and got Trillian, hoping it was more reliable. |
| fonk | listen rvoltaire and mossepa - if you delete this file and it reappears nearly instantly and you have norton, open norton(I run 2k5) and go to option threat cat advanced uncheck the messenger scan. then open task manager and delete msmsgs.exe.-it should not come back. did not return for me! |
| JoeMoron2000 | it comes back no matter what the hell i do! i end the task, 30 seconds later, it's back! |
| MB | I followed the Norton AV advice and it got rid of it. Thanks. |
| DJ | Communications process, required by many Windows components. Is NOT MSN Messenger (named msnmsgr.exe, different spelling). If you delete it, be prepared for system instability and the failure of certain programs to work. |
| thegreatnorth | Windows Messenger (msmsgs.exe) Use Add/Remove Windows Components and uninstall it. if you are using Norton Antivirus you must uncheck Instant Messenger protection in order for this process not to run anymore. |
| | Transmitts net send and Alerter service messages between clients and servers. |
| Chryzler | der stinknormale MSN Messenger |
| AllKnowNerd | The file is not dangerous, serious stop whain it is just Messenger, yes it is right some hackers use this in toyr memory but no, dont trust that the can do it, if the file is about 3.000 - 4.000 kilobyte in your memory it is Messenger and it is harmless so dont trust the newbies who say it is dangerous! See also: Link |
| DarkSide | Its MSN Messenger... |
| Funkup | It's Windows Messanger I found this out a few days ago thanks guys :D Just Disable it from running in background thats all I did! it works! |
| Frank FSD-Team | keine gefahr |
| Fernando P | keeps on poping up very irritating. I erases everyting re alting to messenger, it keeps on poping up HELP anyone THANKS |
| Robert Ketron | This is the default messenger that Windows XP by microsoft, and Windows 2000 by microsoft, this is a very unsecure file but is NOT a virus. See also: Link |
| jowunger | not all what looks harmless IS harmless since many trojan/virus/backdoors use standard file names, but they usualy resides in other directorys. So if you want to check you better check WHERE those files are. Have fun! |
| Mindlord | My Aunt's computer has this bug, It is not MSN Messenger no matter what these other people say, it is a very nasty ad popping worm, and it's excessively annoying to remove. So far Spybot S&D and Adaware aren't working, but I suspect that Norton will kick it. |
| CTFer | verändert das system |
| Lucky | Messenger is replace by msn messenger witch is better...Messenger options will only prevent from appering in taskbar...there is one simple way to deactivate it...start / run / msconfig / ok / services / messenger / clear the box "v" / apply / general tab will switch from normal to selective this is normal / OK /restart computer / a box will apear / clic the empty box / OK/ you are done. |
| Brian | This file appeared on my pc and for awhile it was harmless. Then, it made my pc freeze and I had to rebuild my os from the disk. I finally found out that it is a virus or worm of some kind and followed Mark's fix. Now I have no troubles. Thanks Mark! |
| Tommy | Freed up almost 9000K as appeared in Task Manager. Harmless or not, freeing up memory and background processes FINALLY is so NICE! |
| gill | YES! even if i uninstall my Messanger, it still runing! |
| seveninstl | I did not even have Windows Messenger enabled (Add/Remove Programs - Add/Remove Windows Components). I found this file in many places, but not the system32 directory. I ended the process using Task Manager - the first attempt gave me a message that the service could not be stopped, but after trying again, it did stop. Then I was able to delete all instances of the file. |
| corydalus | Oops. Anyway, I have the possible Trojan version. I was able to not have it start using Spybot's "Tools". Then I (hopefully) defanged it by removing the exe suffix and renaming it. If nothing bad happens, I can presumably delete it. Caveat: I know squat about these things; I just poke around. |
| WillbeOuttolunch | So sre we saying that there are three separate programs here (windows messenger, messenger service, msn messenger)? |
| Dan | My active window kept going inactive every couple minutes (very annoying).I could see it was related to msmsgs.exe from task manager.Turning off the messenger protection in Norton seems to have solved it (crossing fingers). |
| Andrew | Defiantely uses resources and allows popups to flood your compy, Kudos to Mark from a third of the way down, his idea fixed it, got rid of it for good on my compy, go start/run: RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove |
| mykeeX | BTW this thread is for people who want to remove WINDOWS MESSENGER.... NOT MSN MESSENGER.. dont know why people always get these two programs mixed up |
| Bree | Micheal figured out my problem. I had an old version of MSN messenger running whenever I started up (unbeknownst to me), and after trashing two of the .dll files in the c:\program files\messenger folder, I was able to end the process in task manager and delete the whole messenger folder. I don't have any problems running my new version, so I think I'm satisfied. |
| pratham4u2002@yahoo.com | its jus msn messenger so need to worry . to confirm go to RUN --- MSCONFIG--- STARTUP --- and tick mark if u want it to be executed during ur windows starts. another way of verifying it is---- run msn messenger and then press Alt+ Ctrl + Del and then go in applications and processes Tab and u can see it there |
| Arslan | I kill the process and 2 minutes later it's back. I've tried everything to get rid of it, renaming files, anti virus scan, removal from registry but it just keeps coming back, entire local network is infected |
| Nasrullah | Mark's suggestion works, just type RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove into run and it will be gone. I like to have my computer running only essential processes so this is great. |
| Larry | Someone said Norton AV kept booting it over and over and if you turned NAV's Messenger protection off in AntiVirus it would stop booting. I turned it off and haven't seen it booting since. THANK YOU rvoltaire! |
| Wasser | All you have to do is to end the process, and quickly rename the msmsgs.exe file in the |
| Iconoclast | msmsgs.exe would constantly be in my task man. running the cpu column up to 98. and frequent lockups, or slowdown, decided to google it, and this is where i found my answer, since i've removed it, no problems/lockups/slowdowns :-D |
| Dr. Artaud | Just as this says, "Did not have before Norton AV. Found after NAV. Disabled NAV-MSN Messenger protection. MSMSGS stopped completely". I have Notron's AV. I have the MSMSGS disabled, yet it shows up in the Task Manager. If I disable NAV's Messenger Protection, the process stops and is removed automatically from the Task Manager. If I re-enable it, it appears again. |
| | now i know how to turn it off, but how does it allways put itself back on the ?registry if you dont know that way of turning it off |
| Brett P | It makes itself hidden, the normal one is not set as hidden. Proccess keeps reloading til you delete whole messenger folder /program files/messenger |
| Wokrred | Seems this file has a wide list of uses. I did a lookup on nortons site and it's listed with a number of viral payloads. The one I was "infected" with points to the domain ads.clicksor.com and then would redirect from there, normaly to partypoker.com but also a few others. Also, windows messager (not MSN) is services.exe, least on win2k. |
| Robert Johnson | If it keeps restarting after you kill it, do you have runtime virus checking on? If so, look at your Instant Messenger Protections, and toggle off the option for Notifying the Sender of a message virus. In my case, Norton Antivirus tries to keep msmsgs running in the event it needs to popup a warning to the sender. |
| check | the only way I found is delete the file. in order to do that you need to boot in SAFE MODE and delete msmsgs.exe (or just rename it for later use) |
| Rennao | It's the MSN Messenger, you just have to do what's written above & you'll win some space. It should be in C:\Program Files\Messenger folder; if not is a virus! But it's usually harmless (it only steals your passwords). |
| UncaAlby | My computer has three main logins, two with administrator priv. On the non-admin account, this puppy WILL NOT GO AWAY on shutdown. This just started recently, so it might be a virus, but PCcillin doesn't say anything about. SpyBot and AdAware are similarly silent. I have renamed the offending file -- we'll see what happens. |
| Anton | I have no file on any of my hard drives called msmsgs.exe, yet the task manager always shows it as running. I've checked Services under Admin Tools and Messenger is Stopped and Disabled.. I've looked specifically in System32 and in C:\progfiles\messenger, and there's now called msmsgs.exe there either. Usually msmsgs.exe just sits quietly taking up 0% of CPU time, but every now and then it ups and consumes about 50%-ish of CPU time, so that my computer runs hot and the fan is very noisy. I have XP pro. NAV doesn't complain about it. I'd be grateful for any help with this phantom. |
| ryan | Was using 50% of my cpu, and restarting self. Norton AV was the culprit |
| Murphy | Start - Windows Messenger - Options - Untick "Allow me to run in the background" and "Run at startup". It's gone. Don't delete it ! |
| JOBERT | I've done everything i could to take msmsgs.exe out of the system and the only way that worked was MARK's idea of running the commannd line : RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove . dont mean to scare anybody but this process download and install a multitude of trojans. i used to to do port blocks using NIS2005 but it keeps on using different ports all the time. caused my XP to crashed and restart with an ME desktop and lots processes working in the background. |
| Danieel199 | Its just an MSN Messenger program , totally harmless |
| Brian | This is a virus - adds as a hidden system file in Windows directory. Also adds a service listed as "Windows web messanger" (case specific) and adds several keys in the registry for Windows web messanger. Stop the service (disable it), remove any registry entries for msmgs.exe, and for Windows web messanger (you have to edit the permissions for the key and set to allow access to delete them), and stop the process. |
| SKURT | nimmt nur cpu und ram weg, und verursacht crashs!!! allerdings haben ich versucht es wirklich zu killen!! aber irgendwie springt der immernoch an!!! also jetzt nicht in der leiste, sondern im task manager, da ist er immer wieder und stört die programme ungemein! |
| ed | was unable to access control panel. after killing the msmsgs.exe process (business pc, no msging software is on it) the control panel was accessible. did not see any other spyware or non-standard software on pc. |
| tatobo | THANK YOU for the Norton AV advice! I just unchecked the MSN/Windows Messenger box in the Internet options section and it stopped the process cold! I still have some nasty malware on my pc |
| Aimhere | rvoltaire's advice was correct. Norton Antivirus has Instant Messenger Protection, but for Windows Messenger it has to hook into the API in such a way that msmsgs.exe always runs in the background. Disabling the MSN/Windows Messenger protection in the Antivirus options gets rid of it. And if anyone is worried about IM viruses, I must point out that you should be scanning all files you receive via IM anyway *before* you open them, NAV just does it automatically for you if the feature is enabled. |
| Aqua 2 | Ok, Ive read all of the above. When I first started looking for it, my UPC went up 100. Then I read all of them, Ive tried the NAV, and the different folder but the only thig that worked for me is this line : RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove and tou can find the reference at this site http://www.broomeman.com/support/wsdsblwm.html. I rebooted and it didnt came back. Its to weird to be safe |
| DML | I had set MSN Messenger to not run in the background, but msmsgs.exe was still listed in Task Manager. Found out the Norton AV 2003 was set to scan MSN...turned that off in the options...msmsgs.exe no longer in TM. |
| turkishmonkey | just makes me have to minimize some games to close the app. once in a while |
| Sheikh Azad | this keeps on running even if I end the process from the task manager and it consumes atleast 5MB. It creates confusion because icon's of this file and MSN messenger are almost same. Microsoft should look into it. |
| Aaron Harris Berkowitz | It's windows messsenger. As the fokes here already told, after you disable messenger as the following link provides, make sure you turn off Instant Messenger Scanning in your Norton Antivirus. Otherwise this proces will continue to run even after you removed the messenger. See also: Link |
| booya | NOT A VIRUS PEOPLE! This is just a old version of messenger that automatically loads at startup and sits in the background. However ANY any .exe file can potentually house a virus inside. For the poeple that have this comming up as a virus, your old version of messenger has probably has been infected (along with several other things on your system probably). So its not the files fault IT IS YOURS. You become infected at one time because you were stupid and ran something you shouldnt have. |
| Steve | doesn't go away after renaming the files...sounds like a worm to me! |
| ceenuno | If Norton is installed: Under Instant Messenger Auto Protect, the check box next to MSN Messenger/Windows Messenger is the root. Uncheck if you no longer or don't care to use MSN Messenger (My version of Norton is 2005) |
| Gutterfish | msmsgs.exe is a background app that norton uses to monitor msn messenger. To disable go into norton av options, click on instant messenger, and unclick the box. |
| sam..l (Sydney) | msmsgs.exe is the executable file for running MSN messenger which is a harmless program, However viruses can utalize this and can infect the file so that when msmsgs.exe is executed or automatically run when windows starts as many do then the virus would also execute. You need to check the location of your msmsgs.exe file it should not be located in your C:Windows\System32 it should be under Program files in your messenger folder with a file size of 6,928KB. If you have msmsgsr.exe running in your task manager or any other varient such as MSMSGS.exe with CAPITALS then this will also be a virus |
| | I found the process to still be running even after doing all of the aforementioned fixes. Checked Norton AV options/instant messenger. Deselect MSN/windows messenger. That was it! |
| Ainars | By closing it with task manager 'end process', after 5 minuts it is running again, and it's slowing down pc quite much. |
| Laster | Old Windows Messenger - Not dangerous- IM Client See also: Link |
| dagurasum | I also solved the CPU problem through Norton AV! |
| eyesquare | Props to Marks post! TO DELETE msmsgs.exe forever open the RUN dialog box in the START MENU and paste: RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove You will have to reset your CPU after that and voila! |
| theMGT | A VERY annoying little file. THANK YOU rvoltaire for the sage advice RE: NAV. Thanks also to those who specified HOW to uncheck the protection in NAV! |
| | Just open it up, Go to the options and deselect "run at windows startup" and "allow to run in the background" |
| Alex_the_Stealth | It is always running under 'svchost.exe' and restarts automatically if you try to terminate it. You can never tell what does it do! |
| | msmsgs.exe is ok, just don't confuse it with msmgs.exe or msmsg.exe ... |
| Detlamnis | Wow, many thanks to rvoltaire for his advice. I disabled Norton Antivirus protection of Windows Messenger and the ever resuscitating msmsgs.exe process instantly and definitely closed. After hours of searching what could cause this process to run, it find the answer in this forum. Keep up with the good work. |
| dr.norm | I just read most of the post here and tried some of the tips. I first tried What syrynxx said to do and that didn't work. Then I tried the Norton AV option while watching my task menu in windows task manager I saw that once the option MSN scan was turned off the task msmsgs.exe went away. Then norton gave me a warning about an issue needing fixed for scans and I turned it back on msmsgs.exe was once more running under the tasks menu. So for those of you wondering what this is here is your answer it is running because norton is scanning the programs associated with MSN. |
| Listen | Look Its as simple as this. msmsgs.exe can be some sort of file that starts programs that start popups and adds. I realized this when I noticed that popups would not occur when I ended this process, and it came back after a few minutes and so did the popups. If you want the solution, delete it with the registry commands as outlined. The whole dll thing. It worked for me, seriously. I havent experienced any instability, and the popups are gone. All these people that think its MSN dont have the problem, and should waste our time posting here. |
| Someonewhocares | Seems to be dangerous as from a security standpoint, im unable to remove it even though its suppose to be not a necessary application. if its not necessary, it shouldnt be on the box and it most definetly shouldnt be running in memory |
| Whip | I recently found that switching from Norton to McAfee has greatly lessened the occurance of this file popping up in Task Manager |
| Kane The Dork | Maybe this has been posted, i Don't know so im just going to skip ahead. I'll just tell you what i did. May you do the same, That's up to you, OK. Firstly make sure your not connected to the internet, or you'll get a Message saying another person or program is using this. Secondly Delete both Messenger & NetMeeting Folders in Program Files. WSM Uses C:\WINDOWS\system32\svchost.exe to connect to your PC, so make sure you have it on your Firewall as Prompt When Active, or Whatever your Firewall Option Gives you, Im Using Outpost Firewall Pro, Good for showing you Open Port's. |
| Othello | Showed up after a reboot. My screen was flickering and I was wondering what was going on, then suddenly I got a warning from IE (which I didn't open) asking if it could paste my clipboard contents to a website. Checked msconfig and msmsgs.exe was there and it's directory was listed as C:\Documents and Settings\*USER*\Start Menu\Programs. It was an installer and was not located anywhere else. Task Manager showed a hidden instance of IE which I ended, and I deleted the program. Definately something abnormal, probably dangerous as it was trying to send my clipboard contents somewhere. |
| joe | i found this program in my task manager yesterday when i by accident clicked on a link in windows messenger. the virus stops me from opening msconfig, regedit, services.msc and other folders. anyone know how to fix this? |
| ali | See also: Link |
| gad | This can be turned off in XP, Control panel, add remove programs, set program access and defaults, custom option, expand list and deselect the "enable access to this program" tick box. Job Done! See also: Link |
| Ozone | Use killbox to delete it :if necessary |
| Oi! | This is not MSN mesenger. MSN is msgmsgr.exe |
| kampfar | msn live messenger appeared to show me as offline to all my contacts though i was online. this occurred 2 times. i think its both times connected with me disabling msmsgs.exe since it pops up and tells me if people eg logged in to messenger, even if i had messenger not running, which annoyed. though it doesnt seem to work without it. if you want to use live messenger, keep it. could that be true? |
| Daz | Norton uses Messenger to tell you its at risk |
| EB64 | If you disable the MSN/Windows Messenger protection in NAV, it stops the process from ALWAYS running. |
| Solution | It's an old version of Messenger. To check this, search for msmsgs.exe and it should be found in the Program Files/Messenger folder. My current Messenger folder is 'MSN Messenger', so it's definitely an old version we're talking about. Rename the old Messenger folder to anything and carry on as usual to see if the thing keeps popping up. If not, and assuming there's no probs with MSN, you can delete this folder. Once this is done run a registry cleaner, such as CCleaner to get rid of registry entries for this .exe, or your system logs will throw up DCOM errors. Problem solved! See also: Link Link |
| MrColonist | It is Windows Messenger (not Live!) and in my case it was used by Norton AntiVirus 2004. You can go to Norton Anti Virus Options Instant messaging and uncheck Windows messenger and it will dissapear. |
| AndyDunkers | msmsgs.exe (Agobot-Nl Worm)... if this is taking up alot of your CPU, this is the aforementioned virus. Consider it a high security threat |
| Joe.voo | Completly safe, and it not a virus, it is used by the core system that windows runs from. |
| Stephen Huff | I suddenly got lag playing everquest resulting in my toon getting killed and when I logged out and checked processes running this file was one of the major memory users at the time. |
| Oscar | It isn't MSN. The MSN Process is msnmsgr. REMOVE |
| meItedlce | Guys everyone is partially right, this file varies, In my case thought it was 'msmsgr.exe' as in Windows Messenger service, but after disabling it still popped up. So tried disabling by going to 'Run' 'msconfig' but after restart there it was. Turns our in my case the above comment by "ceenuno" was accurate. Try all of these and one should rid of this running process for good. It affects usage, net speed, and is a pain. |
| jfc | I tried rvoltaire's suggestion to disable Norton Antiviruses Messenger protection. Before I disabled it, I had Task Manager up, and it was running, after I disabled it, it had dissappeared from Task Manager. Thank's rvoltaire! |
| JoeMama | Discovered: April 24, 2003 See also: Link |
|
|
