Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Why does this keep popping up?

Feb 26, 2004 7:15AM PST

I am a computer newbie so please simplify the answers if possible.

Everytime i start up the computer i get this popping up on my screen...

windows cannot find:" c:\windows\system32\cpusave32.exe "

Does anyone know why this keeps coming up? If so, how do i get rid of it? Thank you for any help you could provide.

Kent Mc.

Discussion is locked

- Collapse -
Re:Why does this keep popping up? cpusave32 seems to be part of CNBABE. A parasite.
Feb 26, 2004 7:23AM PST
http://www.google.com/search?&q=cpusave32 finds discussions.

Parasite removal programs.

http://reviews.cnet.com/5208-6132-0.html?forumID=32&threadID=1313&start=0 notes the five scanning tools and removal tools that are fairly safe. If one does encounter an issue, its always been damage done by the MALWARE. The most common issue being Layered Service Provider replacement which you can use LSPFIX (Hint: use http://www.google.com to find).

The thread has follow on discussions about new links if you don't want to use Google to find an item.

Bob

PS. All the tools are free.
- Collapse -
Re:Re:Why does this keep popping up? cpusave32 seems to be part of CNBABE. A parasite.
May 19, 2004 2:54PM PDT

Sorry it has taken me so long to resond. It was caused by trojan.gema. That has since been taken care of with a trojan killer. The only message that comes up now is....to remve refernce to this file in the registry c:\windows\system32\cpusave32.exe. How would i go about going this in a step-by-step manner. I am just starting to get involved in this, so i need a simplified manner.I have registry cleaner if that is any help.

Thank alot,

Kent

- Collapse -
Re:Re:Re:Why does this keep popping up? cpusave32 seems to be part of CNBABE. A parasite.
May 19, 2004 4:50PM PDT

When i ran the LSPFIX the only things that come up were under the keep side they were:

mswsock.dll .......description..T cpip
winrnr.dll ........ """"""""""..NTDS
rsvpsp.dll ........ """"""""""..(Protocol handler)

Should i move any of these to the remove side?

Thanks again,

Kent

- Collapse -
The tools.
May 19, 2004 8:20PM PDT

The usual are Adaware, Spybot, Cwshredder and Housecall. These will take out the common bugs. If the internet connection is lost, then LSPFIX is used. It's my policy to not duplicate web content in my posts since one wrong word or passage of time will cause it to became false. Read the LSPFIX links you find with http://www.google.com

Proceed to the Security Forum for help with Virus/Trojan/Hijackking issues.

Bob

- Collapse -
Re:The tools.
May 20, 2004 2:18AM PDT

Sorry if it was not mentioned but, the trojan was already taken care of. I just want to get rid of the error message that comes up when i log on.

" Windows cannot find: c:\windows\system32\cpusave.exe Make sure you typed the name correctly and then try again.

After I click "ok" on that another one comes up saying to make sure file exists or remove refernce to it in the registry. I don't have a clue what part of the registry to look in or what to do when i find it.

Kent

- Collapse -
The fine tools STARTER and HIJACKTHIS.
May 20, 2004 3:22AM PDT
- Collapse -
MSCONFIG
May 20, 2004 2:13AM PDT

START -> RUN
type in msconfig

press ENTER

STARTUP TAB

look for that line of text in the startup menu
uncheck the box.
OK
Restart

- Collapse -
Re:MSCONFIG
May 20, 2004 2:54AM PDT

Did that already, no mention of it.