[MastiffShack]

Anyone heard of TCP32SS.EXE?

I hadn't until it bit me, hard, somewhere south of the beltline.

I kept getting "Buffer overrun error" each time I launched IE Explorer, and couldn't figure out how or why.

After researching, I found a NEW launch in my registry, called TCP32SS.EXE. This object does not show up ANYWHERE in ANY FOLDER (and I searched them all).

This has got to be a new stealth/worm/bug/something that is starting to spread rather rapidly.

Anyway, here's what I found:
1. Removal with MSCONFIG: Doesn't work.
2. Manual removal from the registry doesn't work.
3. Manual termination using Windows Task Manager doesn't work.

Where it may have come from:
A new windows update for "net purchases" of music and such - applied to Windows Media Player 9.x. This seems the only source I can think of, because it didn't start happening until after I installed this update.

[Here is the patch I refered to in my initial message: KB833998; Update for Windows XP Shop for Music Online Link.]

How I finally got it to quit launching:
Since I keep "restore points" up to date on my Windows XP Pro; I restored back prior to the date where I installed the "new update". After doing so, it seems to have stopped it (at least temporarly).

Has anyone else experienced this? What is it?

(This notice has also been posted on another site called: www.annoyances.org/exec/forum/winxp/1081214651 - this is what prompted me to post my information here.)

- See ya - looking forward to anyone else experiencing/have experienced the same thing and/or knows what it is...

- Jim

 

[LauraMJ]

I'm not sure, but is this related?

http://forums.techguy.org/t218173.html

 

[MastiffShack]

Sounds similar, but I don't think this is the same. In the documentation provided, it didn't mention "TCP32SS.EXE"; and the error I was receiving was explicit in this. Specifically as it was related to the C++ runtime environment. While most applications are written in C++ (even mainframe OS's such as the AS/400); I don't think the issue describbed by your link is the same.

I may be entirely wrong though; and hope I am, because then I would have a "cause/effect" to refer to.

Thanks for the information; I'll check my system further just to make sure. - Jim

 

[steve65]

Before anyone panics, the referred to thread at annoyances.org is 5 days old. Plenty of time for this so-called worm to be listed at security and virus sites. Yet, it hasn't. I don't believe this to be a worm or virus, but probably a legit program that has become corrupted.

For what it is worth.

Steve

 

[MastiffShack]

Thanks Steve. I noticed the dates too. What I thought was funny, is that it just appeared in a Google search today (there are no other references in Google or any other search engine), and the date(s) are also the same time frame where I downloaded the new "update(?)" from MS.

Coincendental? Probably.

Thanks again.