What is monxga32.exe?

monxga32.exe is part of Search and Recover and developed by iolo technologies, LLC according to the monxga32.exe version information.

monxga32.exe's description is "SearchandRecover.exe"

monxga32.exe is usually located in the 'C:\Documents and Settings\GVillani\Menu Avvio\Programmi\Esecuzione automatica\' folder.

Some of the anti-virus scanners at VirusTotal detected monxga32.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

The following is the available information on monxga32.exe:

PropertyValue
Product nameSearch and Recover
Company nameiolo technologies, LLC
File descriptionSearchandRecover.exe
Internal nameSearch and Recover
Legal copyrightCopyright 2003-2004, iolo technologies, LLC
Legal trademarkSearch and Recover is a trademark of iolo technologies, LLC
Product version1.0.3.0
File version1.0.3.0

Here's a screenshot of the file properties when displayed by Windows Explorer:

Product nameSearch and Recover
Company nameiolo technologies, LLC
File descriptionSearchandRecover.exe
Internal nameSearch and Recover
Legal copyrightCopyright 2003-2004, iolo technologi..
Legal trademarkSearch and Recover is a trademark of..
Product version1.0.3.0
File version1.0.3.0

Digital signatures [?]

monxga32.exe is not signed.

VirusTotal report

36 of the 43 anti-virus programs at VirusTotal detected the monxga32.exe file. That's a 84% detection rate.

ScannerDetection Name
AhnLab-V3 Win-Trojan/Injector.30208.I
AntiVir TR/Crypt.XPACK.Gen
Antiy-AVL Backdoor/Win32.Bredolab.gen
Avast Win32:Malware-gen
Avast5 Win32:Malware-gen
AVG Dropper.Generic2.DJF
BitDefender Gen:Variant.Koobface.1
CAT-QuickHeal Backdoor.Bredolab.dta
Commtouch W32/MalwareF.ETJR
Comodo TrojWare.Win32.PkdKrap.ar
DrWeb Trojan.MulDrop1.15135
Emsisoft Packed.Win32.Krap!IK
F-Prot W32/MalwareF.ETJR
F-Secure Gen:Variant.Koobface.1
Fortinet W32/Krap.AR!tr
GData Gen:Variant.Koobface.1
Ikarus Packed.Win32.Krap
Jiangmin Backdoor/Bredolab.dbd
K7AntiVirus Backdoor
Kaspersky Backdoor.Win32.Bredolab.dta
McAfee Bredolab!m
McAfee-GW-Edition Bredolab!m
Microsoft TrojanDownloader:Win32/Bredolab.AA
NOD32 a variant of Win32/Kryptik.DVZ
Norman W32/Crypt.AKBK
Panda Trj/Sinowal.DW
PCTools Backdoor.Trojan
Prevx Medium Risk Malware Dropper
Sophos Mal/FakeSpy-A
Symantec Backdoor.Trojan
TrendMicro TROJ_BREDLAB.XCH
TrendMicro-HouseCall TROJ_BREDLAB.XCH
VBA32 Backdoor.Win32.Bredolab.dta
VIPRE Trojan-Downloader.Win32.Bredolab
ViRobot Backdoor.Win32.Bredolab.30208.AF
VirusBuster Backdoor.Bredolab!GGH1RZyd8Bw
36 of the 43 anti-virus programs detected the monxga32.exe file.

monxga32.exe removal instructions

The instructions below shows how to remove monxga32.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the monxga32.exe file for removal, restart your computer and scan it again to verify that monxga32.exe has been successfully removed. Here are the removal instructions in more detail:

  1. Download and install FreeFixer: http://www.freefixer.com/download.html
  2. Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.
    Screenshot of Start Scan button
  3. When the scan is finished, locate monxga32.exe in the scan result and tick the checkbox next to the monxga32.exe file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate monxga32.exe in the scan result.
    Red arrow point on the unwanted file
    C:\Documents and Settings\GVil..vio\Programmi\Esecuzione automatica\monxga32.exe
  4. Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the monxga32.exe file.
    Screenshot of Fix button
  5. Restart your computer.
  6. Start FreeFixer and scan your computer again. If monxga32.exe still remains in the scan result, proceed with the next step. If monxga32.exe is gone from the scan result you're done.
  7. If monxga32.exe still remains in the scan result, check its checkbox again in the scan result and click Fix.
  8. Restart your computer.
  9. Start FreeFixer and scan your computer again. Verify that monxga32.exe no longer appear in the scan result.
Please select the option that best describe your thoughts on the removal instructions given above








Free Questionnaires

Folder name variants

monxga32.exe may also be located in other folders than C:\Documents and Settings\GVillani\Menu Avvio\Programmi\Esecuzione automatica\. The most common variants are listed below:

Hashes [?]

PropertyValue
MD5796c8d2074cb6d083f20d98e10b91301
SHA2565f40a1c9ffb767406f8b5e84080b4449d9b62fd9d2759ce5aa94215638730ef8

Error Messages

These are some of the error messages that can appear related to monxga32.exe:

monxga32.exe has encountered a problem and needs to close. We are sorry for the inconvenience.

monxga32.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.

SearchandRecover.exe has stopped working.

End Program - monxga32.exe. This program is not responding.

monxga32.exe is not a valid Win32 application.

monxga32.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.

What will you do with monxga32.exe?

To help other users, please let us know what you will do with monxga32.exe:



What did other users do?

The poll result listed below shows what users chose to do with monxga32.exe. 93% have voted for removal. Based on votes from 242 users.

User vote results: There were 224 votes to remove and 18 votes to keep

NOTE: Please do not use this poll as the only source of input to determine what you will do with monxga32.exe.

Comments

Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

carlos rodrigues writes

0 thumbs

o arquivo instalou-se sozinho quando abri um site!
se é perigoso ou não?!
não sei!
mas esta ferramenta é estupenda!
recomendo freefixer,
JÀ E AGORA
muito obrigado,

# 17 Apr 2010, 14:55

Roger Karlsson writes

5 thumbs

monxga32.exe is a new variant of the Bredolab worm. It's relatively new and only 3 of the 40 antivirus programs at VirusTotal detect it at the time of writing.

This is how you can remove monxga32.exe with FreeFixer:

1. Download and install FreeFixer: http://www.freefixer.com/download.html It's free.
2. Start FreeFixer and click "Scan". The scan will be finished in about 5 minutes.
3. In the scan result, locate items which mention monxga32.exe, and check its "Delete" checkbox. monxga32.exe usually appears under "Autostart shortcuts" and/or "Recently created or modified files" in FreeFixer's scan result. DO NOT check anything else for removal, unless you are 100% sure it's malware.
4. Click "Fix" and restart your machine.
5. Start a FreeFixer scan again.
7. Verify that monxga32.exe no longer appear anywhere in the scan result.
8. Done.

Did this completely remove the monxga32.exe file from your computer?

# 18 Apr 2010, 1:34

Hakan writes

3 thumbs

whenever i booted my pc,the cpu usage was at %60-70 (when it should have been %10-20 max) so i opened up task manager and noticed a svchost.exe using the cpu.Normally,when you end a svchost.exe process,the windows gets messed up right? well when i ended that specific svchost process that was using the cpu,the windows got even faster! so i opened mcsonfig and and checked everything and that's when i noticed this unfamiliar file called monxga32.exe
I googled it and after i saw this page,i deleted the file from its location.So i rebooted my pc and viola! everything's back to normal.No cpu overload or any weird thing.Sooo yeah monxga32.exe is definitely a virus and should be deleted(and reported) right away

# 18 Apr 2010, 10:45

Bromine writes

1 thumb

Similar to Hakan's situation, my CPU had been hovering at around 60% for the past several hours. I opened Process Explorer and discovered that around 50% of this was being hogged by the Svchost that runs DcomLaunch and TermService. Based on some guesswork, I took a peek in my Startup folder (My Computer -> C: -> Documents and Settings -> Username -> Start Menu -> Programs -> Startup) and found the weirdly-named file monxga32.exe, which I wasn't able to delete manually. I googled it, ended up here, and used FreeFixer to delete it. Once I rebooted, my CPU returned to its usual 5%-ish.

# 20 Apr 2010, 16:30

#ivan# writes

0 thumbs

I cannot delete monxga32.exe. In the route(My Computer -> C: -> Documents and Settings -> Username -> Start Menu -> Programs -> Startup) that appears it she does not exist. Help me please, freefixed is late too much hours in scanning

# 20 Apr 2010, 18:58

Gianni writes

1 thumb

Ivan , i runned freefix for all night long in my office because i got monxga32.exe virus. At the end of process freefix deleted this virus and now my computer is working perfect again. Be patient run it and your problem will be fixed

# 20 Apr 2010, 23:27

Jason writes

0 thumbs

Hey,
I have this monxga32.exe virus. In msconfig I can see it under the start tab and my CPU is running at 50%+ usage.

I downloaded and ran freefixer, but it does not show the monxga32.exe file. From your post above:

...."3. In the scan result, locate items which mention monxga32.exe, and check its "Delete" checkbox. monxga32.exe usually appears under "Autostart shortcuts" and/or "Recently created or modified files"....

The scan does not show any results for "Autostart shortcuts" i.e. there is not even a Autostart shortcuts section showing results. It's completely missing. Recently created or modified files results are shown and the monxga32.exe file is not there.

Any ideas?

I've also posted this in the Freefixer google forum along with the scan log.

Jason

# 21 Apr 2010, 6:16

Roger Karlsson writes

2 thumbs

@Jason: I've examined your FreeFixer log and found another suspicious file. Let's continue the monxga32.exe removal at the user group:
http://groups.google.com/group/freefixer-forum/browse_thread/thread/8b77b7b5093564b0#

# 21 Apr 2010, 7:02

Sebastian writes

1 thumb

I just wanted to thank you for helping me out with my problem it worked perfect.
thank you very much.

Sebastian

# 26 Apr 2010, 1:18

Dragos writes

2 thumbs

After having a lot of trouble with Windows and repair - installing it for several times (the problem was that windows restarted continously at log on; I couldn't event log on in safe mode)I found the file monxga32.exe situated in "C:\Documents and Settings\Administrator\Start Menu\Programs\Startup". My antivirus skipped scanning that file (it said it can not open it). I googled monxga32.exe, I found this page (and others) and concluded that it is a virus. I tried deleting it in cmd:
"del /A - monxga32.exe /F"
and got the message that it can not be deleted because it is used by a program. Googled it again and found that it could have something to do with the process svchost.exe (if that process consumes a lot of CPU). I examined the processes with Task Manager and found a svchost.exe process with 50% CPU. I ended that process and a window appeared telling me that the computer will restart in 60 seconds. Before it restarted I managed to delete the file in cmd with: "del /A - monxga32.exe /F" . Then Windows started normally and the monxga32.exe was gone. I hope this helps!

# 27 Apr 2010, 14:29

Wade Perry writes

0 thumbs

Another fix that does not require a download is to use Window's "System Restore" option. I went back almost a month using system restore, and once that was complete, my system returned to normal.

# 29 Apr 2010, 16:37

Leave a reply