How to remove the windows32 virus

Most antivirus programs identify windows32.exe as malware, e.g. BitDefender identifies it as Trojan.Generic.2297160 or Generic.Banker.Delf.E93B3F78, and McAfee identifies it as PWS-Banker.
The free file information forum can help you find out how to remove it. If you know more about this file, please leave a comment or a hint for other users.

Click to Run a Free Virus Scan for the windows32.exe malware

Windows32.exe file information

The process known as SSH, Telnet and Rlogin client belongs to software PuTTY suite or Global MU Online by Simon Tatham (www.chiark.greenend.org.uk/~sgtatham).

Description: windows32.exe is located in the folder "C:\Program Files". Known file sizes on Windows 7/XP are 1,662,519 bytes (20% of all occurrences), 3,984,384 bytes, 5,279,744 bytes, 3,982,848 bytes or 3,400,928 bytes.
There is no file information. The application starts when Windows starts (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). Windows32.exe is not a Windows core file. The program is not visible. windows32.exe is able to connect to Internet and monitor applications. Therefore the technical security rating is 60% dangerous, however also read the users reviews.
You could uninstall the associated program (Start > Control Panel > Add/Remove programs > Global MU Online).

Recommended: Identify windows32.exe related errors

If windows32.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 84% dangerous. The file size is 53,248 bytes (66% of all occurrences) or 43,520 bytes. The program has no visible window. The process starts when Windows starts (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). File windows32.exe is not a Windows core file.

If windows32.exe is located in the folder C:\Windows, the security rating is 96% dangerous. The file size is 93,184 bytes. There is no information about the author of the file. File windows32.exe is located in the Windows folder, but it is not a Windows core file. The program is not visible. Program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). The application listens for or sends data on open ports to a LAN or the Internet. It is not a Windows core file.

If windows32.exe is located in the folder C:\Windows\System32, the security rating is 100% dangerous. The file size is 1,229,824 bytes.

If windows32.exe is located in C:\, the security rating is 64% dangerous. The file size is 34,304 bytes.

External information from Paul Collins:
There are different files with the same name:

"Microsoft Internet" definitely not required. Added by the SDBOT-F WORM!
"[various names]" definitely not required. Added by any of a number of WORM or TROJAN variants

Important: Some malware camouflages itself as windows32.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the windows32.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

Score

User Comments

This is a virus. Appeared in path: c:\documents and settings\owner\application data\windows32.exe
munyeca (further information)

At this writing, undetected by anti-virus programs. Attempted to run without permission. Also found an identical sized file rundll32-.txt in the same locztion. No entries in the registry found so it tried to run using an alternate method.
Shadow Wolf

-i know it does not let you download imvu
kristal n richomn

Summary: Average user rating of windows32.exe: based on 4 votes with 3 reviews.

2 users think windows32.exe is essential for Windows or an installed application. 2 users think windows32.exe is dangerous and recommend removing it. 1 user doesn't grade windows32.exe ("not sure about it").

Windows32 scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.

Other processes