"Invalid Page Fault in Module ONZ.exe or XWin32.exe" Error Message When You Use Windows (303350)

SYMPTOMS

When you use any of the versions of Microsoft Windows listed at the beginning of this article, you may receive an error message similar to one or both of the following:

ONZ caused an Invalid Page Fault in module XWIN32.EXE at 0177:address.
XWIN32 caused an Invalid Page Fault in module XWIN32.EXE at 0177:address.

-or-

When you quit Windows, you may be prompted to first quit an MS-DOS prompt, even though no programs are running.

CAUSE

These behaviors can occur if your computer is infected with a Microsoft Visual Basic Script (VBS)-based virus or the Trojan Horse program created with the GodMessage Creator IV Creator v0.2.

RESOLUTION

Microsoft does not provide software that can detect or remove computer viruses. If you suspect or confirm that your computer is infected with a virus, obtain current antivirus software. For a list of antivirus software manufacturers, click the following article number to see the article in the Microsoft Knowledge Base:

49500 List of Antivirus Software Vendors

MORE INFORMATION

The GodMessage Creator IV Creator v0.2 program is commonly known as a hackers toolkit. This program allows people with little VBS programming skill to enclose a virus or Trojan Horse program in a ready-made .vbs script.

For additional security information about this issue, browse to the following Microsoft Web site:

http://www.microsoft.com/security

For additional information about security updates for Microsoft Outlook, click the article numbers below to view the articles in the Microsoft Knowledge Base:

262631 Information About the Outlook E-mail Security Update

235309 Outlook E-mail Attachment Security Update

262617 OL98: Information About the Outlook E-mail Security Update