Solved

mnsvc.exe??

Posted on 2002-04-15
19
214 Views
Last Modified: 2013-12-28
Hello,

has anyone ever heard of the filename mnsvc.exe?? This has been causing dr watson errors my windows nt4.0 box when running applications.

Dave
0
Comment
Question by:Archangel_dm
  • 4
  • 4
  • 4
  • +4
19 Comments
 
LVL 63

Expert Comment

by:SysExpert
ID: 6942834
http://forums.anandtech.com/messageview.cfm?catid=32&threadid=763618&highlight_key=y&keyword1=mnsvc

It may be a cause for concern.
Disable it in the startup ad run some adware/spyware program in addition to the newest Anti-virus.

I hope this helps !
0
 

Author Comment

by:Archangel_dm
ID: 6945693
How do you disable it in the startup exactly??
0
 

Expert Comment

by:JVanLear
ID: 6946095
mnsvc.exe

check Symantec for backdoor.trojan

some other infected files :

absr.exe
ausvc.exe
0
Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

 
LVL 63

Expert Comment

by:SysExpert
ID: 6946406
Cleanup the startup stuff. In win98/Win ME/Win XP -  Do a Start - Run - msconfig, startup Tab , or for win95 , NT or win2k,
Download the Startup COP a free pcmag utility from
http://www.zdnet.com/downloads/stories/info/0,,77594,.html
 Run it and it will show you everything that is listed in all the possible startup
                        places, and allow you to disable things one at a time until the problem is eliminated.
 A lot of probelms are caused by excess old baggage - programs that have not been properly  un-installed. Startup Cop will eliminate leftovers and un-wanted programs that you no longer want.

I hope this helps !

0
 

Expert Comment

by:Death-Speak
ID: 6947759
I found c:\winnt\mnsvc.exe was causing an App Error on a 2000 box I had recently setup. Everything was exactly the same as when I origionally configured the machine. It was created 4/4/02. I didn't find anything else as far as possible spyware or anything refered to above, or that the executable was accessing the internet. I simply deleted it and the problem went away.
0
 

Accepted Solution

by:
taxmanic earned 200 total points
ID: 6948704
Just had the same problem

I ran antivirus to clean a download worm virus
0
 

Expert Comment

by:rmoberly
ID: 6948734
Try this. Go to http://www.majorgeek.com/index2.html and download Adaware, install it and run it on your system. It should find and on your approval will remove any adware or spyware that is installed on your system.

Your questions was the only hit i found on mnsvc.exe while I was trying to resolve the same problem. So thanks.

Rich Moberly
Bartlesville Oklahoma
0
 

Author Comment

by:Archangel_dm
ID: 6948797
taxmaniac, do you run mcaffee or norton???

rmoberly, you are very welcome. I couldn't find any infor on it using search engines such as google or dogpile until recently. As far as spyware, there are 4 machines in my company that have this file. What i can't figure out is what site they were on to get this downloaded to the pc??
I did download and run adware with success!!!!!
Because i work on a helpdesk, i want to find out where they were!!!!!!
0
 

Expert Comment

by:rmoberly
ID: 6948834
ARchangel dm
When you find the answer, please post it so we will know too. I am part of a network support team for a 3 state area and it would be helpful to know the answer to this for our internal help desk software knowledge base.

Best of luck to you.
Rich Moberly
0
 

Author Comment

by:Archangel_dm
ID: 6948858
sure, I will. Actually, i sent the exe, zipped, to mcafee and they will do some research on it. As soon as i hear something, i will post it.
0
 

Expert Comment

by:JVanLear
ID: 6948911
An interesting note

Running current NAV, it quarantined the files

mnsvc.exe
ausvc.exe
absr.exe

I restored the files to their original exe's (saved as *.vpn by NAV) to their original location and then moved them to a floppy

Ran NAV McAfee & IPE on those files on other computers and none showed up as viruses

So far 4 instances of this virus? have occurred
0
 

Expert Comment

by:waynele
ID: 6951328
There is one more files running with this.

It's vbt.exe

Up to now still don't know which program or site that installed this on the workstation.

Adaware didn't detect it.
0
 

Expert Comment

by:waynele
ID: 6951329
There is one more files running with this.

It's vbt.exe

Up to now still don't know which program or site that installed this on the workstation.

Adaware didn't detect it.
0
 

Expert Comment

by:waynele
ID: 6951353
There is one more files running with this.

It's vbt.exe

Up to now still don't know which program or site that installed this on the workstation.

Adaware didn't detect it.
0
 

Expert Comment

by:waynele
ID: 6951417
Sorry its BVT.EXE
0
 

Expert Comment

by:JVanLear
ID: 6951436
As a first time user of this site

I guess I'm missing the point here

Even the first comment by SysExpert gave a general answer as run a virus scan.

And then I said which one it was - download.trojan

If none of the comments are going to be evaluated or put into use, does this just go on as an infinite chat session?
0
 

Expert Comment

by:JVanLear
ID: 6967179
BACKDOOR.AUTOUPDER FOUND ON 3 COMPUTERS

See www.symantec.com for Backdoor.Autoupder

NAV QUARANTINED COOLSTUFF.INI BUT DID NOT QUARANTINE COOLSTUFF.OCX
COOLSTUFF.CAB WAS NOT FOUND

THIS IS PART OF THE BACKDOOR THAT WAS FOUND LAST WEEK
WITH THE FOLLOWING FILES

AUSVC.EXE
BVT.EXE
MNSVC.EXE
ABSR.EXE

These are the new files for Backdoor.Autoupder

COOLSTUFF.INI
COOLSTUFF.OCX
COOLSTUFF.CAB


There are entries to the registry, too.


THIS IS STILL JUST PART OF THE TROJAN.
@ HOME BEWARE IF YOU ARE NOT RUNNING A FIREWALL (LIKE BLACKICE OR ZONEALARM)
(IF YOU ARE RUNNING THESE THIS VIRUS WILL TERMINATE)

JVanLear
0
 
LVL 63

Expert Comment

by:SysExpert
ID: 6967543
Archangel_dm : I am a little disappointed to see that I received no credit at all , even though I mentioned the virus aspect first.

If you would like to change or split points,

You can put in a request to                    
http://www.experts-exchange.com/jsp/qList.jsp?ta=commspt 
to distribute the points in any manner you think is proper.
This is especially true when you think you have received good information from more than one person.

Also see  http://www.experts-exchange.com/jsp/cmtyQuestAnswer.jsp

     I hope this helps !
0
 

Author Comment

by:Archangel_dm
ID: 6968415
Sure, sorry about that. I did find out that it was a trojan virus. It's called downloader-w.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
How to record audio from input sources to your PC – connected devices, connected preamp to record vinyl discs, streaming media, that play through your audio card: Vista, Windows 7, Windows 8, Windows 8.1 and Windows 10 – both 32 bit & 64.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now