mnsvc.exe??

Hello,

has anyone ever heard of the filename mnsvc.exe?? This has been causing dr watson errors my windows nt4.0 box when running applications.

Dave
Archangel_dmAsked:
Who is Participating?
 
taxmanicConnect With a Mentor Commented:
Just had the same problem

I ran antivirus to clean a download worm virus
0
 
SysExpertCommented:
http://forums.anandtech.com/messageview.cfm?catid=32&threadid=763618&highlight_key=y&keyword1=mnsvc

It may be a cause for concern.
Disable it in the startup ad run some adware/spyware program in addition to the newest Anti-virus.

I hope this helps !
0
 
Archangel_dmAuthor Commented:
How do you disable it in the startup exactly??
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
JVanLearCommented:
mnsvc.exe

check Symantec for backdoor.trojan

some other infected files :

absr.exe
ausvc.exe
0
 
SysExpertCommented:
Cleanup the startup stuff. In win98/Win ME/Win XP -  Do a Start - Run - msconfig, startup Tab , or for win95 , NT or win2k,
Download the Startup COP a free pcmag utility from
http://www.zdnet.com/downloads/stories/info/0,,77594,.html
 Run it and it will show you everything that is listed in all the possible startup
                        places, and allow you to disable things one at a time until the problem is eliminated.
 A lot of probelms are caused by excess old baggage - programs that have not been properly  un-installed. Startup Cop will eliminate leftovers and un-wanted programs that you no longer want.

I hope this helps !

0
 
Death-SpeakCommented:
I found c:\winnt\mnsvc.exe was causing an App Error on a 2000 box I had recently setup. Everything was exactly the same as when I origionally configured the machine. It was created 4/4/02. I didn't find anything else as far as possible spyware or anything refered to above, or that the executable was accessing the internet. I simply deleted it and the problem went away.
0
 
rmoberlyCommented:
Try this. Go to http://www.majorgeek.com/index2.html and download Adaware, install it and run it on your system. It should find and on your approval will remove any adware or spyware that is installed on your system.

Your questions was the only hit i found on mnsvc.exe while I was trying to resolve the same problem. So thanks.

Rich Moberly
Bartlesville Oklahoma
0
 
Archangel_dmAuthor Commented:
taxmaniac, do you run mcaffee or norton???

rmoberly, you are very welcome. I couldn't find any infor on it using search engines such as google or dogpile until recently. As far as spyware, there are 4 machines in my company that have this file. What i can't figure out is what site they were on to get this downloaded to the pc??
I did download and run adware with success!!!!!
Because i work on a helpdesk, i want to find out where they were!!!!!!
0
 
rmoberlyCommented:
ARchangel dm
When you find the answer, please post it so we will know too. I am part of a network support team for a 3 state area and it would be helpful to know the answer to this for our internal help desk software knowledge base.

Best of luck to you.
Rich Moberly
0
 
Archangel_dmAuthor Commented:
sure, I will. Actually, i sent the exe, zipped, to mcafee and they will do some research on it. As soon as i hear something, i will post it.
0
 
JVanLearCommented:
An interesting note

Running current NAV, it quarantined the files

mnsvc.exe
ausvc.exe
absr.exe

I restored the files to their original exe's (saved as *.vpn by NAV) to their original location and then moved them to a floppy

Ran NAV McAfee & IPE on those files on other computers and none showed up as viruses

So far 4 instances of this virus? have occurred
0
 
wayneleCommented:
There is one more files running with this.

It's vbt.exe

Up to now still don't know which program or site that installed this on the workstation.

Adaware didn't detect it.
0
 
wayneleCommented:
There is one more files running with this.

It's vbt.exe

Up to now still don't know which program or site that installed this on the workstation.

Adaware didn't detect it.
0
 
wayneleCommented:
There is one more files running with this.

It's vbt.exe

Up to now still don't know which program or site that installed this on the workstation.

Adaware didn't detect it.
0
 
wayneleCommented:
Sorry its BVT.EXE
0
 
JVanLearCommented:
As a first time user of this site

I guess I'm missing the point here

Even the first comment by SysExpert gave a general answer as run a virus scan.

And then I said which one it was - download.trojan

If none of the comments are going to be evaluated or put into use, does this just go on as an infinite chat session?
0
 
JVanLearCommented:
BACKDOOR.AUTOUPDER FOUND ON 3 COMPUTERS

See www.symantec.com for Backdoor.Autoupder

NAV QUARANTINED COOLSTUFF.INI BUT DID NOT QUARANTINE COOLSTUFF.OCX
COOLSTUFF.CAB WAS NOT FOUND

THIS IS PART OF THE BACKDOOR THAT WAS FOUND LAST WEEK
WITH THE FOLLOWING FILES

AUSVC.EXE
BVT.EXE
MNSVC.EXE
ABSR.EXE

These are the new files for Backdoor.Autoupder

COOLSTUFF.INI
COOLSTUFF.OCX
COOLSTUFF.CAB


There are entries to the registry, too.


THIS IS STILL JUST PART OF THE TROJAN.
@ HOME BEWARE IF YOU ARE NOT RUNNING A FIREWALL (LIKE BLACKICE OR ZONEALARM)
(IF YOU ARE RUNNING THESE THIS VIRUS WILL TERMINATE)

JVanLear
0
 
SysExpertCommented:
Archangel_dm : I am a little disappointed to see that I received no credit at all , even though I mentioned the virus aspect first.

If you would like to change or split points,

You can put in a request to                    
http://www.experts-exchange.com/jsp/qList.jsp?ta=commspt 
to distribute the points in any manner you think is proper.
This is especially true when you think you have received good information from more than one person.

Also see  http://www.experts-exchange.com/jsp/cmtyQuestAnswer.jsp

     I hope this helps !
0
 
Archangel_dmAuthor Commented:
Sure, sorry about that. I did find out that it was a trojan virus. It's called downloader-w.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.