Solved

mnsvc.exe??

Posted on 2002-04-15
19
232 Views
Last Modified: 2013-12-28
Hello,

has anyone ever heard of the filename mnsvc.exe?? This has been causing dr watson errors my windows nt4.0 box when running applications.

Dave
0
Comment
Question by:Archangel_dm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
  • 4
  • +4
19 Comments
 
LVL 63

Expert Comment

by:SysExpert
ID: 6942834
http://forums.anandtech.com/messageview.cfm?catid=32&threadid=763618&highlight_key=y&keyword1=mnsvc

It may be a cause for concern.
Disable it in the startup ad run some adware/spyware program in addition to the newest Anti-virus.

I hope this helps !
0
 

Author Comment

by:Archangel_dm
ID: 6945693
How do you disable it in the startup exactly??
0
 

Expert Comment

by:JVanLear
ID: 6946095
mnsvc.exe

check Symantec for backdoor.trojan

some other infected files :

absr.exe
ausvc.exe
0
Secure Your WordPress Site: 5 Essential Approaches

WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:

Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users

 
LVL 63

Expert Comment

by:SysExpert
ID: 6946406
Cleanup the startup stuff. In win98/Win ME/Win XP -  Do a Start - Run - msconfig, startup Tab , or for win95 , NT or win2k,
Download the Startup COP a free pcmag utility from
http://www.zdnet.com/downloads/stories/info/0,,77594,.html
 Run it and it will show you everything that is listed in all the possible startup
                        places, and allow you to disable things one at a time until the problem is eliminated.
 A lot of probelms are caused by excess old baggage - programs that have not been properly  un-installed. Startup Cop will eliminate leftovers and un-wanted programs that you no longer want.

I hope this helps !

0
 

Expert Comment

by:Death-Speak
ID: 6947759
I found c:\winnt\mnsvc.exe was causing an App Error on a 2000 box I had recently setup. Everything was exactly the same as when I origionally configured the machine. It was created 4/4/02. I didn't find anything else as far as possible spyware or anything refered to above, or that the executable was accessing the internet. I simply deleted it and the problem went away.
0
 

Accepted Solution

by:
taxmanic earned 200 total points
ID: 6948704
Just had the same problem

I ran antivirus to clean a download worm virus
0
 

Expert Comment

by:rmoberly
ID: 6948734
Try this. Go to http://www.majorgeek.com/index2.html and download Adaware, install it and run it on your system. It should find and on your approval will remove any adware or spyware that is installed on your system.

Your questions was the only hit i found on mnsvc.exe while I was trying to resolve the same problem. So thanks.

Rich Moberly
Bartlesville Oklahoma
0
 

Author Comment

by:Archangel_dm
ID: 6948797
taxmaniac, do you run mcaffee or norton???

rmoberly, you are very welcome. I couldn't find any infor on it using search engines such as google or dogpile until recently. As far as spyware, there are 4 machines in my company that have this file. What i can't figure out is what site they were on to get this downloaded to the pc??
I did download and run adware with success!!!!!
Because i work on a helpdesk, i want to find out where they were!!!!!!
0
 

Expert Comment

by:rmoberly
ID: 6948834
ARchangel dm
When you find the answer, please post it so we will know too. I am part of a network support team for a 3 state area and it would be helpful to know the answer to this for our internal help desk software knowledge base.

Best of luck to you.
Rich Moberly
0
 

Author Comment

by:Archangel_dm
ID: 6948858
sure, I will. Actually, i sent the exe, zipped, to mcafee and they will do some research on it. As soon as i hear something, i will post it.
0
 

Expert Comment

by:JVanLear
ID: 6948911
An interesting note

Running current NAV, it quarantined the files

mnsvc.exe
ausvc.exe
absr.exe

I restored the files to their original exe's (saved as *.vpn by NAV) to their original location and then moved them to a floppy

Ran NAV McAfee & IPE on those files on other computers and none showed up as viruses

So far 4 instances of this virus? have occurred
0
 

Expert Comment

by:waynele
ID: 6951328
There is one more files running with this.

It's vbt.exe

Up to now still don't know which program or site that installed this on the workstation.

Adaware didn't detect it.
0
 

Expert Comment

by:waynele
ID: 6951329
There is one more files running with this.

It's vbt.exe

Up to now still don't know which program or site that installed this on the workstation.

Adaware didn't detect it.
0
 

Expert Comment

by:waynele
ID: 6951353
There is one more files running with this.

It's vbt.exe

Up to now still don't know which program or site that installed this on the workstation.

Adaware didn't detect it.
0
 

Expert Comment

by:waynele
ID: 6951417
Sorry its BVT.EXE
0
 

Expert Comment

by:JVanLear
ID: 6951436
As a first time user of this site

I guess I'm missing the point here

Even the first comment by SysExpert gave a general answer as run a virus scan.

And then I said which one it was - download.trojan

If none of the comments are going to be evaluated or put into use, does this just go on as an infinite chat session?
0
 

Expert Comment

by:JVanLear
ID: 6967179
BACKDOOR.AUTOUPDER FOUND ON 3 COMPUTERS

See www.symantec.com for Backdoor.Autoupder

NAV QUARANTINED COOLSTUFF.INI BUT DID NOT QUARANTINE COOLSTUFF.OCX
COOLSTUFF.CAB WAS NOT FOUND

THIS IS PART OF THE BACKDOOR THAT WAS FOUND LAST WEEK
WITH THE FOLLOWING FILES

AUSVC.EXE
BVT.EXE
MNSVC.EXE
ABSR.EXE

These are the new files for Backdoor.Autoupder

COOLSTUFF.INI
COOLSTUFF.OCX
COOLSTUFF.CAB


There are entries to the registry, too.


THIS IS STILL JUST PART OF THE TROJAN.
@ HOME BEWARE IF YOU ARE NOT RUNNING A FIREWALL (LIKE BLACKICE OR ZONEALARM)
(IF YOU ARE RUNNING THESE THIS VIRUS WILL TERMINATE)

JVanLear
0
 
LVL 63

Expert Comment

by:SysExpert
ID: 6967543
Archangel_dm : I am a little disappointed to see that I received no credit at all , even though I mentioned the virus aspect first.

If you would like to change or split points,

You can put in a request to                    
http://www.experts-exchange.com/jsp/qList.jsp?ta=commspt 
to distribute the points in any manner you think is proper.
This is especially true when you think you have received good information from more than one person.

Also see  http://www.experts-exchange.com/jsp/cmtyQuestAnswer.jsp

     I hope this helps !
0
 

Author Comment

by:Archangel_dm
ID: 6968415
Sure, sorry about that. I did find out that it was a trojan virus. It's called downloader-w.
0

Featured Post

Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question