The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Trojan help, anyone?

    Discussion in 'Security and Anti-Virus Software' started by Akuma, Jul 15, 2008.

  1. Akuma

    Akuma Notebook Evangelist

    Reputations:
    198
    Messages:
    631
    Likes Received:
    0
    Trophy Points:
    0
    Hey, I could use some advice removing this trojan.

    Symptoms : when I power up my laptop, it'll load til "Welcome" screen, then stays there for 8 ~ 12 seconds (usually it loaded within 1-2 second). Then it'll give me blank screen with mouse, then I'll have to ALT-CTR-DEL and Run > explorer.exe - then it shows me these things :

    [​IMG]

    and then

    [​IMG]

    So then I searched about this "msnmgnr" and find out it's a trojan. So right now I just installed NOD32, SpyBot, a-squared Anti-Malware and AVG Anti Virus, doing some scans at the moment.

    But can anyone tell me some steps what will certainly get rid of it? (Exept format) and/or where did it come from?

    Thanks.
     
    Akuma, Jul 15, 2008
    #1
  2. royk50

    royk50 times being what they are

    Reputations:
    258
    Messages:
    1,975
    Likes Received:
    0
    Trophy Points:
    55
    don't install more than one AV program.
    run a complete scan using nod, spybot and then run ccleaner
     
    royk50, Jul 15, 2008
    #2
  3. Andy

    Andy Notebook Prophet

    Reputations:
    2,133
    Messages:
    6,399
    Likes Received:
    1
    Trophy Points:
    206
    Can't really say unless one knows about the virus....So best is to run a scan..!!
    Also try KIS 2007 and activate it with a trial key, it has always removed trojans for me without restarting and going into safe mode and all.. :D
     
    Andy, Jul 15, 2008
    #3
  4. Andy

    Andy Notebook Prophet

    Reputations:
    2,133
    Messages:
    6,399
    Likes Received:
    1
    Trophy Points:
    206
    Just googled that thing and it gives


    Threat name Win32.IRCBot
    Filename [System32Root]\msnmgnr.exe
    Filesize Unknown
    Last seen 05.28.2008 (now by you) :D

    - File is created as process on the disk.

    - This process can create, delete or modify files on the disk.

    Check out these links as well....
    Link 1
    Link 2
     
    Andy, Jul 15, 2008
    #4
  5. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    First of all, download and run Malwarebytes'Antimalware and SUPERAntispyware.
    Both programs have free versions which can scan on-demand and clean/delete files. Check my signature for download links.

    Second, if you still have an infection or suspect something fishy, you will have to go through the whole process of posting a HiJackThis log and get help from a forum like CastleCops or MajorGeeks.
    Download HijackThis form TrendMicro here; link.
    Create an account on Castlecops here; link and follow their procedure exactly.

    Where 'your' Trojan came from is almost impossible to say; someone suggested to you to click on a Msn link maybe?
     
    Baserk, Jul 15, 2008
    #5