Re: Nok Nok Trojan

From: JasonW (no_at_no.com)
Date: 09/12/03 

Date: Fri, 12 Sep 2003 02:18:48 GMT

See this site for more info on msmgt.exe:
http://www.faqs.org/qa/qa-3023.html

Spybot Search and Destroy can probably clear this and any other spyware from
your system. http://security.kolla.de/

-JasonW

"David" <dhfinley@swbell.net> wrote in message
news:0dd201c3789d$ef088f20$a501280a@phx.gbl...
> I have asked questions in Virus discussion, they related
> it to bcknoknokand scanreg.exe. I want to know what
> msmgt.exe 34 bytes does?
>
>
> >-----Original Message-----
> >Are you asking what a Trojan is? It is a program that
> looks like it is
> >supposed to do a good thing, but does a bad thing, like
> the Trojan Horse
> >story. In this case it may be a program called Nok Nok
> which is used to
> >remotely monitor everything on your PC (http://www.nok-
> nok.net/). Several
> >trojan warez sites list this program name as well. So it
> might either be a
> >trojan or if your computer is company owned, this may be
> something they are
> >using to keep tabs on you.
> >
> >Have you done a scan with McAfee and not just with the
> guardian? This could
> >help you find and eliminate the trojan. If
> the "services.exe" file is the
> >one that is actually infected, you can do a repair of
> Windows 2000 or just
> >use expand.exe to replace that one file from the CD.
> >
> >-JasonW
> >
> >
> >"David Finley" <dhfinley@swbell.net> wrote in message
> >news:0af601c3787f$da7ed230$a501280a@phx.gbl...
> >> I have McAfee 7.2. The guardian program keeps detecting
> a
> >> Nok Nok trojan eminating from Services and Controller
> App.
> >> This trojan wants port 666 with remote IP address
> >> 66.52.249.70 outbound. That address traces to Seattle
> and
> >> MDSG-PACWEST-2BLK using visual trace. What the @#$#$@ is
> >> this?
> >> .
> >>
> >>
> >
> >
> >.
> >

Relevant Pages

  • Re: Need opinions on the best Spyware removal utility
    ... The two popular ones: Ad Aware 6.0 and Spybot: Search and Destroy 1.3. ... You could also run the spyware blocker spywareblaster. ... > information is available on this trojan as it appears to be a new variant. ...
    (microsoft.public.windowsxp.general)
  • Re: Nok Nok Trojan
    ... >Are you asking what a Trojan is? ... In this case it may be a program called Nok Nok ... >> I have McAfee 7.2. ... The guardian program keeps detecting ...
    (microsoft.public.win2000.security)
  • Re: Nok Nok Trojan
    ... Are you asking what a Trojan is? ... In this case it may be a program called Nok Nok which is used to ... Have you done a scan with McAfee and not just with the guardian? ... The guardian program keeps detecting a ...
    (microsoft.public.win2000.security)
  • Re: Browser automatically closes on some sites
    ... Trojan Scan Frequently Asked Questions ... >> Check for Spyware - How-to ... as does HijackThis (Only more so. ... With the above tools, particularly Avast Virus cleaner, be sure to ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • NASTY TROJAN
    ... Sinister New Spyware Threats Emerge ... The spyware distribution includes, as part of its payload, a Trojan ... Windows XP uses the Protected Storage area to record sensitive ... To eliminate the threat, clear out all the ...
    (soc.culture.thai)
Quantcast