jmgnag.exe calling up Iexplore in Win 98 - Help!

[Pete Bresser]

After 'successfully' getting rid of a trojan on my old Windows 98 running
PC, I am left with a file in my C:\Windows\ directory that is trying to make
contact with an external source. And worse, the external source is trying to
make contact with my PC. Several anti-virus and anti-spyware packages have
failed to sort this problem out, and it is only my software firewall that is
preventing the two parts making woopie (what the outcome of THAT could be
makes me shudder to think).

Once the firewall stops the connection, the PC stops operating correctly,
makine Explorer (that's Windows Explorer) fall over and any programs that's
running at that time. Explorer automatically starts itself and also kicks
Iexplore into life (so jmgnag.exe can make contact).

Trying to disable jmgnag.exe is impossible: windows won't let me delete the
file because it's in use. Going to DOS and renaming the file stops Windows
from running.

Has anyone had any experience of this?

Any help gratefully received.

Spanner

 

[kurt wismer]

After 'successfully' getting rid of a trojan on my old Windows 98 running
PC, I am left with a file in my C:\Windows\ directory that is trying to make
contact with an external source. And worse, the external source is trying to
make contact with my PC. Several anti-virus and anti-spyware packages have
failed to sort this problem out, and it is only my software firewall that is
preventing the two parts making woopie (what the outcome of THAT could be
makes me shudder to think).

Once the firewall stops the connection, the PC stops operating correctly,
makine Explorer (that's Windows Explorer) fall over and any programs that's
running at that time. Explorer automatically starts itself and also kicks
Iexplore into life (so jmgnag.exe can make contact).

Trying to disable jmgnag.exe is impossible: windows won't let me delete the
file because it's in use. Going to DOS and renaming the file stops Windows
from running.

have you tried sending a copy of the file to an av developer for analysis?

 

[null]

After 'successfully' getting rid of a trojan on my old Windows 98 running
PC, I am left with a file in my C:\Windows\ directory that is trying to make
contact with an external source. And worse, the external source is trying to
make contact with my PC. Several anti-virus and anti-spyware packages have
failed to sort this problem out, and it is only my software firewall that is
preventing the two parts making woopie (what the outcome of THAT could be
makes me shudder to think).

Once the firewall stops the connection, the PC stops operating correctly,
makine Explorer (that's Windows Explorer) fall over and any programs that's
running at that time. Explorer automatically starts itself and also kicks
Iexplore into life (so jmgnag.exe can make contact).

Trying to disable jmgnag.exe is impossible: windows won't let me delete the
file because it's in use. Going to DOS and renaming the file stops Windows
from running.

Has anyone had any experience of this?

Any help gratefully received.

Upload the file for av scanning to these sites:

http://www.kaspersky.com/remoteviruschk.html

http://www.dialognauka.ru/english/www_av/

http://www.ravantivirus.com/scan/

If no backdoor/Trojan is detected, submit the file for analysis here
and explain your symptoms:

(e-mail address removed)

You should hear back from KAV very quickly.


Art
http://www.epix.net/~artnpeg

 

[wb]

Computers are stupid, they don't "make contact" unless they are told to. I
presume you haven't got rid of the problem... keep looking. Once you find
the culprit, clean the registry too.
Try updating windows as well, makes you somewhat less vulerable.
wb

 

[Spanner]

have you tried sending a copy of the file to an av developer for analysis?

Cheers, I'll give that a go.

Spanner

 

[Spanner]

Upload the file for av scanning to these sites:

http://www.kaspersky.com/remoteviruschk.html

http://www.dialognauka.ru/english/www_av/

http://www.ravantivirus.com/scan/

If no backdoor/Trojan is detected, submit the file for analysis here
and explain your symptoms:

(e-mail address removed)

You should hear back from KAV very quickly.


Art
http://www.epix.net/~artnpeg

That's very helpful. Thanks for the addresses!

Spanner

 

[Spanner]

Yes, the problem is still there. I have been through the registry already,
but I try not to mess too much with it because I don't quite know what I'm
looking for in there. I didn't see anything that I could categorically say
was the problem.

I'm going to do a reinstall of Windows to see if that will clear it - who
knows? It just might work.

Spanner