everything seems to work fine but there's this program that i wasn't sure about that popped up as an alert from ZoneAlarm: MSNNOED.exe. i tried to google to see if this was a legit file but i couldn't find anything so i click no to not allow it to access the internet.
i ran my virus checker and it didn't pick up anything. but when i ran malewarebytes with the most recent update, it found 3 "infected" files, one of which was the MSNNOED.exe and malewarebytes says it's a trojan agent. also it finds a comsa32.sys file which it deems as a trojan agent. when i search for that MSNNOED.exe file on my computer, it's in the WINDOWS\SYSTEM32 directory and there's another file in the Prefetch directory: MSNNOED.EXE-05ABE18F.pf
not sure what they are but malewarebytes quarantines them and removes them but requires a restart, which i do. when i restart and load back up, everything is fine and the file is supposedly gone (meaning when i try doing a search, MSNNOED.exe isn't there anymore as well as the other files). but when i try to open up task manager to see if it really is, shortly afterward i get an alert from ZoneAlarm saying do i want to let MSNNOED.exe access the internet. i click no. i do a search on my system again and sure enough, those same files are back there. is there a "hidden" program that's starting this? i looked on my scheduled startup programs/processes and nothing out of the ordinary is there.
i dont know how i got this now, just after upgrading to SP2. i think it's worth mentioning that i didn't have this problem when i had SP1. how do i permanently get rid of this???
btw, after doing a bit more research, i found possibly the same trojan agent but named differently on other websites where people have had this similar issue: it's MSNIOED.exe but i have the MSNNOED.exe and both versions are 1,0,0,2 around 59-62 bytes in size.
Edited by Rutt Roh, 11 January 2009 - 06:17 PM.