Found an unknown keylogger/ spyware named

Found an unknown keylogger/ spyware named "MrvGINA.dll"
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Found an unknown keylogger/ spyware named "MrvGINA.dll" EvilG 10-28-2006
Posted by =?Utf-8?B?RXZpbEc=?= on October 28, 2006, 10:13 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Anyone heard of this? Found it while trying to correct my computer starting
in "Administator" user mode, as opposed to my normal user profile. A log in
window appears, which I believe is created by the spyware to try and phish
passwords.
When I tried to change the settings a warning stating "Windows Security and
Fast User turned off. Uninstall program to correct. Finding MrvGINA.dll may
help determine the responible program".
MrvGINA.dll is in the sytem32 folder.

Neither Spybot Search & Destroy nor Norton Internet Security have identified
the file leading me to believe it is a new spyware/malware.

Posted by Ze Muffinman on October 28, 2006, 10:51 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Try scanning it with S.A.S. at www.superantispyware.com
EvilG wrote:
> Anyone heard of this? Found it while trying to correct my computer starting
> in "Administator" user mode, as opposed to my normal user profile. A log in
> window appears, which I believe is created by the spyware to try and phish
> passwords.
> When I tried to change the settings a warning stating "Windows Security and
> Fast User turned off. Uninstall program to correct. Finding MrvGINA.dll may
> help determine the responible program".
> MrvGINA.dll is in the sytem32 folder.
>
> Neither Spybot Search & Destroy nor Norton Internet Security have identified
> the file leading me to believe it is a new spyware/malware.


Posted by S. Pidgorny on October 29, 2006, 4:30 am
If you were  Registered and logged in, you could reply and use other advanced thread options
It may be not a spyware but a result of installation of something - spyware
wouldn't call itself, or implement itself, as a GINA. A quicke search for
mrvgina.dll reveals that this is likely a Netgear installation component,
problems with it, and the ways to remove.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

> Anyone heard of this? Found it while trying to correct my computer
> starting
> in "Administator" user mode, as opposed to my normal user profile. A log
> in
> window appears, which I believe is created by the spyware to try and phish
> passwords.
> When I tried to change the settings a warning stating "Windows Security
> and
> Fast User turned off. Uninstall program to correct. Finding MrvGINA.dll
> may
> help determine the responible program".
> MrvGINA.dll is in the sytem32 folder.
>
> Neither Spybot Search & Destroy nor Norton Internet Security have
> identified
> the file leading me to believe it is a new spyware/malware.



Similar ThreadsPosted
SOME UNKNOWN SPYWARE... January 14, 2006, 2:16 pm
Virus named as "maximus" September 29, 2006, 6:59 pm
How to communicate with a named pipe on another PC without security rejecting my connection? October 25, 2006, 3:21 pm
Shares, Named Pipes, and Registry for Anonymous Remote Access February 23, 2007, 2:24 am
The Difference Between Adware, Spyware and Anti-virus.(spyware blockers) April 4, 2008, 5:54 am
found my hacker April 27, 2006, 8:51 am
Mrxpriumpstc service can't be found December 26, 2005, 11:16 pm
virus found but not detected June 21, 2006, 6:56 pm
4 GIGS found by Chkdsk? February 9, 2007, 7:41 pm
JS file content found on my PC July 23, 2008, 4:02 am

The site map in XML format XML site map

Contact Us | Privacy Policy