ManMove.exe

  • Thread starter Thread starter suzycue
  • Start date Start date
S

suzycue

When I was running a Symantec Live Update process a file named ManMove.exe
tried to modify a Symantec file. I found the fie at
C/windows/prefetch/MANMOVE.EXE-177EAB4B.pf

Does anyone know hat the file is and what it does. I found a German site
that said it's spyware.
 
suzycue said:
When I was running a Symantec Live Update process a file named ManMove.exe
tried to modify a Symantec file. I found the fie at
C/windows/prefetch/MANMOVE.EXE-177EAB4B.pf

Does anyone know hat the file is and what it does. I found a German site
that said it's spyware.
Click to expand...

Go through these cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Scan for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
Scan for viruses with an up2date Anti-virus software (full scan).

Can you please upload the file to this link for scanning:
http://virustotal.com
wait for the result and let us know.
Run a complete scan with Norton not Comprehensive one!.
Run disk clean up and then run this command:
sfc /scannow

HTH.
nass
 
Thank you. I'll follow the steps and upload the file.

nass said:
suzycue said:
When I was running a Symantec Live Update process a file named ManMove.exe
tried to modify a Symantec file. I found the fie at
C/windows/prefetch/MANMOVE.EXE-177EAB4B.pf

Does anyone know hat the file is and what it does. I found a German site
that said it's spyware.
Click to expand...

Go through these cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Scan for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
Scan for viruses with an up2date Anti-virus software (full scan).

Can you please upload the file to this link for scanning:
http://virustotal.com
wait for the result and let us know.
Run a complete scan with Norton not Comprehensive one!.
Run disk clean up and then run this command:
sfc /scannow

HTH.
nass
Click to expand...
 
I uploaded the file to virus total and the result was 0/32. I'm going to go
ahea and take the other steps you recommended.

nass said:
suzycue said:
When I was running a Symantec Live Update process a file named ManMove.exe
tried to modify a Symantec file. I found the fie at
C/windows/prefetch/MANMOVE.EXE-177EAB4B.pf

Does anyone know hat the file is and what it does. I found a German site
that said it's spyware.
Click to expand...

Go through these cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Scan for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
Scan for viruses with an up2date Anti-virus software (full scan).

Can you please upload the file to this link for scanning:
http://virustotal.com
wait for the result and let us know.
Run a complete scan with Norton not Comprehensive one!.
Run disk clean up and then run this command:
sfc /scannow

HTH.
nass
Click to expand...
 
suzycue said:
I uploaded the file to virus total and the result was 0/32. I'm going to go
ahea and take the other steps you recommended.
Click to expand...

In some way it is good that the scan came out clean, but still it doesn't
confirm it is not a viral or malware file?.

What happen when you search your local drive by type in the search:
ManMove.exe and see how many and NOte the locate/directory they are located
in, also right click it and select properties please write down the info
underneath the General tab, share, compatibility, Version tab.

Download the Hijackthis and run a scan then please send me the log at the
address below:
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
Can you please send me a copy at (e-mail address removed) , remove
the obvious to email me.
Let us know your progress.
nass
 
OKay. It's going to take a while to do all this. I'm running the
onecare.live check now.

Properties
MANMOVE.EXE-177EAB4B.pf
PF file
Unknown application
Loc: C:\windows\prefetch
Size: 11.2 KB
Size on disk: 12.0kb
Created: Today April 16, 10:54:02 am
Modified: Today April 16, 10:54:02 am
Attributes unchecked

There is no share, compatibility, or version tab
 
Back
Top