Wednesday, August 8, 2007

MntDrCore.exe - A worm

There is a new worm MntDrCore.exe which is rapidly spreading everywhere using removable drives.

MntDrCore.exe creates a fake isass.exe
AVG still cannot detect it and I tried prevx but with no good results :(

for more info visit : http://www.techcert.lk/MntDrCore.htm

 Subscribe to my blog


AddThis Social Bookmark Button

4 comments:

  1. It's so nice for me to have found this blog of yours, it's so interesting. I sure hope and wish that you take courage enough to pay me a visit in my PALAVROSSAVRVS REX!, and plus get some surprise. My blog is also so cool! Don't think for a minute that my invitation is spam and I'm a spammer. I'm only searching for a public that may like or love what I write.

    Feel free off course to comment as you wish and remember: don't take it wrong, don't think that this visitation I make is a matter of more audiences for my own blogg. No. It's a matter of making universal, realy universal, all this question of bloggs, all the essential causes that bring us all together by visiting and loving one another.

    You must not feel obliged to come and visit me. An invitation is not an intimation. Also know that if you click on one of my ads I'm promised to earn a couple of cents for that: I would feel happy and rewarded (because I realy need it!!!) if you did click it, but once again you're totaly free to do what ever you want. I, for instance, choose immediatly to click on one of your ads, in case you have them. To do so or not, that's the whole beauty of it all, however, blogocitizens must unite also by clicking-help eachother when we know cybermegacorporations profit from our own selfishness regarding to that simple click.

    I think it's to UNITE MANKIND that we became bloggers! Don't see language as an obstacle but as a challenge (though you can use the translater BabelFish at the bottom of my page!) and think for a minute if I and the rest of the world are not expecting something like a broad cumplicity. Remenber that pictures talk also. Open your heart and come along!!!!!

    ReplyDelete
  2. This happens due to a virus. This blog shows you how to neutralize and remove this type of viruses from your system manually. Even many antivirus software’s are not very effective in doing that.
    http://neo-code.blogspot.com/

    ReplyDelete
  3. This happens due to a virus. This blog shows you how to neutralize and remove MntDrCore.exe from your system manually.
    http://neo-code.blogspot.com/

    ReplyDelete
  4. To Stop spreading MntDrCore.exe into ur PC.........

    If ur Pc infected by this
    Worm/Virus
    1.stop the process
    isass.exe by any process
    killer(http://www.portablefreeware.com/?sc=25)
    2.
    Delete C:\Windows\System32\isass.exe and C:\Windows\System32\isass.dll
    3.
    Delete the Key in registry
    (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\**xp**)
    I dnt sure about **xp**.But there is only a key like this with the letters 'xp'.

    If not ur Pc infected by this
    Worm/Virus
    1.
    create 2 dummy files as isass.exe and isass.dll urself and copy them into C:\Windows\System32\
    2.
    Goto
    Tools->Folder Option->View
    Then Untick 'Use Simple File Sharing(Recommended).
    3.
    Select isass.exe and isass.dll from C:\Windows\System32\
    Then
    Right Clic->Properties->Security
    Set Permission only to the user called 'SYSTEM'
    4.
    Apply setting and Click OK

    Now Ur Computer isn't infected by MntDrCore.exe

    ReplyDelete