ElaKiri Community
Downloads
(#1)
Old
hul2000's Avatar
hul2000 hul2000 is offline
Senior Member
hul2000 is an unknown quantity at this point
 
Posts: 5,050
Join Date: Oct 2006
Location: Gallifrey
Need Urgent Help!!! - 10-30-2007, 07:12 PM

My computer got infected by "MntDrCore" virus (a.k.a. "isass.exe"). This was a new version of the virus, so my AVG didn't detect it.
Ayway I removed it by using the following instructions which I found on the net.

"......To remove MntDrCore.exe from your system, follow these steps.
1. Open windows explore and open your pen drive. Don’t click on it to open.
2. Open command prompt and goto pen drive, and type following command.
3. Attrib –H –S
4. Then view your pen and delete right click and delete all newly appeared
files. (there can be files like autorun.inf,autorun.ini and MntDrCore.exe).
5. Open task manager pressing ALT+CTRL+DEL
6. Go to process tab, and sort process by name.
7. There should be two process running namely, (isass.exe an lsass.exe).
8. lsass is a system process, but isass is a process started by a virus.
9. kill isass.exe (it’s really is an ass)
10. Then open windows registry editor (start>run>regedit)
11. Find any value having part ‘isass.exe’.
12. If you find that value, rename the ‘isass.exe’ part to ‘isass1.exe’. So if
you mistakenly change anything you can back track.
13. Then go to MyComputer and open a new searh.
14. After entering the file to search as ‘isass.exe’, click on ‘more advance
options’.
15. Then select the ‘search hidden files and folders option’
16. If you got any copies of isass.exe, delete them all.
17. Now restart you machine............"

I got them all removed including the registry keys.

But I now got a problem. I cannot disable the "Hide Protected System Files" from Folder Options. once I disabled it and click OK it enables itself.

I searched for solutions in the net and found this,

".......Go to the following registry key:
HKLM\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Advanced\Folder\Hidden\SHOWALL

DELETE the value CheckedValue in the right window. (Its type should be REG_SZ and data should be 2.)

Now create a new DWORD value called CheckedValue (same as above, except that the type is REG_DWORD). Modify the value data to 1 (0x00000001).

This should let you change the "Hidden Files and Folders" option..........."

But it didn't work. There is no "REG_RZ" value is the name of "CheckedValue".

Is there anything to do to fix the problem (apart from formatting)?
Reply With Quote
(#2)
Old
hul2000's Avatar
hul2000 hul2000 is offline
Senior Member
hul2000 is an unknown quantity at this point
 
Posts: 5,050
Join Date: Oct 2006
Location: Gallifrey
10-30-2007, 07:46 PM

Please Help.
Reply With Quote
(#3)
Old
DJAT's Avatar
DJAT DJAT is offline
Senior Member
DJAT is just really niceDJAT is just really niceDJAT is just really niceDJAT is just really niceDJAT is just really niceDJAT is just really niceDJAT is just really nice
 
Posts: 8,654
Join Date: Sep 2006
Location: Live in EARTH
Send a message via MSN to DJAT Send a message via Yahoo to DJAT
10-30-2007, 07:47 PM

Sry maco Format karana eka witarai 1kama piliyama
Reply With Quote
(#4)
Old
sajith071's Avatar
sajith071 sajith071 is offline
Senior Member
sajith071 is on a distinguished road
 
Posts: 2,420
Join Date: Aug 2007
Location: SRI LANKA
Send a message via MSN to sajith071 Send a message via Yahoo to sajith071
10-30-2007, 07:50 PM

yes machan format karapan...
Reply With Quote
(#5)
Old
sri_lion's Avatar
sri_lion sri_lion is offline
Senior Member
sri_lion has a spectacular aura aboutsri_lion has a spectacular aura aboutsri_lion has a spectacular aura aboutsri_lion has a spectacular aura about
 
Posts: 12,911
Join Date: Sep 2006
Location: Kuala Lumpur
Send a message via MSN to sri_lion
10-30-2007, 07:53 PM

juz do some googling about the virus info.. who knows maybe u'll find someone's forum posts about a solution..

IF NOT.. FORMAT!!
Reply With Quote
(#6)
Old
Kasun007 Kasun007 is offline
Member
Kasun007 is an unknown quantity at this point
 
Posts: 44
Join Date: Mar 2007
10-30-2007, 08:00 PM

Don't format your hard drive.No need for this virus.
Reply With Quote
(#7)
Old
terrance's Avatar
terrance terrance is offline
Senior Member
terrance is an unknown quantity at this point
 
Posts: 2,973
Join Date: Sep 2006
Location: Negombo
10-30-2007, 08:01 PM

Quote:
Originally Posted by DJAT
Sry maco Format karana eka witarai 1kama piliyama
Reply With Quote
(#8)
Old
Kasun007 Kasun007 is offline
Member
Kasun007 is an unknown quantity at this point
 
Posts: 44
Join Date: Mar 2007
10-30-2007, 08:08 PM

HKLM\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Advanced\Folder\Hidden is not the place for "Hide Protected System Files" .It's for normal hidden files.

You have to go for

HKLM\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Advanced\Folder\SupperHidden

and set following values,

CheckedValue = 0
DefaultValue = 0
UncheckedValue = 1

Tell me if it's not working.
.
Reply With Quote
(#9)
Old
hul2000's Avatar
hul2000 hul2000 is offline
Senior Member
hul2000 is an unknown quantity at this point
 
Posts: 5,050
Join Date: Oct 2006
Location: Gallifrey
10-30-2007, 08:18 PM

Quote:
Originally Posted by Kasun007
HKLM\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Advanced\Folder\Hidden is not the place for "Hide Protected System Files" .It's for normal hidden files.

You have to go for

HKLM\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Advanced\Folder\SupperHidden

and set following values,

CheckedValue = 0
DefaultValue = 0
UncheckedValue = 1

Tell me if it's not working.
.
It Works.

Thank You
Reply With Quote
(#10)
Old
hul2000's Avatar
hul2000 hul2000 is offline
Senior Member
hul2000 is an unknown quantity at this point
 
Posts: 5,050
Join Date: Oct 2006
Location: Gallifrey
10-30-2007, 08:26 PM

Thanks Kasun007,

You saved my HDD from a format.
Reply With Quote
Reply

Bookmarks

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
URGENT - I Need Help from a Business Administration Student Lich ElaKiri Help 22 08-31-2007 08:25 AM
Need a Big Help.. Urgent!!! shaggy ElaKiri Help 46 05-31-2007 06:25 AM
Please Find This Song URGENT Lich New Music 6 03-17-2007 07:46 AM
Need A urgent Help!!!!!!!!!!! asithanl Downloads 6 03-08-2007 12:53 PM
ACER NOTE BOOKS URGENT shan ElaKiri Talk! 0 03-07-2007 01:33 PM



Copyright © 2006 - 2011 ElaKiri™ Beta2.Evo vBulletin, vBa iBproArcade Subdreamer I-Magic MKv
Optimisation plugin by DBtech

Page generated in 0.07829 seconds with 9 queries