New proc after winupdate...what is it?

  • Thread starter Thread starter Mark
  • Start date Start date
M

Mark

I did windows update this AM, and afterword a new process mdptltrw.exe
is asking to use the internet. What is it and what does it do? Nothing
on the web about it :(

I just want to make sure I can trust it, and that's it not some
trojan.

M.
 
Mark wrote on Wed, 10 May 2006 09:32:33 GMT:
I did windows update this AM, and afterword a new process mdptltrw.exe
is asking to use the internet. What is it and what does it do? Nothing
on the web about it :(

I just want to make sure I can trust it, and that's it not some
trojan.

M.
Click to expand...

Find the exe on your hard disk, right click it, and choose Properties. Post
the details from the Version tab. I can't find this exe on my XP Pro SP2 PC
that was patched this morning.

Dan
 
Run reputable utility programs to make sure your system is malware-free.

On spyware/malware: use a multi-program defense in depth approach to keep malware out.
Keep your antivirus up-to-date, use a firewall, use anti-spyware utilities.

You are highly urged to follow the steps at
"The Parasite Fight Quick Fix Protocol"
<http://www.aumha.org/a/quickfix.htm>

http://aumha.org/a/parasite.htm

http://www.elephantboycomputers.com/page2.html#Security

http://www.elephantboycomputers.com/page2.html#Removing_Malware
 
Hi Dan,

What threw me with this exe is that it says it's owned by microsoft.
Here's the properties...

General:
mdptltrw.exe
Size on disk: 12,288 bytes

Version:
Company: Microsoft
Internal Name: loader
Original File Name: loader.dat

Sounds bad doesn't it. Note that TrendMicro Antivirus and SpyBot say
my system is clean. They only complain about tracking cookies.

I'm guessing this program isn't really a microsoft program at all.

I think I have some new kind of virus that found its way onto my
system with Internet Explorer. The new virus is smart in that it hides
and creates these non-sensical files every once in a while. I nab them
when they try to access the internet (Zone Alarm flags them, and I hit
Deny).

Any ideas?

Regards

Mark
 
Back
Top