Remove core.cache.dsk/core.sys [Smitfraud-c.coreservices]


WHAT IS THIS
It makes random IE ads popup. The popups had several ad networks: url.cpvfeed.com, xads.zedo.com, searchlocal.ws, aavalue.com, upspiral.com

Spybot found Smitfraud-c.core and and cant remove it, file core.cache.dsk. comes back every time when you reboot.

YOU SHOULD HAVE FOR FIX
Combofix by sUBs
Avenger

REMOVE FILES
C:\WINDOWS\system32\byxxuvu.dll
C:\WINDOWS\system32\drivers\core.cache.dsk
C:\WINDOWS\system32\drivers\core.cache.dsk
C:\WINDOWS\system32\drivers\core.sys
C:\WINDOWS\system32\drivers\core.sys
C:\WINDOWS\system32\pac.txt
C:\WINDOWS\system32\urqnnmk.dll
C:\WINDOWS\system32\wnstsitr32.exe

REMOVE MALWARE SERVICES
core

RUN COMBOFIX

HOW TO DO IT

This entry was posted on Sunday, February 17th, 2008 at 7:02 am and is filed under tips. You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.

Comments are closed.