PDA

View Full Version : SpyBot found Smitefraud-C.CoreService but I don't delete core.cache.dsk



javierbf
2008-02-07, 20:43
Hi, I have 2 Operating Systems in my pc (drive "c:", Windows Vista Ultimate and drive "d:" Windows XP SP2).
My problem is with windows vista: I am plagued by Internet Explorer 7 popping up trying to connect to websites that I do not desire to see. In the beginning generally was "http://url.adtrgt.com" but actually open blank pages and with minor frequency.

"Spybot Search & Destroy 1.5" (updated Jan 25, 2008) found this malware: "Smitfraud-C.coreService", in spite of the option "Repair" the file "c:\windows\system32\drivers\core.cache.dsk" continue located in the folder. If I restart en "safe mode" and delete the file, when I restart in "normal mode" the file is back again.

I have ran "SmitfraudFix.exe" without find a solution.

Attached is my "hijackthis.log".

Your help is much appreciated. Thank you...

Blade81
2008-02-11, 20:21
Hi

1. Download this file -
combofix.exe (http://download.bleepingcomputer.com/sUBs/ComboFix.exe) to your desktop.
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your
next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause
it to stall

Blade81
2008-02-17, 17:14
Due to inactivity, this thread will now be closed.

Note:If it has been five days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than five days since your last response and you need the thread re-opened, please send me or your helper a private message (pm). A valid, working link to the closed topic is required.