PDA

View Full Version : How do I manually close the file handles....



geomarkham
2008-05-27, 02:07
I'm told I have a type of virus that acts as a driver and actively solicits malware whenever I turn on my computer.

Spybot S&D suggests that I "manually close the file handles of the core.cahce.dsk and core.sys residing in the folder \windows\system32\drivers\" and further instructs me to check this forum for help.
I couldn't find anything about closing handles when I searched

Any help or direction would be appreciated.
Thanks in advance.

drragostea
2008-05-27, 02:56
Hello and welcome to the forums. Perhaps you were referring to the "SmitFraud" trojan? From Spybot's description it is persistent to remove because it is located in the core.sys files. Which means... that when your computer boots up, it boots up as well. So it can be difficult. :sad:

-------
Consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
-------

md usa spybot fan
2008-05-27, 05:38
geomarkham:

These two programs can close file handles:
Unlocker (http://ccollomb.free.fr/unlocker/)
NirSoft's OpenedFilesView (http://www.nirsoft.net/utils/opened_files_view.html)

honda12
2008-05-27, 21:42
I also recommend unlocker, it is a really small and simple to use program

drragostea
2008-05-28, 00:28
I just don't understand what "file handles" are exactly. I've read the Wikipedia and Webopedia article already. Thanks.