Comments on: How to Remove url.cpvfeed.com popups and core.sys Rootkit http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/ TechNews and Security Fri, 20 Jan 2012 15:00:58 -0500 hourly 1 http://wordpress.org/?v=3.1 By: IJAZ AHMAD TANOLI http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-95073 IJAZ AHMAD TANOLI Wed, 18 Aug 2010 20:25:05 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-95073 please remove the url blocked please remove the url blocked

]]> By: Jerry http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-10502 Jerry Mon, 21 Apr 2008 05:35:40 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-10502 I have tried the solutions posted on this site, but it doesnt help. I have tried other methods as well. Nothing I do stops core.cache.dsk from coming back after I reboot. Has anyone found something that can help? Thanks I have tried the solutions posted on this site, but it doesnt help. I have tried other methods as well. Nothing I do stops core.cache.dsk from coming back after I reboot. Has anyone found something that can help?

Thanks

]]> By: Robert http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-8779 Robert Sat, 09 Feb 2008 22:30:19 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-8779 Hi. I can´t delete this stupid kinda virus i have tried for about 10 times and i still have core.cache.dsk.... please can someone explain what i have done wrong. I have tried your deleting thing but i can just delete it in safe-mode and then its back again when i restart it... Sorry About my English //Robert Hi. I can´t delete this stupid kinda virus i have tried for about 10 times and i still have core.cache.dsk…. please can someone explain what i have done wrong. I have tried your deleting thing but i can just delete it in safe-mode and then its back again when i restart it… Sorry About my English //Robert

]]> By: Sean http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-8456 Sean Fri, 25 Jan 2008 01:55:16 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-8456 I can not find this "core" folder in my registry. I was able to locate and delete the core.cache.dsk file through safemode but just doing this does not solve the problem. Please help! Thanks I can not find this “core” folder in my registry. I was able to locate and delete the core.cache.dsk file through safemode but just doing this does not solve the problem. Please help!

Thanks

]]> By: Bob S. http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-8444 Bob S. Thu, 24 Jan 2008 09:58:30 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-8444 This little bugger is still around. The CORE.SYS file may be resident elsewhere. Im my case, it was in the root directory. There was also another "randomly-named" file in \windows\system32\devices that "happened" to have the same timestamp as the CORE.CACHE.SYS file in the same directory. I booted into "safe/commandprompt" and deleted both, and then CORE.CACHE.SYS no longer "returned from the dead". Finally, I did "cleanups", with various tools, and all is well. Go figure, eh? This little bugger is still around. The CORE.SYS file may be resident elsewhere. Im my case, it was in the root directory. There was also another “randomly-named” file in \windows\system32\devices that “happened” to have the same timestamp as the CORE.CACHE.SYS file in the same directory. I booted into “safe/commandprompt” and deleted both, and then CORE.CACHE.SYS no longer “returned from the dead”. Finally, I did “cleanups”, with various tools, and all is well. Go figure, eh?

]]> By: Chris Zimmerman http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-8362 Chris Zimmerman Sat, 19 Jan 2008 03:12:04 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-8362 I had the same core.cach.dsk problem on several customer systems over the past couple of weeks. However, the core.sys file and service were NOT present. I made several attempts at this that the other (basiclly fixe's from other forums), none helped at all. Finally, I decided to simply reinstall the OS, but not before going midevil on the darn thing. I decided to copy the IExplorer main files (program files\Internet Explorer) from another system. This gerenrated an ierutitl.dll not found error. Looking that up, it is basicly an identifier for the browser version and this and that lead to the conclusion that even though the OS was reporting that IE6 was installed, in fact IE7 was. Go figure... next step, uninstall IE7. Add Remove had it listed, but no tab to un-install. Bit more googling and found the uninstaller is located in windows\ie7. Naturually that folder didn't exisit. Copied it from another system, it worked! No more IE7... but still had the pop-ups. Until I reinstalled IE7. In a nut shell... uninstall IE7 with the unistaller from another system if needed, delete the core.cache.dsc (from ERD commander or PE disk) reinstall IE7. Hope this helps I had the same core.cach.dsk problem on several customer systems over the past couple of weeks. However, the core.sys file and service were NOT present. I made several attempts at this that the other (basiclly fixe’s from other forums), none helped at all.

Finally, I decided to simply reinstall the OS, but not before going midevil on the darn thing. I decided to copy the IExplorer main files (program files\Internet Explorer) from another system. This gerenrated an ierutitl.dll not found error. Looking that up, it is basicly an identifier for the browser version and this and that lead to the conclusion that even though the OS was reporting that IE6 was installed, in fact IE7 was. Go figure… next step, uninstall IE7. Add Remove had it listed, but no tab to un-install. Bit more googling and found the uninstaller is located in windows\ie7. Naturually that folder didn’t exisit. Copied it from another system, it worked! No more IE7… but still had the pop-ups. Until I reinstalled IE7. In a nut shell… uninstall IE7 with the unistaller from another system if needed, delete the core.cache.dsc (from ERD commander or PE disk) reinstall IE7.

Hope this helps

]]> By: jason http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-8361 jason Sat, 19 Jan 2008 02:16:36 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-8361 I can't find core.sys.dsk nor core.sys in safemode, but when i log in window(vista) in the normal mode, its there again!! try spydoctor, it detects it, and clean it, but it is still there!!! try killbox, both kill now and remove in reboot, still didn't work!! Please help, anybody!!!!! I can’t find core.sys.dsk nor core.sys in safemode, but when i log in window(vista) in the normal mode, its there again!! try spydoctor, it detects it, and clean it, but it is still there!!! try killbox, both kill now and remove in reboot, still didn’t work!! Please help, anybody!!!!!

]]> By: matt http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-8334 matt Thu, 17 Jan 2008 21:55:00 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-8334 Has anyone figured this out yet? Especially those who have (core.cache.dsk)I cannot get rid of this thing. I really dont want to wipe the whole drive. Has anyone figured this out yet? Especially those who have (core.cache.dsk)I cannot get rid of this thing. I really dont want to wipe the whole drive.

]]> By: Brandon http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-8333 Brandon Thu, 17 Jan 2008 21:28:36 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-8333 It worked for me! THANKS! It worked for me! THANKS!

]]> By: Lynne http://www.ajit1.com/spyware/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/comment-page-1/#comment-8241 Lynne Sun, 13 Jan 2008 21:31:40 +0000 http://www.ajit1.com/how-to/how-to-remove-urlcpvfeedcom-popups-and-coresys-rootkit/#comment-8241 Well, it didn't work for me. I only had the core.casche.dsk file, and after 2 dsys of tryin to rid my PC of this, I finally said f'it. I am just so pissed off that some jack ass had to put this out there!!! It's just ridiculous and should be a crime punishible BY LAW. Well, it didn’t work for me. I only had the core.casche.dsk file, and after 2 dsys of tryin to rid my PC of this, I finally said f’it. I am just so pissed off that some jack ass had to put this out there!!! It’s just ridiculous and should be a crime punishible BY LAW.

]]>