Afcore trojan ... How to remove ?

[kenon]

Hi ...
I got the trojan "Afcore" ... :-(
Version "h", seems to me.

But I can't remove it from my PC.

Does anybody know about removing that Afcore ???

 

[diogenes10]

Google gives tons of hits on afcore.

What have you tried so far? Have you checked Symantec and/or McAfee sites? Have you tried any of the online virus scans in Smah's faq? Or something else?





-------------------------------------
It's 10 O'Clock ( somewhere! ).
Are your registry and data backed up?

 

[YellowOnline]

Press CTRL+ALT+DEL and remove the following tasks:
* 62aff07b.exe
* backdoor.afcore.c.exe
* backdoor.afcore.d.exe
* backdoor.afcore.h.exe
* f65ff6d0.exe

Go to a command line and type
* regsvr32 /u <PATH>backdoor.afcore.g.dll
* regsvr32 /u <PATH>backdoor.afcore.k.dll
* regsvr32 /u <PATH>dc35dedf.dll
* regsvr32 /u <PATH>fe3e88b0.dll
* regsvr32 /u <PATH>gvagfxj.dll
* regsvr32 /u <PATH>gyrwnof.dll

! You'll have to look for their path yourself.
! So you'll get something like e.g. regsvr32 /u c:\winnt\system32\gyrwnof.dll

Delete
* 62aff07b.exe
* backdoor.afcore.c.exe
* backdoor.afcore.d.exe
* backdoor.afcore.g.dll
* backdoor.afcore.h.exe
* backdoor.afcore.k.dll
* dc35dedf.dll
* f65ff6d0.exe
* fe3e88b0.dll
* gvagfxj.dll
* gyrwnof.dll


Peace,

Yellow

 

[YellowOnline]

PS. Don't forget to reboot after unregistering the dll's, and before trying to delete the files!

Peace,

Yellow