Wednesday, February 24, 2010

Spyware O6KO.SYS And O6KO.DLL

Did spyware removal on client computer. The client computer could not access any security website, such as avg.com, Symantec.com and prevx.com etc. Computer could not get IP addresses. The DNS server was check OK. One Windows Service called “SRVO6KO” was found running in background with two infected files: “C:\windows\system32\drivers\o6ko.sys” and “C:\windows\system32\o6ko.dll”. Ran command line and typed command “sc stop srvo6ko” and “sc delete svro6ko”. Then deleted the files “O6KO.SYS” and “O6KO.DLL”. Problem solved.

No comments:

Post a Comment