The zedo code produces pop ups from the several providers.
- xads.zedo.com
- upspiral.com
- searchlocal.ws
- aavalue.com
- url.cpvfeed.com
and even though you may have pop up blockers from google yahoo and whatever other toolbar that is out there nothing happens. Heres what you should do
Go to this program here online called
You are going to find this rootkit called Rootkit.Win32.Agent.EQ which infects the core.sys in the c:/windows/system32/driversdirectory. You should also find core.cache.dsk in the same directory okay heres how you remove the damn program.
How to remove The Core.sys
1.Boot in safe mode
2. Click on Start, Search, and choose All Files and Folders
3. In the all or part of file name box, type the following
core.sys
4. In the Look In box, choose local hard drives and click Search
5. When core.sys is found in the c:\windows\system32\drivers directory, right-click on it and choose Delete
6. Repeat steps 2-5 for the file core.cache.dsk
7. Close the Search box
8. Click on Start, Run and type REGEDIT and press Enter
9. Click on the Plus sign (+) next to HKEY_LOCAL_MACHINE
10. Click the plus next to SYSTEM
11. Click the plus next to CurrentControlSet
12. Click the plus next to Services
13. Find the folder called CORE and right-click on it and choose Delete
IF THE CORE FOLDER DOESNT EXIST DONT DO ANYTHING.
14. Close the Registry Editor by clicking on the X in the right-hand corner of the window
15. Reboot your computer in Normal mode
16. Once the computer is rebooted, open your web browser and go to Kaspersky Online Scanner by clicking on the link below.
kaspersky
Your computer should be free of any virus from there on.
P.s If none of this works try this software here methods outlined here.