core.cache.dsk Virus Removal Howto

* Right click in the windows/system32/drivers folder and select arrange icons - modified. This will arrange the icons according to the date they were modified.
* The last 3 files in the folder were the latest. They included the spyware terminator driver, the spyware doctor driver and then there was a suspicious 3rd one, amdk77.sys.

Now I know that there is an amdk7 but whats with an amdk77.sys. Upon further investigation, I discovered that there already was an amdk7.sys present in the folder, so this one wasn't supposed to be there. Secondly it was created on the same date as my system infection, 30th of January 2008. So, I figured out that the core.cache.dsk virus actually replicates one of the files in the system32 folder and adds a random number to the end of the filename and uses it to create the core.cache.dsk file each time windows boots. So, if it likes a file, as in my case, amdk7.sys....its going to create a file called amdk77.sys and place it in the folder. It may not always be a file named amdk77.sys though, it can be something else as well, so the best thing is to look for clues and their dates of creation. I was still in safe mode so I deleted the file and voila, when I booted back normally into windows, the file core.cache.dsk didn't get created!! I hope this gives you a clear insight onto how to get rid of this little bugger! Also remember that you can delete the file only when you are in safe mode, otherwise windows won't let you delete any file in the system32/drivers folder. Before deleting any file in that folder, you have to be absolutely sure what you are doing. Good luck!