• ITS Help Desk
• Support
• Security
• Software Central
• Get a Computer
• Help Desk Live

MarketScore (RelevantKnowledge) Spyware Information

IT Security has started disabling ports in the residence halls for computers infected with spyware called MarketScore (also known as RelevantKnowledge).  This software can hijack SSL traffic through their servers.  This means that secure information, such as passwords, bank account, and credit card numbers may be passed through the MarketScore servers which could then be stolen. 

Due to the nature of this spyware, IT Security has decided to disable the ports infected with it to make sure no abuse takes place.  Removing this software does not require a reformat of the computer, however several steps are required to remove the spyware.

1. Uninstall the RelevantKnowledge program.
   - Go to the Start menu and choose Control Panel.
   - Open Add or Remove Programs and remove/uninstall RelevantKnowledge.

2. Delete the mrkscr.exe and/or mkscr.exe files from the c:\windows\system32 folder.

3. Update and run an antispyware program such as Spybot Search & Destroy. You can find information on how to install, update, and run Spybot Search & Destroy here.

4. Remove related firewall exceptions.
   - Go to the Start menu and choose Control Panel.
   - Open the Security Center and choose the Windows Firewall.
   - Click on the Exceptions tab.
   - Remove any exceptions for mrksrc or mksrc.

Note: There are several variations of the MarketScore spyware program. If your port has been disabled due to MarketScore, but you were not able to find the RelevantKnowledge or mrkscr.exe/mkscr.exe programs, view the firewall exceptions (step 4). Look for anything out of the ordinary in the exceptions. If something is found, highlight the item by clicking on it and choose the Edit button. This will give you the path to the program. After you know the path for removal purposes, remove the exception from the firewall.

After completing these steps, you can request a scan of your computer to be put back on the network here.  Within 24 hours, your computer will be scanned, and if secure, will be put back on the network. 

If you have any questions or concerns, please contact the ITS Help Desk.

Return to Security Center

Last Updated: 04/24/2009