trojan.swoyle Virus Help

[fazzi98]

Hi everybody,

I've been having trouble recently because my norton antivirus keeps popping up with this message :

http://s1.simpload.com/09104323ab3c68bd5.jpg

every few hours. I've followed these directions

http://securityresponse.symantec.com/avcenter/venc/data/trojan.stwoyle.html

but I not seem how to get rid of this virus. When I ran the scan it didn't even show up.
Can anyone help me or lead me in the direction of help to get rid of this? Thanks in advance.

 

[oggywan]

There is a utility called filemon.exe which you can download for free from

http://www.sysinternals.com

It allows you to discover which program accessed your filesystem (or part of your filesystem, with proper filtering) and will allow you to discover with EXE/COM is responsible for dropping this DLL.

You most likely have a piece of Adware on your machine that is continuously trying to drop this file... use filemon to figure out what.

You may also want to try to run anti-spyware programs like AdAware or Spybot and see whether those 2 can find something malicious on your system.

I presume you have tried scanning your entire drive for viruses?

However... this is the Symantec Antivirus forum. I believe that there may be better suitable forums on TEK that you can post this question.

Either way, I hope you find a solution.

 

[fazzi98]

i downloaded that program and saved my log from right before i got the pop up again .. should i post the log here because i really cant tell what program/adware it is and how to get rid of it

thanks for the reply!

 

[oggywan]

Maybe on the Spyware forum?

http://www.tek-tips.com/threadminder.cfm?pid=760