1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Unknown Dropper.Swicer.A

Discussion in 'Virus & Other Malware Removal' started by Pendragon, Apr 7, 2004.

Thread Status:
Not open for further replies.
  1. Pendragon

    Pendragon Thread Starter

    Joined:
    Jul 21, 2002
    Messages:
    37
    First I'd like to say that I have read the thread about how to remove this virus from \System Volume Info\... however, you wouldn't have thought I had it if it weren't for the persistent avg warnings.

    I have up-to-date versions of Spybot and Adaware and there's doesn't seem to be anything abnormal in the registry at first glance yet it still persists. I'm really quite stuck as to what to do next to rid my machine of this.

    My HijackThis log is as follows:

    Logfile of HijackThis v.1.97.7
    Scan saved at 12:25:20, on 07/04/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running Processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\System32\winlogon.exe
    C:\WINDOWS\System32\services.exe
    C:\WINDOWS\System32\lsass.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\spoolsv.exe
    C:\PROGRA~1\AVG-6\avgserv.exe
    C:\WINDOWS\System32\DRIVERS\CDANTSERV.EXE
    C:\WINDOWS\System32\CTSvcCDA.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
    C:\Program Files\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave Activex Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38018.1514814815
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab


    There's nothing hazardous here so far as I can see. Any suggestions as to how to remove are greatly appreciated.

    Thanks guys!

    Pen.
     
  2. Nok1

    Nok1

    Joined:
    Feb 15, 2004
    Messages:
    826
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/218186

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice