How do you get rid of Trojan horse Downloader Swizzor AF?

Answer 1

I removed Swizzor

If you're situation is anything like mine, Swizzor will be deep within C:\System Volume Information - you'll notice that a) it doesn't show up on explorer and b) that some antivirus programs (mine is AVG) do not look into the directory when they are scanning.

This is because System Volume Information it is a system folder. It deals with previous system restores and is apart from being rather large, it is access restricted. Therefore, in order to allow a scan, steps must be taken to allow access to this folder. I did some research and took the following steps. Hopefully they will work for you:

NOTE: This is for XP users, if operating a different Windows version you may have to adapt!

1) To show System Volume Information on explorer

a) First goto Start> Settings> Control Panel> Folder Options.

b) In Folder Options, click on the View tab.

c) Under the heading "Hidden files and folders", check "Show hidden..."

d) Uncheck the checked box a few items down "Hide protected operating system files"

2) To allow access to the System Volume Information directory

a) Goto My Computer> C: drive> (you'll notice that System Volume Information has appeared)

b) Right click System Volume Information and click on "Sharing and Security"

c) Check the "Share this folder on the network" box. Access is now enabled.

3) To remove Swizzor

a) Run your Antivirus Software and setup a custom scan.

b) Select System Volume Information to scan.

c) Voila!

With any luck you should be Swizzor free now! Remember to uncheck "Share this folder on the network" if you have a network; and recheck "Hide protected operating system files" if you have kids or a cat.

THOM