The New Version of Swizzor Trojan Not Detected Yet and How to Remove it Manually

Today I found new version of  trojan (Swizzor Trojan) the damage that Trojan do is slowing down IE and maybe it send personal information to remote server, therefore it can be a real threat to your privacy.

Swizzor can also try to download and install malicious software such as adware.

How did I detect it :

I saw 2 IExplore.exe processes is running without seeing any IE windows even if I closed any of them it will run again saw I tracked whitch software is running IE without any permission and I found it in Startup tab at Msconfig the file name is : admin dumb.exe with other files @ “C:\Documents and Settings\”Administrator”\Application Data\Extra 16″ .

I copied the folder that have the trojan and uploaded the files to virus total some of them have been detected from kaspersky but admin dumb.exe not detected from kaspersky,Mcafee,Symantec,Nod32,Sophos,….etc. to see the result from virustotal.com Click Here .

How to remove Swizzor Trojan Manually :

1- Open Msconfig from Start>Run and click on startup tab the uncheck from admin dumb.exe .

2- Go to admin dumb.exe path like “C:\Documents and Settings\”Administrator”\Application Data\Extra 16″ and rename the folder that include trojan file .

3- End admin dumb.exe process from Task Manager if its running.

3- Restart your PC then go back to the folder that you renamed before and delete it with all contects.

4- Your PC is clean now, Enjoy.

For any help please comment or contact us.