Trojan.Stwoyle?
 

I got this Trojan a few days ago, detected by my virus scanner, and deleted. But it keeps coming back, with a different number in the name each time, and is deleted again. If I leave my computer on at night I end up with 7-12 of these windows open saying Norton has deleted this virus. Anyone have any idea how to rid myself of this thing? I ran my spyware checkers and antivirus and can't get anything fixed.. :confused:

http://munku.onestop.net/virus.jpg

Thanks for your help guys!

http://securityresponse.symantec.com...n.stwoyle.html

Looks like you need to go into the registry for this one.

SARC doesn't mention it, but prior to the steps listed on the site there, you're gonna want to boot into safe mode. It'll only start system critical processes, which means that you'll be pretty much guaranteed the virus isn't in memory.

Well, I'm still getting the virus and I dont have any of those keys in the registry.. =[

Run your computer in safe mode (upon restart, hit F8 til the option appears).
Run your virus/spyware scans now. There could be a part of the virus that tells the antivirus program that it was removed but it really wasn't. Running your computer in safe mode gaurantees the virus will not be loaded as only the basic drivers are run during safe mode.

Ran into a bad one like this last week...used AVG and scaned the WHOLE PC...it found seven occurancaes of it in the recovery files...

so check them and be sure you turn off recovery before you start...sometimes they are in the protected system files..VG

Yes, you must turn off system restore and get all the updates for your spyware and anti-virus. Then reboot and TAP F8 continuosly til it brings up the screen to chose how to start. Choose SAFE MODE and run your spyware and anti virus. After it cleans the machine, reboot to normal mode, make sure the culprit is gone, then make sure you re-enable system restore. By turning off sys. restore, the trojan can't store itself in memory and re-install on the next boot cycle.
Good luck .