Know Your Malware: Swepdat Removal

Swepdat is a dangerous trojan carrying destructive payload. Once executed, the parasite disables some Windows components and essential tools including the Registry Editor, the Task Manager, System Configuration Utility and Windows File Protection. Then Swepdat attempts to delete critical files of some installed antiviruses and firewalls like Norton AntiVirus, McAfee VirusScan, Zone Alarm and Kaspersky Anti-Virus. It also blocks access to popular security-related web sites. After a while, the trojan deletes all executables and library (.DLL) files located in main Windows folder, default system directory and drivers folder. This destroys the system and prevents it from loading on next startup. Swepdat automatically runs on every Windows startup.

Related files: wupdates.exe, exploit.htm, nerror.dmp

Swepdat properties:
Hides from the user
Stays resident in background Remove Swepdat, removal instructions

Linked by shanmuga Sunday, 25th December 2005 9:10PM