Regular Visitor
robren
Posts: 7
Registered: ‎06-25-2008
Accepted Solution
Removal of Downloader.swif.c

I'm running Endpoint Protection and Symantec continually pops up that it has quarantined the file downloader.swif.c. I've updated the virus definitions, run a full scan several times, run Windows Defender and Ad aware but the problem continues. It seems to recreate itself ever couple seconds and the only temporary relief is a reboot. 

 

Went to chat support yesterday but was only offered another $99 service with no advice on getting rid of this virus.

 

Thanks,

 

 

Moderator
Allen_K
Posts: 1,364
Registered: ‎04-09-2008
Re: Removal of Downloader.swif.c

Endpoint Protection is one of Symantec's enterprise products.   

 

The Norton community is here is targeted for Norton Consumer Products.   Symantec does have an enterprise community located at:

https://forums.symantec.com/

 

With the specific endpoint area you are seeking located here.

Allen
Regular Visitor
robren
Posts: 7
Registered: ‎06-25-2008
Re: Removal of Downloader.swif.c

I posted here because Symantec offered no help. I was hoping that someone here could.

 

Thanks anyway

Regular Contributor
4runner
Posts: 98
Registered: ‎06-20-2008
Re: Removal of Downloader.swif.c

it sounds like somethings working if it keeps quarantining downloader.swif.c but it sounds like you are already infected with something else.........

 

if you haven't already boot to safe mode and run a full scan.....   i don't know how endpoint distributes its definitions... or how to tell you if they are up-to-date...  or if the intelegent updater would be of use to you...  i think endpoint protection is the corporate version of antivirus but its unclear to me which if any of the norton tools would work with it....

 

have you tried the forum the moderator told you to go to?

Regular Visitor
robren
Posts: 7
Registered: ‎06-25-2008
Re: Removal of Downloader.swif.c

The file definitions were updated yesterday. I've booted up in safe mode and ran the antivirus program, and posted on the Symantec forum.

 

Last night I ran a system restore but still have the virus. :smileymad:

Tony_Weiss
Posts: 7,398
Topics: 505
Kudos: 1,458
Solutions: 280
Registered: ‎04-07-2008
Re: Removal of Downloader.swif.c
I would recommend that you follow the steps laid out in the Downloader.swif.c removal page as they are listed. From your post, it is clear that you've done some of the steps, but possibly not all together. Please let me know if I'm mistaken. Thanks!
Tony Weiss
Norton Forums Global Community Manager
Symantec Corporation
Regular Visitor
robren
Posts: 7
Registered: ‎06-25-2008
Re: Removal of Downloader.swif.c
I did not disable system restore prior to running a full scan. From what I read on the instructions, that step pertained to Windows ME/XP and not Vista. However, I will try it and see what happens.
huwyngr
Posts: 19,150
Topics: 911
Kudos: 2,360
Solutions: 338
Registered: ‎04-13-2008
Re: Removal of Downloader.swif.c
[ Edited ]

robren wrote:
I did not disable system restore prior to running a full scan. From what I read on the instructions, that step pertained to Windows ME/XP and not Vista. However, I will try it and see what happens.

 

I think you will find that system restore functions in VISTA also (maybe even more so) works to in effect stop you from changing system files by immediately restoring them from its "reserve store" so if malware damages that then the malware is restored too -- which fits in whih what you describe.

 

Do try again doing exactly what the document says then if that does not work someone can help you knowing exactly what you have done.

 

Good luck.

Message Edited by huwyngr on 06-26-2008 11:37 AM


Hugh
Newbie
kkim5555
Posts: 1
Registered: ‎06-30-2008
Re: Removal of Downloader.swif.c
I am having problem completely removing this downloader.swif.c Trojan. My symantic virus scanner detects about 20-30 downloader.swif.c files around the same time everyday in the morning and says it has been quaranteened successfully. I followed the instructions on the symantic website exactly. After I disabled the systems restore and after full scan, my virus scanner detected additional 400 downloader.swif.c files the it quaranteened successfully and deleted. But this was all no use as it keeps detecting new downloaser.swif.c files the next morning around the same time. What else can I do to completely remove this Trojan file? Please help!  
Regular Visitor
robren
Posts: 7
Registered: ‎06-25-2008
Re: Removal of Downloader.swif.c

I still haven't gotten rid of it completely. I'm having the same symptoms.

 

For no apparent reason, I'll receive a notification that the virus has been quarantined...repeatedly for several minutes or until I reboot. Usually only a couple instances appear on a reboot.

 

The files being quarantined are .TMPs, and I think (I'm at work and don't have the path in front of me) they are located at C:\users\Bre....\appdata\local\temp.

 

I had about 4500 .TMP files in that directory at one time and couldn't delete them. I think Symantec finally recognized them all as the Downloader.Swif.C virus and quarantined them as they are no longer there. 

 

Frustrating isn't it?