Hi,
I am new to this forum. I have a problem I don´t know what to think of...
I installed Norton Internet Security 2009 some weeks ago, the 14th of febr. When I did my first full system scan NIS found a trojan, which it also removed. I have a Hewlett-Packard computer, and the file NIS removed turned out to be this one, c:\hp\recovery\wizard\SWR_wizard.exe,which is a hp-file! The first two entries in Norton Community Watch (before the entry about this trojan) reads "suspicioud Vundo" and pointing to the files c:\hp\drivers\printers\deskjet\program files\Hewlett-Packard\hp deskjet assistant\bin\components\necko.dll AND c:\hp\drivers\printers\deskjet\program files\Hewlett-Packard\hp deskjet assistant\bin\components\gkgfxwin.dll. These files were not removed, though.
I tried to restore the wizard-file, but every time Auto Protect removed it again (now - as it seemed - quite sure of it being a trojan, not just suspicious of it). Why did NIS see that file as a trojan? I found out that this necko.dll really can be a virus/trojan if it´s found in the wrong place... and I suppose this one is? It´s originally a part of Mozilla/Netscape? Just before I installed NIS 2009 I took away Netscape (I still have Mozilla Firefox). I have not been in contact with HP about this wizard-file, it has always been there, and I suppose i will need it to repaire software on my pc, n´est- pas?
I also found a folder - empty - called Connection Wizard, and as I understand that could also be part of a trojan, according to Symantec (I don´t remember which, though). There is one more Connection Wizard folder, whichi s not empty, and I think that´s legitimate, or?
I would very much appreciate any help I can get!
Grissla :-)