My Bitdefender   • 0 Shopping Cart   Facebook Twitter Google
Plus   14658 bytes packed (Trojan.LopAd, W32/Swizzor.LN@dl,
Win32/TrojanDownloader.Swizzor )   It is possible to have
multiple instances of Internet Explorer in memory.  It is also
possible to have strangly named directories under %AppData%
(\Documents and Settings\%UserName%\Application Data) containing
many downloaded malware files with .exe extension. Another
symptom is to have malware files under %TMP% with names
bis[randomnumber].exe (like c:\temp\bis12.exe).  Removal
instructions:  Please let BitDefender delete your files.
Analyzed By  SАndor LUKаCS, BitDefender virus researcher
Technical Description:  The trojan determines the path of
Internet Explorer using the system registry. After that, the
trojan checks, if it is running already in the process context
of Internet Explorer. If not, then a new instance of Internet
Explorer is created and the virus loads and executes itself
under the Internet Explorer process as a library.  The trojan
dow