Picked up this virus, along w/spidersearch toolbar, and all the crap that comes with that. Norton found the virus, but couldn't do anything about it. Got Spybot, and that got rid of most of the spidersearch stuff--which was also I-Lookup--Got hijack this and read tutorial, and got rid of anything else I could find that was suspicious. But never *did* find syscpy.exe anywhere, even though I followed Norton's instructions...and did search, plugging in "syscpy" and found it nowhere...and now Norton scan doesn't show backdoor.hogle virus...I know this thing didn't just disappear...any advice? *(Instaled zonealarm also...trying *real* hard not to have this happen again) Thanks for any help, Duckfeet

hey DUCKFEET, are you symptom free? did you do follow Symantec's (Norton's) instructions as closely as possible. Sometimes Symantec's fix instructions don't work quite as advertised by they still work in the end, so don't sweat that one too much. you're right, it didn't just disappear...sounds like you ate its lunch. maybe someone with hands-on exp with backdoor.hogle could lend DUCKFEET better wisdom. LATER aosclay

I too recently acquired the "backdoor.hogle" trojan. I didn't find the "syscpy.exe" either. After cleaning my system (WinMe) and disabling/reenabling system restore rebooting and doing an online virus scan all was gone. The trojan maybe hiding in your _Restore folder.

Yep, I did do what the Symantech page suggested, except like I said, when I got to the the Registry editing part, there was nothing remotely looking like syscpy.exe, and search of "syscpy" by itself found nothing in my files, hidden included, and though I found quite a bit of stuff that needed removing with "Hijack This" and the updated Spybot, but anyway, it got me finally to start being careful, and put up a firewall, so that's cool. Thanks for help

It sounds as if Syscpy.exe is added by the adware like Spidersearch and ilookup. Norton flags the file syscpy.exe as a trojan but if you get rid of the adware this file can no longer be created. The short of it is if you ran spybot and the norton scan is now clean syscpy.exe is gone.

I found this virus with the filename ii22.exe instead of syscpy.exe. Hope this helps

Couldn't find ii22.exe either. I'm thinking TekDiva got it right--the *updated* Spybot got rid of all the adware, I-Lookup, Spidersearch, etc, and since then, no more Backdoor.hogle showing up in NAV scan. I also looked where it had been sitting in the Norton logs, and it was in Temp Internet files as syscpy1(1).exe, and I had by then removed all temporary Internet files, and it was also sitting under documents and settings/me/local as ii2.tmp, and--following the advice in the Hijack This tutorial--I had removed all my .tmp files, so looks good. Appreciate all the help.