trojan remover ?

Question

on my daughters comp, there is Mcafee, AVG, spybot and Nukerxt.. the only one picking up 3 trojans, is Mcafee.. i can't clean, delete or Quantine.. soo i'm thinking the only way 2 remove them, is 2 delete Mcafee : ) which i don't trust anyways.. any ideas anyone ? the comp is running a little slow as is..

i want 2 thank all of you 4 taking time 2 help me : ) good advice, lots of infomation and things 2 think about.. i put all answers in favorites..and gave thumbs up : ) i find it difficult 2 choose best answer.. wan, when i clicked onto filescab, site, it kicked me off the comp.. oddball, the last 2 sites in your answer, said pages can't be displayed.. but you two, really gave me your all in all.. again i thank everyone : ) my daughter has ME windows, so ewido can't be downloaded.. a change will be made on that.. either XP or windows 2000..

Answer 1

chances are that if only McAfee is picking them up, then your McAfee database is probablycorrupted. I'd contact McAfee for this one.

Answer 2

2

Answer 3

You shouild never run 2 anti-virus apps at the same time as you are doing with AVG and McAfee, they will conflict and leave you with less protection not more!

Remove one of them, BTW, AVG has absolutly horrible virus detection rates in recent tests, the most popular free anti-virus, AVG, was only able to detect about 82% of a very large sample of viruses.
http://www.virus.gr/english/fullxml/default.asp?id=82&mnu=82

The top 25:
1. Kaspersky version 6.0.0.303 - 99.62%

2. Active Virus Shield by AOL version 6.0.0.299 - 99.62%
http://www.activevirusshield.com/antivirus/freeav/index.adp?

3. F-Secure 2006 version 6.12.90 - 96.86%

4. BitDefender Professional version 9 - 96.63%

5. CyberScrub version 1.0 - 95.98%

6. eScan version 8.0.671.1 - 95.82%

7. BitDefender freeware version 8.0.202 - 95.57%
http://www.bitdefender.com/PRODUCT-14-en--BitDefender-8-Free-Edition.html

8. BullGuard version 6.1 - 95.57%

9. AntiVir Premium version 7.01.01.02 - 95.45%

10. Nod32 version 2.51.30 - 95.14%

11. AntiVir Classic version 7.01.01.02 - 94.26%
http://www.free-av.com/

12. ViruScape 2006 version 1.02.0935.0137 - 93.87%

13. McAfee version 10.0.27 - 93.03%

14. McAfee Enterprise version 8.0.0 - 91.76%

15. F-Prot version 6.0.4.3 beta - 87.88%

16. Avast Professional version 4.7.871 - 87.46%

17. Avast freeware version 4.7.871 - 87.46%
http://www.avast.com/eng/avast_4_home.html

18. Dr. Web version 4.33.2 - 86.03%

19. Norman version 5.90.23 - 85.65%

20. F-Prot version 3.16f - 85.14%

21. ArcaVir 2006 - 83.44%

22. Norton Professional 2006 - 83.18%

23. AVG Professional version 7.1.405 - 82.82%

24. AVG freeware version 7.1.405 - 82.82%
http://free.grisoft.com/doc/avg-anti-virus-free/lng/us/tpl/v5

25. Panda 2007 version 2.00.01 - 82.23%

Just something to keep in mind when you decide wheather to drop AVG or McAfee.

..................................................... Now for your current problem with the trojan, try a free online scan with Ewido (excellent with trojans) at
http://www.ewido.net/en/
But scan and remove while your computer is in safe mode as nothing can be deleated while it is in use by the computer. Safe mode loads just the bare minimum (i.e. no drivers) for Windows to operate. This allows much more malware to be sucessfully deleated.

Good luck.

Answer 4

Trojan Removal Procedure.

Removing infections from your computer is never as easy as aquiring them. Malware infections are not meant to be removed, so, it takes TIME and PATIENCE to get rid of them. ONLY RESORT TO A REFORMAT AFTER ALL ELSE FAILS TO REMOVE THE INFECTION.

This procedure works for all Malware. Replace the Ewido and AdAware SE programs with any AntiVirus or AntiSpy program you choose.


Download and Update Ewido (now called the AVG Antispyware). Do not run:

http://www.ewido.net/en/download/...

Download AdAware SE and update. Do the setup. Do not run:

http://www.filehippo.com/download_ad-aware/

AdAware SE Setup:

1. Select "use custom scanning options" then select "customize". Make sure the following options are enabled: "scan within archives," "scan active processes," "scan registry," "deep scan registry," "scan my IE favorites for banned URLs," "scan my Hosts file."

2. Select the "tweak" option. Under "scanning engine," make sure "unload recognized processes and modules during scan" is enabled. Enable "scan registry for all users instead of current users."

3. Under "cleaning engine" turn on "always try to unload modules…," "during removal unload explorer and IE if necessary," "let windows remove files in use at next restart," and "delete quarantined items after restoring."

4. Use the "select drives and folders to scan" option to ensure that your entire hard drive is scanned (if you have more than one hard drive, scan all of them (of course, do not include floppy and CD/DVD).


TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH ADAWARE SE. THEN DO IT WITH EWIDO.

NOTE: Let AdAware complete its scan. Sometimes AdAware will be unable to remove everything that it finds and will prompt to be allowed to try again after restarting. If that happens, when the scan finishes restart immediately and allow the scan to finish.


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode. DON'T FORGET TO RESET HIDDEN FILES AND FOLDERS.


NEW RESTORE POINT:

The RESTORE POINTS may be infected with the Malware and cannot be used.

HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.


ADDITION INFORMATION ABOUT TROJANS:

There are Trojans that fall into the Smitfraud family. These require the use of a specialized program for removal. Here are two sites that specialize in removing these:

http://www.internetinspiration.co.uk/rog...

http://siri.urz.free.fr/fix/smitfraudfix...

Answer 5

im sure deleting wont help at all dont delete the software coz later u wud have problems you actually dont nned 2 wory coz they trojan is now kept in quarantine meaning isloated from rest of the computer

Answer 6

You could try moosoft. It is only a 30 day trial.

Answer 7

try avg, and adaware they are really good

Answer 8

If you secure your computer and maintain it, use smart choices in the programs and habits you use, your computer will last longer than the 3 - 4 years it's designed to last.

Let's start from the outside in -

Router
This works like a hardware firewall. The router doesn't respond to most of the "are you there?" tactics hackers use. If some hacker's scanning for victims and manages to find you despite the security ... they'll see the router not your computer.

If it's a wireless router - secure it, secure it, secure it! Change the admin password. Put an encrypted password to connect. Look up all the ways to secure your particular router. Write down the settings.

Computer

Firewall
You need one. Yes, you do. And no, Microsoft's is NOT enough. Get Zonealarm, it's free.

Browser
This is how most people see the internet. There's a high chance you're using the "blue e" aka Internet Explorer. This is not a good habit as IE hasn't been worked on (beyond fixes to problems people complain loudly about) in YEARS. It's big, slow, out-of-date, allows all kinds of nasties in, insecure, inflexible, and a major target for hackers.

Get Firefox - it's also free, sleek, faster, more secure, blocks pop-ups, is very customizable, easy to use, and once you start using tabs... you'll get frustrated with IE.
There are also very simple ways to NEVER see a banner / iframe / image ad again - it's an add-on to Firefox called Adblock Plus. I also recommend the automatic filter for Adblock - Filterset.G Updater. All free

Other programs that find stuff on the net (file sharing, instant messengers) are also a security risk. I don't know what you have / use, so I'd recommend looking up "securing thenameoftheprogram" on google.

Get and install all updates to all your programs - Windows, your browser, your anti-virus, your anti-spyware, your router, you name it.

Ok, now we get to do the clean up part:

Anti-virus
Viruses can look through your computer, send your info to nasty people, fill up your hard drive, fry your computer... the list is endless.
I recommend AVG

Anti-spyware
Spyware / Adware / Malware are under the same category. Spyware watches what you do and sends the info to someone else. Adware shows you pop-ups regardless of your security settings. Malware is all of the above and more.
Ad-aware, Spyware Blaster and Spybot Search & Destroy are my recommendations and the Uninstall programs you don't use.

Download "CCleaner" to find the files that are just clutter (temporary files, browser histories, browser caches, etc)

Get into the habit of defragging and checking your disk for errors (both are options under "My Computer", right click on your hard drive, choose "properties", click on the "tools") twice a month. You may want look up how to automate this through Scheduled Tasks.

Protect your computer from yourself and others:

Make each user on your computer their own Windows profile - and only give them (and yourself) limited accounts.
The only time you need full (admin) access is to install programs.

Make each person password protect their account.

Get into the habit of changing ALL your passwords once a month. Don't write down your passwords in a place others can find / use. Make passwords that use both numbers and letters and that are hard for anyone else to guess - I recommend keyboard patterns.

Do yourself a huge favour and get a UPS - uninteruptable power supply. This goes one step beyond a power surge protecter and gives you time to shut down the computer, saves your router, etc from losing their settings or being fried by power fluctuations.

I have a legal and moral obligation to keep my pc 100% clean. And I use an antivirus/spyware program out of Beijing, China.
http://www.filseclab.com -- This program has kept me 100% clean for the past nine years.
Twister Anti-Trojan Virus is absolute state of the art technology that has a real time scanner
that really works. Will scan your memory on start up and continues to run in the background
while you use your pc. Plus this software uses very little CPU resources.
Some examples of how great this program is. If you open a webpage and there is a virus or
spyware embedded in the webpage the scanner will catch the virus in a second and clean.
If you download any type of file including music or a zip file and there is hidden embedded
virus in the file the download will stop and the Twister will clean and stop the download.
I had an experience where the software I download the company used another installer other
then their own. The installer had hidden embedded virus in the installer program. Twister found it and cleaned, plus ended the installation and traced it back to the installer software.
(I wrote the original software company and they now use their own installer).
What is really great is that you only pay a small one time fee for life. You will get frequent
large signature updates,excellent support and they never charge you for any new versions.
There are many other features as auto downloads, and the ability to fix all type of problems with your registry or windows.
The chinese don't believe in the annual fee or paying of new versions like most of the other software companies want to be paid over and over for the original purchase.

I use Zone Alarm free firewall (http://www.zonealarm.com). As a backup even though I have ADSL. I use ewido antispyware / malware. www.grisoft.com --Ewido was purchased by AVG. Ewido is free and will protect you from rogue dialers.

Also,you can use:

free
anti spyware blocker
spybot search & destory
spyware blaster
http://www.download.com

free
Windows Defender
http://www.microsoft.com

free
anti spyware firewall<< http://www.download.com/

15day free try
ZoneAlarm internet security suite
all in one firewall / anti virus/ anti spyware
no1 auto virus killer that will kill off a virus
as the virus try to download on to your system
when you open your explorer and search on the net
there are virus on websire that will auto download
this all in one firewall/anti virus/anti spyware
will kill the download link fast and auto kill the virus
http://www.zonelabs.com/

not free
ad-aware se professional 1.06 /ad-watch
http://www.lavasoft.com/
ad-watch block's all pop ups

not free
ewido anti-spyware 4.0
http://www.grisoft.com/

not free
spyware doctor
http://www.pctools.com

not free
XoftSpy 4.22 is the Latest and Most Advanced Spyware Detection and
pop up spyware
Spyware
W32/Spybot
Browser Hijackers
Adware
Malware
Keyloggers
trojans
worms
back door trojans
Malicious mobile code
MALICIOUS SCRIPTS
toolbar trojans that dont show up

download xoftspy422 and install it then run it stop the scan and click on scan settings tick every box and click on where it says>>click here to select a folder then tick the (c) thats your hard drive if you have 2 hard drives tick the 2 of them then click ok then click start when the scan is done click on remove tab.
http://www.paretologic.com/

all of them are the best among the best
Before attempting to remove malware you must switch off System Restore as back up files will be hiding in there, and it will just restore itself. Go to Start - programs - accessories - system tools - system restore.
Run Avast and Ewido in Safe Mode. To get into Safe Mode repeatedly press the F8 key after the bios screen loads but before Windows loads. You'll know if you made it because the screen will be at 800 x 600 and your pc will be slow.

Then beef up your security. Its easier to prevent malware getting on to your sytem in the first place rather than trying to remove it.

The Windows firewall doesn't stop malware on your pc from dialling out. Either of these firewalls are free for personal use and stop unwanted incoming and outgoing traffic. You choose which programs are allowed to access the internet. They are both fairly easy to use and updated regularly.
http://www.zonelabs.com Zone Alarm firewall
http://www.kerio.com Kerio firewall

Shields Up security site, check your firewall works
https://www.grc.com

http://www.mozilla.com/ Firefox web browser
http://www.opera.com/ Opera web browser
Instal both these web browsers, turn off javascript on one and use that browser for vising unknown websites. They don't support Active X so thats one less way for problems to get on your pc.

Winpatrol is a handy utility that tracks cookies on your pc and stops unwanted changes to your startup folder.
http://www.winpatrol.com

Spywareblaster works with Internet Explorer and Firefox. It won't uninstall spyware that is already on your pc, but it will prevent hijacks and other malicious changes to your browser.
http://www.javacoolsoftware.com...

http://www.siteadvisor.com -Site Advisor warns about malware on sites you are about to visit.

http://www.avast.com - Avast Antivirus

http://www.trendmicro.com/vinfo/... - Trend Micro online virus guide
http://housecall.trendmicro.com/... - Trend Micro PCillin online scan

http://www.ewido.net - Ewido anti trojan

Ad-Aware SE Personal anti adware
http://www.lavasoft.com

Spybot Search and Destroy anti spyware
http://www.safer-networking.org...

http://spywarewarrior.com/rogue_anti-spy... - The Spyware Warrior site identifies fake anti spyware programs.

http://www.bitdefender.com -BitDefender can be used as a second, on demand anti virus.

For online AV scan, try the websites below:
GFI E-mail Security Testing –
http://www.emailsecuritytest.com/...
Port Scan Security Check -
http://www.sdesign.com/securitytest/inde...
Shields UP! -
https://grc.com/x/ne.dll?bh0bkyd2...
Sygate Online Services -
http://scan.sygatetech.com/
VMon -
http://home.ahnlab.com/english/...
Panda ActiveScan Security Check -
http://www.pandasoftware.com/activescan...
Online Malware Scan -
http://virusscan.jotti.org
eTrust AntiVirus Web Scanner -
http://www3.ca.com/securityadvisor/virus...
BitDefender Free Online Virus Scan -
http://www.bitdefender.com/scan8/ie.html...
Symantec Security Check -
http://security.symantec.com/sscv6/defau...
For online spyware,malware & trojan scan:
Trend Micro Anti-Spyware For The Web
http://www.trendmicro.com/spyware-scan
X-Cleaner Online Spyware Scanner
http://www.spywareguide.com/txt_onlinescan.html
Spyware Info Online Spyware Scanner
http://www.spywareinfo.com/xscan.php
Ewido-Anti Spyware and Anti Malware Solution
http://www.ewido.net/en/onlinescan
Tenebril Online Spyware Scan
http://www.tenebril.com/scanner/189062_start.php
Trend Micro Free Online Scan
http://www.trendmicro.com/spyware-scan/free_spyware_scan.asp
Microsoft Malicious Software Removal Tool
http://www.microsoft.com/security/malwareremove/default.mspx
Microsoft Safety Live Security Center
http://safety.live.com/site/en-US/default.htm
FutureSoft: Online Malware Scan
http://www.futuresoft.com/products/antispyware/webscan.htm
Free Online Trojan Scanner
http://www.trojanscan.com

Remember to update and run all of you anti malware programs at least once a week.
Maybe you should print off this list and check it once a month...