I have got a trojan horse virus on my computer what do I do?

Question

I have tried AVG scanning and also ad-aware scanning what can I do to get rid of it?
HELP PLEASE........

Thanks

I am trying to get rid of it!

Answer 1

Use a good antivirus program. Here you have some free options. I recomend Avast.
http://askcomputerexpert.ws43.com/download/

Answer 2

First of all ad-aware is not equipped to get rid of viruses or Trojans. It is primarily an anti-spy, anti-adware program. Are you saying that AVG was not able to find the Trojan or that it found it and cannot get rid of it. You will have to be clearer. How did you discover you had the Trojan. If indeed you discovered it via an AVG scan , then AVG will usually ask whether you want to delete, repair or quarantine the Trojan. In a lot of cases, they will usually recommend that the virus or Trojan be quarantined. However, within their program, you can open the quarantined folder and delete the files from there if you wish.. If you have to go back and do the scan again and look carefully at your options at the end of the scan. My other advice would be to install a program such as Webroot's spysweeper and to run that. It is specifically known to get rid of Trojans when all else fails.

Answer 3

All of these are ones that I personally use and all are free.

AVG Removes I-Worm/Stration · BackDoor.Generic3.GBB and .GBC · Worm/Generic.FX · Exploit.WMF
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

Spybot - Search & Destroy detects and removes spyware, a relatively new kind of threat not yet covered by common anti-virus applications. Spyware silently tracks your surfing behaviour to create a marketing profile for you that is transmitted without your knowledge to the compilers and sold to advertising companies. If you see new toolbars in your Internet Explorer that you haven't intentionally installed, if your browser crashes inexplicably, or if your home page has been "hijacked" (or changed without your knowledge), your computer is most probably infected with spyware. Even if you don't see the symptoms, your computer may be infected, because more and more spyware is emerging. Spybot-S&D is free, so there's no harm giving it a try to see if something has invaded your computer.
http://www.safer-networking.org/

http://superantispyware.com/
SUPERAntiSpyware is the most thorough scanner on the market. Our Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware that other products miss! SUPERAntiSpyware will remove ALL the Spyware, NOT just the easy ones!
Easily remove over 100,000 pests such as SmitFraud, Vundo, WinFixer, SpyAxe, SpyFalcon, WinAntiVirus, AntiVermins and thousands more!
Make sure after you download any of these, that you update them.

If the trojan is still there, it may have to be removed in safe mode.
For Windows XP

If the computer is running it is best to shut down Windows and then turn off the power.

Begin by first clicking on the Start Button and then click on Turn Off Computer.

Now click on the Turn Off red colored icon to shut down your computer system.

It is best to wait between 15 to 30 seconds before you turn your system back on.

Turn on your computer and start tapping the F8 key on your keyboard.

Some Computers may display a keyboard error message if you begin tapping F8 too quickly.

Restart your computer again and begin tapping the F8 key a brief second or two later.

When the Windows Advanced Options Menu appears, Choose the Safe Mode option and hit Enter.

Windows will now boot your computer up in Safe Mode.

Answer 4

Greeting....................

AVG will not remove or see a lot of Trojan Viruses, the same with Ad-Aware - both of which I run - once a week I go to the link below & do a on-line scan, this program find trojan that AVG & Ad-Aware miss & removes them, if it cannot remove the trojan - say because is in outlook express then it tell you the path of the trojan so you can remove it yourself.

( most trojan I have got come by E-mail, AGV does not stop them or remove them)

OK

Answer 5

I had the same problem with a trojan and AVG wouldn`t find it or get rid of it. I downloaded a 30 day trial spyware remover (cant remember which one, Got from tucows.com) and tried that. It found it ok but wouldnt delete it unless i bought the product. I didn`t buy it but ran AVG again and it found and deleted it so i can only assume the anti spyware i tried must have tagged it or something. Anyway you could try it. Good luck. p.s if anyone can confirm my theory please let me know. Cheers.

Answer 6

avg isnt as good as some make it out, but there are 2 online scans that should get rid of it for you try these

http://www.pandasoftware.com/products/activescan.htm

http://housecall.trendmicro.com

Answer 7

RegSweep is the latest in PC error diagnostic and repair. RegSweep can do a complete scan of your entire file system and registry in under 2 minutes! All corrupt files, paths, and registry keys will be analyzed and automatically repaired so that your PC functions just as when you first purchased it, Guaranteed. Plus, the download is Free!


http://onceinlife.regsweep.hop.clickbank.net

Answer 8

Each trojan horse virus has different files that need to be deleted, entries in registry that need to be removed. First you need to find out the name of it, after that search using google for removal instructions. Read them carefully.First you should look for instructions from AVG. If it is not available then use instructions from symantec to remove registry entries. After that use ccleaner to delete remaining files from computer.

Answer 9

It has to be a software running in the background that and feeding info to the internet. I would scanning using the freeware Adaware and set up a firewall and watch carefully what software wants access.

When you discovery one then block it. Search on yahoo for the software name and see if it is a known trojan then delete it.

Answer 10

I agree with 'great one'. Use the free online scan at http://housecall.trendmicro.com/

Set it running and if it's the first time you've used it go away and make yourself a brew. Can take a wee while. Pretty thorough though.

Answer 11

This procedure works for all Malware. Use any AntiVirus or AntiSpy program you choose. The two programs listed here should remove your Trojan.

Download and Update Ewido (now called the AVG Antispyware). Do not run:

http://www.ewido.net/en/download/...

Download AdAware SE and update. Do the setup. Do not run:

http://www.filehippo.com/download_ad-aware/

AdAware SE Setup:

1. Select "use custom scanning options" then select "customize". Make sure the following options are enabled: "scan within archives," "scan active processes," "scan registry," "deep scan registry," "scan my IE favorites for banned URLs," "scan my Hosts file."

2. Select the "tweak" option. Under "scanning engine," make sure "unload recognized processes and modules during scan" is enabled. Enable "scan registry for all users instead of current users."

3. Under "cleaning engine" turn on "always try to unload modules…," "during removal unload explorer and IE if necessary," "let windows remove files in use at next restart," and "delete quarantined items after restoring."

4. Use the "select drives and folders to scan" option to ensure that your entire hard drive is scanned (if you have more than one hard drive, scan all of them (of course, do not include floppy and CD/DVD).


TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH YOUR ANTI-VIRUS PROGRAM.


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode. DON'T FORGET TO RESET HIDDEN FILES AND FOLDERS.


NEW RESTORE POINT.

The RESTORE POINTS may be infected with the Malware and cannot be used.

HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.


ADDITION INFORMATION ABOUT TROJANS:

There are Trojans that fall into the Smitfraud family. These require the use of a specialized program for removal. Here are two sites that specialize in removing these:

http://www.internetinspiration.co.uk/roguefix.htm

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php