how to find trojaned files?

Question

someone has been hacking my computer. So I deleted all the bad programs he put in to my computer. I found he installed some kind of program related to trojan. possibly program that download trojan files or program that actually change my files to trojan. I deleted that program right away, but there is possiblity that he did something. Do anyone know how to find trojaned files or know kind of program that find trojan and destroy it?
Thanks.

Answer 1

First of all I hope you have a good firewall and antivirus. Mom_Princess is right the Zone Alarm Free firewall is a good one and user-friendly. As far as free AV, right now Avira's Antivir is getting top marks among the free programs.
http://www.av-comparatives.org/
As far as securing your system, it would take too long to tell you everything to do here, but these sites are a great place to start.

http://www.malwarehelp.org/ check out the articles on the right side of the page.

http://www.spywarewarrior.com/uiuc/main.htm

http://www.pcmag.com/article2/0,1895,1880244,00.asp

Now if you have a trojan, while most current AV's will scan for them, I would suggest a program that specializes in trojan-ware.
These are some good free ones.

http://www.emsisoft.com/en/software/free/

http://free.grisoft.com/doc/avg-anti-spyware-free/lng/us/tpl/v5 (used to be ewido anti-trojan 'til AVG bought it)

Both good programs. Give them a run and see what they find. Run them in Safe Mode, so no third party drivers are loaded, or anything that can keep the programs from deleting infected files.. If problem persists, you might consider reinstalling Windows, or, making a Hijack This log and posting to one of these security forums.

http://forums.tomcoyote.org/index.php?s=572b32d2c94dad98f4de9b22656de510&showforum=27


http://www.castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

You'll have to register (free) and be sure to read the stickies on how to post a Hijack This log.

You can get Hijack This here:
http://www.spywareinfo.com/~merijn/programs.php

What this program will do is scan your system for evidence of malware and create a log file you can post. Just download it and unzip it into it's own folder on your system drive (C). Then when you run the program, choose "Do a system scan and save a llogfile". Save it to your desktop and post it to one of the security sites. When one of the security experts has had a chance to look it over, you'll get an email.

Hope this helps

Answer 2

Reboot into Safe Mode with Networking. That way only files needed to run windows will be allowed to start. To do this reboot. As soon as it starts to load hit F8 repeatly until the next screen appears. Use your arrow keys to choose Safe Mode with Networking. Now go to http://housecall.trendmicro.com/. That scan should be able to find anything bad.

As a double check get HijackThis.

Download HijackThis---http://www.spywareinfo.com/~merijn/programs.php#hijackthis. Run and Save a Log. When you log comes up copy and paste the entire log at http://www.hijackthis.de/ . Analyze your results. You will then get a screen that will tell you if you have any nasty stuff in your computer. Follow instructions to deal with any nasties. CAUTION: This is a very powerful tool. Be careful.

Answer 3

Install some MalWare software such as Windows Defender or Spybot. Once installed, either of these should remove everything harmfull. You should always have something like this installed anyway as it will prevent the same thing happening again.

Good luck.

Answer 4

first of all assign a password to your account and set the files to private. Do the same for the administrative account (entered via safe mode). That should keep your undesired visitor from logging into your computer.

Second..You need an effective anti virus
Warning: Only one antivirus product should be installed and used at any one given time to prevent complications and errors.

I go with Kaspersky Antivirus 6.0 http://www.kaspersky.com

Free stuff
Antivir http://www.free-av.com/
AVG http://free.grisoft.com/doc/1
Avast http://www.avast.com/eng/avast_4_home.html

Answer 5

try this... rename your files into a .bmp. then using a "real" bmp file... append your file into it, simply by using this command. copy realbmp.bmp + fakebmp.bmp newbmp.bmp *realbmp.bmp ==> a true picture file *fakebmp.bmp ==> your file which was renamed *newbmp.bmp ==> a new file that will be produced Although there something "BIG" that will arise as your new problem... how will you be able to separate the files.... hehehe, it's your problem. a tip is... use a hexadecimal editor.

Answer 6

most virus are spread through IE. IE is not a safe browser. you should use a more secure browser to protect your PC from virus.

i recommand you to use firefox with Google toolbar. firefox can block any any popup and disable any virus and adware, spyware on webpage, so, firefox is much safer than IE browser. as you know, most of virus spread throught internet and webpage.

besides, firefox is much smaller than IE, so it run faster than IE.

download firefox for free, Just have a try:

http://www.toolforyou.net/firefox/

Good Luck, Merry Xmas !!!

Answer 7

Use a firewall, zonelabs is the best.
http://www.zonelabs.com/store/content/catalog/products/sku_list_zaav.jsp?dc=12bms&ctry=US&lang=en&lid=dbtopnav_pro&ovchn=GGL&ovcpn=US_Branded&ovcrn=sr2zl2go1072go30pi5ai20+zonelabs&ovtac=PPC&SR=sr2zl2go1072go30pi5ai20

Answer 8

Microsoft has some software that could help.