Ho do I get rid of this Trojan Horse?

[SolidSnake15]

My dad accidentally let a Trojan Horse Virus in and we can't manage to get rid of it. AVG gives us an option to HEAL and QUARANTINE but neither work. Any Tips?

 

[GrumpEone]

My dad accidentally let a Trojan Horse Virus in and we can't manage to get rid of it. AVG gives us an option to HEAL and QUARANTINE but neither work. Any Tips?

Poor guys, the Trojan Horse never really leaves. Your best option is to reload everything, OS, Software, and everything else. Trust me, I've tried everything in the past on getting rid of it, and it never really goes away. Some anti-virus softwares, make it hibernate for awhile, but it's not really gone. It will take more time to try and figure out how to kill the trojan, than it takes to backup, everything you need, and re-install. This time partition your HDD, if you only have one, and backup regularly.

My condolences on your computer!

 

[Danoff]

In the meantime make sure you have an outgoing firewall to prevent it from using your network connection.

 

[SolidSnake15]

I feel sorry for my mom, she went and got a guide to help her get rid of this Trojan. She plans on entering the gruesome battle against the nearly immortal virus sometime soon.

 

[G.T]

Does it have a name? Once AVG picks it up it should say it has a particular name.

 

[WallRunner]

If I'm correct, you should see the filepath in AVG, which then you can navigate there, select the file and Shift+Delete?

Or is it different than the Trojan I killed?

From,
Chris.

 

[Azuremen]

I feel sorry for my mom, she went and got a guide to help her get rid of this Trojan. She plans on entering the gruesome battle against the nearly immortal virus sometime soon.

Format/reinstall is the only sure way to remove a Trojan.

Sucks, I know. But this is why you back up data... you do back up data, right?

 

[GrumpEone]

If I'm correct, you should see the filepath in AVG, which then you can navigate there, select the file and Shift+Delete?

Or is it different than the Trojan I killed?

From,
Chris.

Unfortunately, the Trojan writes itself into your registry, and will reinstall itself. Everytime you think you killed it, a week or so later, it comes back. It is not impossible to kill the trojan, just far too time-consuming, finding all the locations that the trojan has manifested itself in, and erradicating it. It is far easier to re-install the system, which I have had to do probably 12-15 times last year, only once this year though.

FYI- It is not as simple as just deleting a file or two in a filepath, it will comeback!!

 

[ferrari_chris]

Unfortunately, the Trojan writes itself into your registry, and will reinstall itself. Everytime you think you killed it, a week or so later, it comes back. It is not impossible to kill the trojan, just far too time-consuming, finding all the locations that the trojan has manifested itself in, and erradicating it. It is far easier to re-install the system, which I have had to do probably 12-15 times last year, only once this year though.

FYI- It is not as simple as just deleting a file or two in a filepath, it will comeback!!

Dude! What are you doing with your computer?

 

[Wolfe]

Just last night I caught a nasty virus that took hours to kill. It was called Virtumonde, and it was one of those retarded ones that pops up advertisements for "adware remover" sites and whatnot.

It was a persistent little 🤬 , embedding itself into memory so that its .dlls couldn't be deleted, adding registry keys, attaching itself to Windows' logon process, and rebuilding itself under different filenames. It even seemed to "retaliate" whenever I made attempts to snuff it out -- it disrupted my attempt to use TrendMicro's HouseCall with an endless slew of blank Internet Explorer windows, hampered the execution of Unlocker (very helpful program in the end), and crashed the system half the times I tried to delete its files.

Luckily, I knew exactly when I caught it, so I was able to identify all of its dlls in system32 (organizing the folder by date) and get rid of it entirely. Booting in Safe mode, I ran SpyBot to get rid of the registry keys, used the command prompt in conjunction with Unlocker's delete function to get rid of the files, then ran SpyBot again to pick up any remaining pieces. It took many restarts and attempts, but my computer is fine now.

I can't really complain. That's what I get for trying to get a crack for one of the shareware programs I downloaded for one of my classes this semester.



Anyway, my advice, Solidsnake15, would be to identify the trojan (most anti-virus/spyware programs will list the name) and look it up on the internet. Sometimes there are special programs or methods that can target it specifically and kill it.

Hell, one time I caught a trojan that couldn't be stopped by conventional methods, but when I looked up its name, I found out that it was a part of a freeware hacker's tool, one that came with an "uninstall" feature in case someone wanted to test it on their own system. So I just strolled onto the website that distributed the program, downloaded it, uninstalled the trojan, and that was it.

 

[GrumpEone]

Dude! What are you doing with your computer?

Just the normal surfing stuff, but the problem is when you follow the wrong search result while looking for a driver or something. I've picked up the Trojan 4 times, searching for drivers to link various Cell-phones to my computer. Next thing you know, 8 windows pop-up while some virus is installing it self, in the background. Even worse I'm afraid to view videos on-line, because now there are virii that are embedded in some of the videos.

 

[SolidSnake15]

It was just a Trojan Horse Downloader. My parents say it's gone now, I guess we'll be sure soon.

 

[Azuremen]

It was just a Trojan Horse Downloader. My parents say it's gone now, I guess we'll be sure soon.

Just?



You do know what Trojan Horse does, right? If its had the chance to return any info and you do any kind of buying on that computer with a credit, you might want to watch you accounts.

I'm sure it will show up again later; just back up your data now and format and reinstall..

Just the normal surfing stuff, but the problem is when you follow the wrong search result while looking for a driver or something. I've picked up the Trojan 4 times, searching for drivers to link various Cell-phones to my computer. Next thing you know, 8 windows pop-up while some virus is installing it self, in the background. Even worse I'm afraid to view videos on-line, because now there are virii that are embedded in some of the videos.

Have you considered scanning files before you execute them? I scan everything I down load before I even move it from the directory it downloaded to.

 

[ROAD_DOGG33J]

For most of my problems I run Combofix and then SuperAntiSpyware.

 

[GrumpEone]

Have you considered scanning files before you execute them? I scan everything I down load before I even move it from the directory it downloaded to.

Uh yes, but when a Virus installs itself in the background, you get no warnings, or any chance to deny the download. Also you should be aware that those who write virii and malicious code, are two steps ahead of the programmers trying to figure out how to kill the virii! There are also virii that corrupt the 'virus definition files' on most, so called virus protection programs. So in essence you are bound to lose a few battles, against a well written virus.

 

[Omnis]

Guys, the plural form of Virus is Viruses.