TROJAN HORSE

[[email protected]]

I'm running WINDOWS XP. I keep getting THE TROJAN HORSE VIRUS and I
want to get rido of it. Please help what to do.... I NEED your
sugestions.
Thanks in advance.
Ricky

[smlunatick]

On Mar 18, 3:09*pm, wrote:
> I'm running WINDOWS XP. I keep getting THE TROJAN HORSE VIRUS and I
> want to get rido of it. Please help what to do.... I NEED your
> sugestions.
> Thanks in advance.
> Ricky

Do you know the exact virus name since Trojan Horse virus be two
things. Trojan Horse is a complete category of viruses or a fake
warning of a virus (aka hoax)

Get a anti-virus system and update with the latest virus scanning
definitions. Then, scan your computer for possible virus infestations.

[nass]

" wrote:

> I'm running WINDOWS XP. I keep getting THE TROJAN HORSE VIRUS and I
> want to get rido of it. Please help what to do.... I NEED your
> sugestions.
> Thanks in advance.
> Ricky

Who is telling you that?, your security software or a what?.

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (off-line scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

After the scan run disk clean-up on your drive
Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html
http://www.bleepingcomputer.com/forums/
Or other appropriate
forums for expert analysis, not here.
Let us know your progress.
nass
----
http://www.nasstec.co.uk

[David H. Lipman]

From: >

| I'm running WINDOWS XP. I keep getting THE TROJAN HORSE VIRUS and I
| want to get rido of it. Please help what to do.... I NEED your
| sugestions.
| Thanks in advance.
| Ricky

Either it is a Trojan OR it is a virus.

Your post lacks facts such as what anti virus application indicated the infection.
What the REAL name of the infector was.
What is the fully qualified name and path to the file deemed to be infected.


Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe

http://www.pctipp.ch/downloads/dl/35905.asp

English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free/

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Ken Blake, MVP]

On Tue, 18 Mar 2008 13:09:33 -0700 (PDT),
wrote:

> I'm running WINDOWS XP. I keep getting THE TROJAN HORSE VIRUS and I
> want to get rido of it. Please help what to do.... I NEED your
> sugestions.


First, not that there is no virus called the "Trojan Horse Virus."

Second, note that a trojan horse and a virus are two different
categories of malware. Something could be a trojan horse or it could
be a virus; it can't be both.

So, given that what you have is *not* the "Trojan Horse Virus," the
question is what *do* you have. How do you know that you have any
malware infection? What program is telling you? Please quote the exact
verbatim text of the message you get.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

[Elmo]

wrote:
> I'm running WINDOWS XP. I keep getting THE TROJAN HORSE VIRUS and I
> want to get rid of it. Please help what to do.... I NEED your
> suggestions.
> Thanks in advance.
> Ricky

Try one of these Virus Removal Tools:

Avast! One tool for any current virus
http://www.avast.com/eng/avast-virus-cleaner.html

Symantec Virus Removal Tools
http://www.symantec.com/business/security_response/removaltools.jsp

F-Secure Virus Removal Tools
http://www.f-secure.com/download-purchase/tools.shtml

Kaspersky Virus Removal Tools
http://www.kaspersky.com/removaltools

--
Joe =o)

[David H. Lipman]

From: "Elmo" >


|
| Try one of these Virus Removal Tools:
|
| Avast! One tool for any current virus
| http://www.avast.com/eng/avast-virus-cleaner.html
|
| Symantec Virus Removal Tools
| http://www.symantec.com/business/security_response/removaltools.jsp
|
| F-Secure Virus Removal Tools
| http://www.f-secure.com/download-purchase/tools.shtml
|
| Kaspersky Virus Removal Tools
| http://www.kaspersky.com/removaltools
|

The problem with your reply is that the OP provided a generic Trojan declarartion and all
the tools you provided are specific removal tools.

What the OP need is a broad-spectrum removal tool.

My Multi AV scanning Tool is a broad-spectrum On Demand scanner with hundreds of thousands
of signatures and performs heuristic scanning as well.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Elmo]

David H. Lipman wrote:
> From: "Elmo" >
>
> |
> | Try one of these Virus Removal Tools:
> |
> | Avast! One tool for any current virus
> | http://www.avast.com/eng/avast-virus-cleaner.html
> |
> | Symantec Virus Removal Tools
> | http://www.symantec.com/business/security_response/removaltools.jsp
> |
> | F-Secure Virus Removal Tools
> | http://www.f-secure.com/download-purchase/tools.shtml
> |
> | Kaspersky Virus Removal Tools
> | http://www.kaspersky.com/removaltools
> |
>
> The problem with your reply is that the OP provided a generic Trojan declaration and all
> the tools you provided are specific removal tools.
>
> What the OP need is a broad-spectrum removal tool.
>
> My Multi AV scanning Tool is a broad-spectrum On Demand scanner with hundreds of thousands
> of signatures and performs heuristic scanning as well.

He's welcome to try whatever he wants; I'm merely offering alternatives.

--
Joe =o)

[David H. Lipman]

From: "Elmo" >


|
| He's welcome to try whatever he wants; I'm merely offering alternatives.
|

Sorry, they are red herrings, not alternatives.
Alternatives are broad-spectrum removal tools not removal tools that are target specific.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp