Stuck with Trojan Horses

Ex-Para · 06-19-2007, 01:11 PM

I have had to get a computer with WinME as I have some software that will not work with XP. I used Avast to check for problems and found eight Trojan horses but after I had supposed to get rid of them I could run the check again to find the some ones every time. The situation is just the same using AVG, the same ones are found every time. I now have the computer on AVG
I tried the Disable System Restore to find the box was already checked and disabled. I tried to enable just to see what would happen, re-booted and when I got back to System Restore it was again checked. Thinking I had done it wrong I tried enabling again, applying and re-booting but still it was disabled.
If anyone gives me some advice regarding the Trojans it would be appreciated.

Chevy · 06-20-2007, 12:15 AM

5-Step Process for HJT

Please read THIS and follow the directions closely.

Ex-Para · 06-20-2007, 10:57 AM

Thanks for the reply, I have contacted TSLG Listserver, this is a few people who can give you a bit of advice but for a while now they have had a lot of trouble with the server/s. Questions and answers were always posted daily but I have none for some time now so I take it there must be some trouble as I have had no reply.

It will take me a while to proceed through the instructions you sent to me but I will reply back when I have done this. I am in contact with this forum on a clean computer not the infected one.

Thanks again.

Jlp1928 · 06-21-2007, 06:14 AM

Hi, Try your virus/trojan cleaner from SAFE MODE.

Good Luck, Jim

~~kbd_usr~~ · 06-21-2007, 07:17 AM

My favorite thing to do with a Trojan that is pesky is to render it inert. This is done via insertion of random characters by using a Hex Editor. There are many free ones available.
Find it on your HD, then bring it in the editor, and have at it. Try not to change more than 20% at one time.
Seems that in order for a Trojan to pass filters on the I-net that check for rogue code, they have to follow specific rule sets. When instilled on a system they let it all out and mutate. But, when you play with it, the guy on the other end has no real way of knowing of the manipulation, just knows the program has gone through morphisms.

It's fun to watch them jump all over your system trying to figure out what went wrong, only to latch on to the program in its new form, and crash.

Ex-Para · 07-02-2007, 10:11 AM

I have solved my problem with the Trojan Horses; I carefully read all the instructions sent to me from this forum and set some time aside to do it. Before starting I thought I would try Clamwin once more as the first time I tried it went so far and stalled. It is very slow and takes five hours for twenty gigs but I have always found it realisable. So I deleted a lot of stuff the previous owner had on the computer and only allowed the bare necessities on start-up and then ran Clamwin again, this time it went all the way and did get rid of the Trojan Horses and they where still there when I started. Why AGV and Avast had no effect I do not know. Clamwin is also free,

Chevy · 07-02-2007, 10:20 AM

glad to see Clam helped (it is a good little app, isn't it?)

However, I would still follow the steps I gave you, as many of these buggers leave traces, or merely go into hiding.

dai · 07-02-2007, 12:09 PM

avg and avast are virus detectors,trojans cleaners are different,follow chevy's advise and let the security experts have a look

Ex-Para · 07-02-2007, 12:30 PM

I did get part of the way through the list but I will start again and go through it all to make sure. Thanks for the reply.

06-19-2007, 01:11 PM	#1 (permalink)
Ex-Para Registered User Join Date: Mar 2007 Location: North East England Posts: 128 OS: Ubuntu, Knoppix, XP. Vista.	Stuck with Trojan Horses I have had to get a computer with WinME as I have some software that will not work with XP. I used Avast to check for problems and found eight Trojan horses but after I had supposed to get rid of them I could run the check again to find the some ones every time. The situation is just the same using AVG, the same ones are found every time. I now have the computer on AVG I tried the Disable System Restore to find the box was already checked and disabled. I tried to enable just to see what would happen, re-booted and when I got back to System Restore it was again checked. Thinking I had done it wrong I tried enabling again, applying and re-booting but still it was disabled. If anyone gives me some advice regarding the Trojans it would be appreciated. Last edited by Ex-Para; 06-19-2007 at 01:13 PM. Reason: forgot part

06-20-2007, 12:15 AM	#2 (permalink)
Chevy Retired Join Date: Jul 2003 Location: Notlob Posts: 5,452 OS: Vista Ultimate My System	Re: Stuck with Trojan Horses 5-Step Process for HJT Please read THIS and follow the directions closely.

06-20-2007, 10:57 AM	#3 (permalink)
Ex-Para Registered User Join Date: Mar 2007 Location: North East England Posts: 128 OS: Ubuntu, Knoppix, XP. Vista.	Re: Stuck with Trojan Horses Thanks for the reply, I have contacted TSLG Listserver, this is a few people who can give you a bit of advice but for a while now they have had a lot of trouble with the server/s. Questions and answers were always posted daily but I have none for some time now so I take it there must be some trouble as I have had no reply. It will take me a while to proceed through the instructions you sent to me but I will reply back when I have done this. I am in contact with this forum on a clean computer not the infected one. Thanks again.

06-21-2007, 06:14 AM	#4 (permalink)
Jlp1928 Registered User Join Date: Sep 2006 Location: Chicago Posts: 440 OS: Win98, XP, 2000	Re: Stuck with Trojan Horses Hi, Try your virus/trojan cleaner from SAFE MODE. Good Luck, Jim

06-21-2007, 07:17 AM	#5 (permalink)
~~kbd_usr~~ Register user Join Date: Jun 2007 Posts: 126 OS: Ubuntu Linux, 7.04	Re: Stuck with Trojan Horses My favorite thing to do with a Trojan that is pesky is to render it inert. This is done via insertion of random characters by using a Hex Editor. There are many free ones available. Find it on your HD, then bring it in the editor, and have at it. Try not to change more than 20% at one time. Seems that in order for a Trojan to pass filters on the I-net that check for rogue code, they have to follow specific rule sets. When instilled on a system they let it all out and mutate. But, when you play with it, the guy on the other end has no real way of knowing of the manipulation, just knows the program has gone through morphisms. It's fun to watch them jump all over your system trying to figure out what went wrong, only to latch on to the program in its new form, and crash.

07-02-2007, 10:11 AM	#6 (permalink)
Ex-Para Registered User Join Date: Mar 2007 Location: North East England Posts: 128 OS: Ubuntu, Knoppix, XP. Vista.	Re: Stuck with Trojan Horses I have solved my problem with the Trojan Horses; I carefully read all the instructions sent to me from this forum and set some time aside to do it. Before starting I thought I would try Clamwin once more as the first time I tried it went so far and stalled. It is very slow and takes five hours for twenty gigs but I have always found it realisable. So I deleted a lot of stuff the previous owner had on the computer and only allowed the bare necessities on start-up and then ran Clamwin again, this time it went all the way and did get rid of the Trojan Horses and they where still there when I started. Why AGV and Avast had no effect I do not know. Clamwin is also free,

07-02-2007, 10:20 AM	#7 (permalink)
Chevy Retired Join Date: Jul 2003 Location: Notlob Posts: 5,452 OS: Vista Ultimate My System	Re: Stuck with Trojan Horses glad to see Clam helped (it is a good little app, isn't it?) However, I would still follow the steps I gave you, as many of these buggers leave traces, or merely go into hiding.

07-02-2007, 12:09 PM	#8 (permalink)
dai Manager, Hardware Forums Join Date: Jul 2004 Location: west australia Posts: 56,609 OS: win 7 32x 64x rtm	Re: Stuck with Trojan Horses avg and avast are virus detectors,trojans cleaners are different,follow chevy's advise and let the security experts have a look __________________

07-02-2007, 12:30 PM	#9 (permalink)
Ex-Para Registered User Join Date: Mar 2007 Location: North East England Posts: 128 OS: Ubuntu, Knoppix, XP. Vista.	Re: Stuck with Trojan Horses I did get part of the way through the list but I will start again and go through it all to make sure. Thanks for the reply.