Trojan Removal Tool

Step 1 for Trojan Removal

Download and install Malwarebytes. If you're going to buy a trojan removal program, then I recommend Malwarebytes over Trojan Remover, because Malwarebytes removes Trojans and everything else. In fact I'm now recommending Malwarebytes for all your needs.

See my lens Steps for Resistant PC Infection and follow the steps for your specific operating system to "show all hidden system files and all hidden files and folders" (so programs below can get into those files where the Trojans might be residing and deal with them) and then return here to this lens.

Step 2 for Trojan Removal

Disable System Restore: Start, All Programs, Accessories, Systems Tools, System Restore and tick 'disable System Restore'.

Uninstall your old anti-virus program. Ya I know - just do it! If you wont' uninstall it, then deactivate it NOW.

Get updates for Malwarebytes until there are no more updates.

Do a Smart Scan with Malwarebytes Full scans can be done later, but if your system is compromised the Smart Scan is what I recommend: Update prior to scanning.

*** If you have a lot of annoying pop-ups then do the scans in Safe Mode.

*** If you have a hunch that you have recyclers then automatically do scans in Safe Mode.

*** If you're already a nervous wreak - LOL - then do the scans in Safe Mode!

*** If you have adware pop-ups constantly, then do your scan in Safe Mode!

(Get into Safe Mode by restarting computer and when black screen comes up depress F8 continuously until you get some white text, select just the "Run in Safe Mode" option)

Run MalwareBytes and let this trojan removal tool do its job. Restart computer.

Once your PC has been cleaned of all malware, you can install your old anti-virus program that you did not wish to uninstall and get its updates. For others who don't care about their old anti-virus program, I recommend not installing an anti-virus and just installing Malwarebytes. Buy the full-time protection version of Malwarebytes, cost $24.95.

Other issues: Does your present antivirus program work? If it doesn't then it is probably infected with something and should be uninstalled. If you can't uninstall it, you probably have a backdoor trojan.

Once everything has been cleaned you can now Enable System Restore. If you're a computer geek and don't mind reformatting your PC, then don't enable System Restore because it's just a good hiding place for viruses.

Files that you unchecked to show hidden systems files, etc. can remain unchecked.

***If you continue to have problems then the trojan is recycling and you'll need to do the scans in 'Safe Mode' where the trojan can't move around and recycle/rename itself. Malwarebytes works in Safe Mode. MANY PROGRAMS DO NOT WORK IN SAFE MODE!

Malwarebytes removes Trojan.Vundo.

If you're using Internet Explorer and for some odd reason it is still being hijacked then Reset Internet Explorer Settings under its Advanced tab which puts the settings back to the default factory settings and run Malwarebytes again for good measure. I recommend Firefox Browser with WOT and NoScript Plug-ins. Get over Internet Explorer.

Malwarebytes is anti-malware and can be safely installed on your PC without conflicting with your Antivirus.) Once you're PC is cleaned up Malwarebytes (the full version) should be all you need as it is the best program out there. Besides Malwarebytes is light on system resources and cheaper than most anti-virus programs.

***** If your system is crashing during scans, access your log files from whatever last successful scan you had, and locate the exact folder and file where the trojans or viruses are. Go into the directory, open it and find the exact file where the problem is, and do a right click and run Malwarebytes just in that folder and on that file.

For instance, if you have no log files to access and don't know where the trojans or viruses are, most hide in C:\Windows\System32. So find the exact folder.

depress Start, My Computer, C, Windows, System 32, "right click with mouse" and scan ..

(Note when you right click you will see the option also to scan with the current anti-virus software that you have installed). So do that later. Do Malwarebytes scan first!

If a specific file is resistant to removal this way, then use FileASSASSIN which can be found in the Malwarebytes 'More Tools' Tab. .

Trojans can damage or corrupt your operating system and alter your Registry and some anti-malware programs might not be able to reset your Registry or Operating System back to its normal state; so you might need to use a program such as HijackThis. I've also provided a link to an on-line automatic HijackThis Analysis.

You can also download ESET System Inspector to analyze your system and pinpoint problems. It generates a log that you can upload to forums for assistance.

You can download Trend Micro HijackThis. Run HijackThis but do not have it do any repairs. Copy log file and post it to a PC help forum for assistance or copy and submit to online HijackThis Automatic Log Analysis.

If you are unable to update your operating system after trying the above procedures, then repair your system with a Recovery Disk or the Operating System CD and possibly that it will restore the files to the original form. Do not do a reformat, just a repair for now.

If this does not correct the issue, then you should consider reformatting your PC. Do a clean format from your Recovery Disk or Operating System CD.

How to determine if you have a Backdoor Trojan that is blocking your attempts at Trojan Removal

This information I garnered from my experience assisting people remotely to remove malware that turned out to be backdoor trojans.

My number one tip, once your anti-malware programs have discovered trojans, but Trojan removal is unsuccessful, (or the trojans recycle and rename themselves and you have done all the scans in safe mode to no avail) is to establish if you have a backdoor Trojan. These are the steps to take:

1. download a free version of Malwarebytes and install. Get updates.

2. uninstall your current antivirus.

If you have Norton, then be sure to uninstall Symantec also.

Uninstall your antivirus through 'Control Panel', in Add/Remove.

If your PC will not allow you to uninstall your current antivirus and says it is due to you not having System Administrator privileges, you are either not in the proper User Account, or if you are in the System Administrator Account, then a Backdoor Trojan has taken over your System Administrator privileges and your PC.

In this case all sensitive information such as passwords, banking and credit card information can be accessed by the Hacker.

It is recommended that you call your bank or credit card company if you have had relevant transactions.

Backdoor Trojans disable your ability to uninstall antivirus and other anti-malware programs by simply taking over your System Administrator privileges.

Backdoor Trojan Removal is next to impossible, and even if removed it does not guarantee that your PC is not compromised. You will need to Format your computer. Follow the next step below.

If you have not used your computer for sensitive information then consider an online scan at Trend Micro first, prior to reformatting.

Get a USB Flash Drive and download the programs onto a clean computer's desktop. Insert Flash Drive into modem and let PC find the drivers and install (if this is the first time a Flash Drive is being used on that particular PC, then:

depress: Start, My Computer, and see the Section 'Devices and Removable Storage' and click on Removable Disk (usually F:) - this will open this USB Flash Drive.

now, with your mouse go to the executable programs on the Desktop and left click and pull individually each one into the Folder for the USB Flash Drive and put it in the folder.

Do this for all executable problems you believe you'll need i.e. Malwarebytes, Avira, Superantispyware, Trojan Remover, and any other you've researched, that you might need.

Remove USB Flash Drive from that PC and insert into your PC's modem. Let PC find the drivers and install (if this is the first time a Flash Drive is being used on that particular PC, You might get a pop up window but don't use a program to open it, go down to the bottom and click on 'Open Folder to View Files with Windows Explorer'. With you mouse left click executable program and pull from folder to your desktop. Do this for each program you think you need, but as I said Malwarebytes is all you need. Now install the program(s).

If you still plan on installing an antivirus program along with Malwarebytes, install Malwarebytes first, get updates and run the smart scan first, then install the other program, get updates and run its scan.

This will prove to you that Malwarebytes removes everything and that your anti-virus program will find nothing. In fact why not download Trojan Remover and run it after Malwarebytes and see if Trojan Remover finds anything.

Some malware are able to prevent you from installing a Trojan removal program that is going to kill them.

Rename your executable program.

Right click the executable program and click 'rename'. Call it something a little different (so long as you can still identify what it is), but make sure it has the same extension such as xxxxxxxx.exe.

Now launch it!

It is imperative to keep your Operating System, Browser, Drivers, Java, Software, etc. up-to-date. If you don't, you leave yourself open to more trojan attacks. A good Trojan Removal program, like Malwarebytes (which also removes viruses, worms, trojans, rootkits, spyware, malware and adware), can't do its full job if your system, drivers and software are not up-to-date.

For those returning a second or a third time, I have updated this lens in the sense that I am now only recommending Malwarebytes anti-malware as the only program you need running on your PC for the optimum protection currently.

I have been testing it for over 9 months (with real-time protection - paid version $24.95usd) with no additional anti-virus program, and just using the Firefox Browser with the NoScript and WOT plug-ins and have not come under any attacks whatsoever. So I feel very comfortable in recommending just Malwarebytes. Added bonus your PC will run faster without some of those resource hog programs.

For only $24.95 US, the added benefit of the full version of Malwarebytes running on a computer in the background may be a good way to get some peace of mind, especially if you're not a computer geek! The big plus is that if you run the free version and somehow downloaded a backdoor trojan, it won't be able to get rid of it then and the best thing is to reformat your computer nor can any other antivirus or anti-malware or trojan remover - what a hassle - right!

Get........ Firefox Browser
with NoScript Plug-in for Firefox
and WOT plug-in for FireFox
and Malwarebytes.

If you followed the step above and have determined that you have a backdoor trojan, then I recommend you do a clean Format.

Disconnect your Computer from the Internet.

It is recommended that a clean System Recovery be done from a Disk, either your Recovery Disk or the Operating System Disk. Do not do a recovery from the Recovery Console in your system.

You must do a clean Format from your Recovery Disk or your Operating System Disk. Do not do a Repair.

Steps to take before Formating Hard Disk Drive.

10 things you should do before, during, and after reinstalling Windows

Additional assistance for particular problems before formating hard disk drive.

Trojan Removal Answers at Fixya

Trojan Horse Virus Removal for Window XP
trojan horse-zlob.x_a
Trojan downloader:win32/renos.ee
Cant access files
worm called VB.q
Win32/Winshow.51712.dll.Trojan
malware threats
AntiVirGear Zlob Trojan
resycled/boot.com virus
I cannot launch my browser
w32.imaut
remove trojan Backdoor.Tidserv!inf
registry problems