Securing Your Computer: Trojan Removal Programs

From CastleCopsWiki

Run either or both:

ewido security suite Trial

Note: ewido runs on Windows 2000 and XP only.

For our purposes, we will be installing the stand-alone scanner portion of the program only, so that the guard (ewido's active protection component) will not interfere with the cleaning process.

1. Please download the free ewido security suite
   • After the download is complete, double click on the file to launch the installation process.
   • During installation under the Additional Options menu, you will be asked if you want to "Install background guard (required for automatic updates)" and "Install scan via context menu". Please UNCHECK both of these options.
   • Launch ewido, there should be an big "E" icon on your desktop, double-click it, and you will see the ewido main screen.
2. Next, you will need to update ewido to the latest definition files.
   • On the left hand side of the main screen click Update-->Start Update
   The update will begin and a progress bar will show the updates being installed. Only, if you are having problems with the updater, you can manually update ewido.
3. Once updating is 100% complete, setup ewido as follows, and then perform a scan:
   • Click on scanner
   • Click on Settings
   • For your first scan, please check the 'Scan every file' option. You can change this back to 'Choose files by Extensions' later if desired, for quicker scanning.
   • Click on Complete System Scan and the scan will begin.
   • While the scan is in progress, you will be prompted to clean the first infected file ewido finds. Select 'Remove', then put a check in the the box next to 'Perform action on all infections'. Doing this, enables the scan to proceed automatically until its completion. Click OK.
4. Once the scan has completed, there will be a button located on the bottom of the screen named Save report
   • Click Save report and save the report .txt file to your desktop. A HJT staff member may ask to see it later.
   • Now close ewido security suite.
     
     
   For more detailed instructions regarding ewido setup and scanning features, please consult the ewido Quick Guide by DieHard

If you run into any problems while trying to install ewido or cannot complete your scan, please address your concerns to the staff of The CastleCops ewido Forum

TrojanHunter Trial

Note: TrojanHunter runs on Windows 95, 98, ME, NT, 2000 and XP.

1. Download and Install the 30-day trial of TrojanHunter
2. There is no updating feature available within the trial version of TrojanHunter itself, so you must download a compressed ruleset and unzip all the files within it to the TrojanHunter folder, as outlined in the Manual Update Instructions.
3. To do a full scan be sure the boxes are checked (green) beside your main hard drive folders, then click on Full Scan. The program is fully functional and free to first time users for only 30 days.
   
   For more detailed instructions regarding TrojanHunter setup and scanning features, please consult the TrojanHunter Online Help Guide

If you run into any problems while trying to install TrojanHunter or cannot complete your scan, please address your concerns to the staff of The CastleCops TrojanHunter Forum

---

---

You have completed the automated malware removal process. We hope that your computer problems have been resolved to your satisfaction. Even if you think your computer is now 'clean', some additional steps are advisable to further ensure the security of your computer.

Please consult: How to Prevent Reinfection for further details.

---

Only if your computer problems persist, consider submitting a post to HijackThis Forum for review by CastleCops experts.

Getting Expert Help With Your HijackThis Log

---

This article is part of the Securing Your Computer: series The series was developed as the key deliverable of the Cleaning Malware Project.

Securing Your Computer: Introduction

Securing Your Computer: Overview

edit this template