Subscribe to our Best Free Trojan Scanner/Trojan Remover
|
In a Hurry?
|
 Go straight to the Quick Selection Guide |
|
Introduction
|
|
|
Malware, trojans and threats Most PCs are now connected to the Internet and networks, making easier the spread of malicious software (malware), which includes trojans (also known as trojan horses), viruses, worms, spyware, adware, rootkits and other malicious or unwanted programs. Like spyware and adware, trojans can get onto your computer in a number of ways, including from a web browser, via e-mail, or in a bundle with other software downloaded from the Internet. You may also inadvertently transfer malware via a USB flash drive or other portable media. Unlike viruses or worms, trojans do not replicate themselves but they can be just as destructive. On the surface, trojans appear benign and harmless, but once the infected code is run, trojans kick in and perform malicious functions to harm the computer system without the user's knowledge. For example, waterfalls.scr is a waterfall screen saver as originally claimed by the author, but it can be associated with malware and become a trojan to unload hidden programs and allow unauthorized access to the user's PC. Some typical examples of threats by trojans are as follows:
To minimise the threats, most PC users will need an effective anti-malware program to remove trojans along with other malware. Anti-malware and anti-trojan programs As more computer security developers are extending their product capabilities to address more than one type of malware, the boundary between different types of anti-malware programs is no more a clear cut and has become blurred. For example, an anti-virus program such as AVG Anti-Virus covers not only viruses, but offers protection against spyware, adware and others. An anti-spyware program such as SuperAntiSpyware not only detects spyware, but removes trojans, rootkits and other threats. Likewise an anti-trojan program can offer to remove viruses, spyware and other types of malware. More appropriately, these security products are to be classified as anti-malware programs rather than to be grouped by the name of the products. In this respect, anti-malware products which are designed to detect and remove trojans more effectively than the others will be reviewed in this category. How many anti-malware programs need to install?
Disclaimer Despite their ratings in this review, some anti-malware programs in certain cases are able to detect more malware than the others depending on their designs, online databases and the infections on computers. |
|
Discussion
|
||||
|
|
Other Related Products
|
|
These are a number of other free trojan scanners and removers which were brought up in comments here or noted from other sources. As they are not rated in this review, I am listing them here with brief descriptions and links to their sites for ease of reference.
|
|
Have Your Say
|
| You are invited to share and discuss your views in our freeware forum. To post in the forum you need to register first but that's quick and immediate. Alternatively, anyone can leave a comment at the bottom of this page.
|
Please help us by rating this review
|
||||||||||||||||||
|
||||||||||||||||||
|
||||||||||||||||||
|
||||||||||||||||||
4.5.0.8 
Private Freeware (not free for commercial use) 
Win XP to Vista
|
Editor
|
|
|
|
Tags
|
|
anti-malware, anti-trojan, anti-virus, anti-spyware, adware, remover, scanner, freeware, free trojan scanner, free trojan remover |
Delicious
Digg
StumbleUpon
Please rate this article
I just have to say that Threatfire seems to have slowed down the pc's here alot. We thought we had a trojan, but running Sys-Internals Process Explorer showed that it was Threatfire dragging the system down. The older version was hardly noticeable, but the latest caused a serious drag & delay response on older systems.
After removing Threatfire, pc's seem to run much faster, more memory available. Too bad, it seemed to be an OK program.
We are now using a combo of MS Security Essentials, Outpost Firewall, and PC Tools Spyware DR (starter ed via Google pack). Run Malware Byts AM once a week too.
A2 Squared seems pretty good, but the update download is huge. Once a month we also run Spybot S&D too.
As for rootkits, try Panda Anti-rootkit or Sophos Antirootkit.
I can no longer recommend Superantispyware. For one thing Malwarebytes is a quality replacement for a free scanner. For another, I just cannot 'look the other way' when I see that "one day only" price of $9.99 for the Pro version or $19.99 for a Pro version lifetime license. Sure it's a nice deal for a quality program but the fact remains that the offer is misleading. It's not "one day only", it's pretty much every day.
Now we could go into how long 64X support has been promised and we could go into how long true Vista support has been promised for their sister product, SuperAdBlocker. It's been years. But that is another subject altogether.
Go on some security forum and criticize the misleading advertising and what will some SAS rep do? Probably try to get your posts deleted. That's pretty cheap in my opinion. But it's easier than answering to the fact that the company favors misleading advertising.
So in all, I just do not recommend SAS anymore.
I find SuperAntispyware to be very effective, but I have to echo your sentiment. Those ads that offer "1 day only" or exclusive sales annoy me. Since it is free though, I will probably continue to recommend/use it (and stay away from the commercial version)
I'm into this too and agree completely. I have great respect for Emsisoft for instance but every time I open the a-squared page there's a message about $x discount "today" for people in Brazil. Unfortunately this is standard net marketing practice and unfair I suppose to single Emsisoft out as there are plenty of others at the same party. Prevx is another one. Great software, highly capable so why do they have to resort the the type of tactics exhibited on their front page? At the end of the day I guess it's all about the power of money and most of the time we'll just have to live with it.
Although I agree the ads are misleading, I do not think that it's a reason to not use SAS. Many other companies have gone further and tried to validate either tests conducted by themselves or tests from dubious organisations, which is far more serious IMHO.
Also, have you actually seen these posts getting deleted, or is it merely speculation?
Thanks
I have questioned their advertising campaign/policy on other forums and they have made reply posts asking that my post be removed. I did not start a thread about their advertising, just responded to posts they have made.
Combofix is one of those programs nobody speaks much about until nothing else seems to work, then someone makes a combofix suggestion and the results are usually pretty good. Combofix seems to work well getting rid of many of the present day rogue downloads. I have seen results where Combofix has restored a few computers where Malwarebytes couldn't clear everything up. That's not a knock against MBAM as it is really a super program. But if MBAM seems to not complete the job of cleaning persistent malware then maybe give combofix a shot.
As a side note, combofix has many rogue variants so only download combofix from the site below, which comes with a nice tutorial-
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
I tried to install a-squared Free and PC Tools ThreatFire in my mechine (vista), both of them give me a corrupt file error message, got any idea?
Thanks a million,
i used webroot free for a sample try.
it picked up a trojan and Trkng ckkes.
would not remove them because it is free programme.
a-squared recmmnded as best anit trojan... did not pick it up?
only paid for programmes detect and remove?
You could also try running a few other scanners to see if they can detect and remove it. You could use Malwarebytes Antimalware, Superantispyware and Hitman Pro.
http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html
http://download.cnet.com/SuperAntiSpyware-Free-Edition/3000-8022_4-10523...
http://download.cnet.com/Hitman-Pro-3/3000-2239_4-10895604.html
Agree with, JonathanT!
hi guys:
to me security suits and/or antivirus resident in memory are useless. I'm an experienced user and I have found:
-clogged systems
-blocked trusted software
-slowed machines
-getting infected.
So, the question is how I can get the maximum protection with minimum resources? check out my current configuration:
-malwawrebytes antimalware full version and resident in memory
-A squared free version (no resident in memory)
-spybot
-Autorun Eater
-sandboxie
-physical router firewall
-windows default firewall
-firefox as unique internet browser with these extensions: adblock, betterPrivacy, taco, sanscrypt, WOT and showIP. (sometimes I use opera and srware Iron)
I have not been infected in 2 years, and it has been my configuration; and believe me: I have tried everything.
so my machine is fast and secure. when I'm browsing normal websites I disconnect sanscrypt; but when I'm browsing shit websites (torrents, porno, warez, gaming, etc.) I run my browser sandboxed and sanscrypt enabled, I tease around those places and when I get tired, I just close FF and I delete the sandbox. When I'm trying new and/or unknown applications I run them sandboxed.
thanks,
memoemc2
It seems that Comodo BOClean Anti-Malware has disappeared from Comodo's website. And it seems Trojan Killer is no longer free but comes at the price of $37 US Dollars.
New link for Comodo BOClean Anti-Malware is here.
This link only goes to the full suite @ 39MB
What do you mean, MidnightCowboy? I hit that link and it goes to the free 1.77 MB version. Thanx, Jojoyee.
Confirmed with Melih from Comodo today.
* BOClean is no longer available as a standalone product from Comodo
* It is still obtainable from some third party download sites but the software does not update.
In this state it has a limited value at best.
BOClean Anti-malware itself is 1.77 MB, but beneath the download button, it does specify that "BoClean is now included in Comodo Internet Security", which is 38.6 MB.
CIS includes Firewall, Antivirus, Defense+, Memory Firewall and Anti-Malware. Upon installing the CIS, either Firewall OR Antivirus can be excluded.
Well, yes, but it seems that the anti-malware can be downloaded by itself without the rest of CIS. Am I right?
Oops! Guess I was wrong. You would have to download the whole thing.
one day i was opening facebook account then suddenly message came that their are 26 trojans in ur computer so i scan with NOD 32 it was nt wrking so i close facbk and open the downloading site of antivirus but nththing happend
bt plz u people tell me a site to download
Try this...Turn off System Restore and restart PC in safe mode by continually tapping F-8 key and choosing Safe Mode with Networking. Next download, update, run Malwarebytes in Full Scan. When done and restarted out of safe mode, download, update, run SuperAntiSpyware and A-squared. Next download and run ccleaner. Turn System Restore back on. This usually works 9 out of 10 times. Once in awhile, for a major infection, a user will want to run ComboFix which you can download and read up on over at Bleeping Computers website...
Some Malware may reside in system restore, so be sure to scan again after turning sys restore back on again.
Facebook is riddled with malware of all descriptions so your PC is now likely infected. Some of this malware is designed to prevent you accessing the sites where you can obtain tools to remove it. If you register and post here in the forum one of us will attempt to help you as this isn't possible here in the comments section.
http://www.techsupportalert.com/freeware-forum/general-computer-support/
A new version of ThreatFire is out 4.6.0.19, and I like it much better than the last version!
Trojan/Malware info re banner ads.
http://www.theregister.co.uk/2009/09/24/malware_ads_google_yahoo/
Doesn't anyone realize that probably 75% of these "viruses" are created by programmers who work for the same companies that make these so-called "anti-viruses"? They want you to buy their product, so the best way is to pollute the internet with viruses and spyware.
This is a shortsighted myth. If the big names in security were ever caught engaging in such a practice, they would lose everything. And all it would take is a singular conscientious employee to quietly rat them out. In come the auditors/authorities, the place is shaken down, and it's curtains for a very lucrative business.
Modern malware is designed either for profit, or to attack someone. Viruses are most often found in e-mails targeted at politicians and high-profile clergymen. Of course you have the usual spyware and adware, designed to track your surfing activities (kind of like a consumer survey being conducted without your knowledge or permission) or display advertisements. And then you have Trojans packed into files you download from dodgy Web sites and P2P networks, as well as drive-by exploits; these baddies will usually install a backdoor on your computer that allows a hacker to control it remotely for click fraud, pump 'n' dump stock transactions, spamming, etc. The origins of most malware in the wild are well known; most of today's most widespread parasites come from gangs in China and Russia (one well-known cybercrime syndicate calls themselves the Russian Business Network).
Finally, any sought after profit would not be worth the risk, especially when there are so many competitors for the user to choose from. Pretend that Symantec (makers of Norton security products) were to write their own malware in hopes of profiting from it. How do they make sure consumers install their product for protection, and not a product by McAfee, Trend Micro, Kaspersky, Panda, Webroot, PC Tools, AVG Technologies (formerly Grisoft), Avira, ALWIL, Rising, G Data, Softwin, F-Secure, Sunbelt, Sophos, Eset, Norman, TrustPort, Microsoft, Kingsoft, AhnLab, Antiy Labs, Aladdin, Authentium, Cat Computer Services, ClamAV, Comodo, CA, Doctor Web, Emsi, Eset, Fortinet, FRISK, Hacksoft, Hauri, Ikarus, INCA, K7, Prevx, Secure Computing, VirusBlokAda, VirusBuster, Lavasoft, Safer Networking, or anybody else?
Now I should let you know that there are indeed rogue antivirus programs, but these are marketed through scareware. A "Windows" warning box will pop up, telling you that your computer is infected and you need to download their product to have it cleaned. This is the only way to force customers into purchasing your product, and not a competitor's product.
Hopefully you can drop this ridiculous conspiracy theory after a quick lesson in common sense.
That might be true, if the major AV companies were not stating, "We are losing the war against malware".
It has been my experience, that A-squared run after using ComboFix is a superb Trojan-Malware Combo! I was surprised not to see Combofix mentioned here.
Some Trojan info.
'World's nastiest trojan fools AV software'
http://www.theregister.co.uk/2009/09/18/zeus_evades_detection/
This variant on the same theme is also quite interesting!
http://news.softpedia.com/news/Cyber-criminals-Target-Their-Own-Kind-105...
As a footnote, Comodo (CIS) detects it, Symantec (Norton) detects it and Kaspersky detects it. Not sure about any of the others. It would have been a great help is this information had been released by Trusteer in their PDF report.
Nice one! Perhaps it will implode on itself and disappear!
You're quite right.
'Zulfikar Ramzan, technical director, Symantec Security Response told SCMagazineUS.com in an email Wednesday that there are “some issues” with accuracy of the study since it does not provide a breakdown of individual anti-virus companies' effectiveness of detecting ZBot.
“While the numbers produced are noteworthy, it is important to take them with a grain of salt,” Ramzan said.'
http://www.scmagazineus.com/Zbot-evades-most-anti-virus-programs/article...
It is a nasty, customizable/variable, trojan though. Would the software in the TSA article be able to detect it?
As a footnote to my comment below I was able to make contact late yesterday with Christian Mairoll the CEO of Emsisoft who confirmed that a-squared does detect this Trojan. The detection of new variants would be dependent on the update frequency of the free version scanner, but anyone with the full version would be protected by the behavior blocker component, Mamutu.
Cheers for that.
A2 FP's and large daily updates are still an issue IMHO, even though they have supposed to have improved things. But, a price worth paying maybe.
This is a very difficult question to answer because there can be many versions of the same Trojan in circulation at any one time and finding out which might be detected by whom is pretty near impossible. Additionally, different AV vendors do not name the files they detect in the same manner, so one might describe it as Zeus, and another as Zbot.
As the Trojan is almost impossible to detect from its files, the best way to see whether you are infected is to check the registry key HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit. Make sure that there is no ntos.exe in here. It it is, you are infected!!!
A complete removal is quite tricky as the files are rootkit-protected and cannot be easily deleted. However you can disable the trojan by removing the ntos.exe part (just that part!) in the above mentioned registry key. After a restart, the trojan will not be active. However the malicious files (protected by the rootkit) are still on the computer.
These removal instructions are courtesy of TrustDefender Labs at this address, and should only be followed by users with expert system knowledge.
http://www.trustdefender.com/blog/?s=yaludle
Anyone else should seek outside help unless their chosen anti-malware solution confirms it's detection AND removal.
I have a trojan infection and I can't get on the net to download any trojan removing programme (this is my husbands comp) as when I click internet explorer, it closes right away. It is removing some of my programmes and files and is going to kill me! My work is on my comp! Please, tell me a good trojan remover, whether I need to pay or not, that works on Vista. Is Spy Doctor any good? Will it remove a trojan? I'm not bothered by anti whatsit stuff, just something to remove the trojan that I can download from hubby's comp onto my memory stick, to upload onto my comp.
You could follow this guide.
http://www.techsupportalert.com/content/spyware-removal-guide.htm
"Spy Doctor" is almost certainly a rogue program, that means it is also a malware/virus. Spyware Doctor is a legitimate program, their website is here.
http://www.pctools.com/spyware-doctor/
But Malwarebytes Antimalware and Superantispyware are better for removing infections.
Definitely go with SuperAntispyware and Malwarebytes. I use them both with great success in removing infections.
How about a 'portable' anti malware? any recommendations?
See our Best Free Portable Programs page under Best Free Portable Anti-Malware for some suggestions.
any one knows, how to remove trojan horse generic.AHNS ? i have free avg edition, i scan the whole computer, delete it, and it appears again, it seems to have attached to my agp file, which is necessary file that runs my computer. How can i get rid of without deleting the agp file it once and for all?!
Maybe trying Unhack Me?
Malwarebytes' Anti-Malware goes along with XP to not only 2000 and Vista.
Does anyone know how to get rid of trojan.win32agent.azsy?
I have AVG anti-virus and its not detecting anything. However I am getting popups to block or ignore certain viruses. I don't know if its my AVG working or this personal anti-virus scan that just downloaded itself and now wont activate unless I pay 79.99.
Try SDFix.exe
Here are one set of instructions for removing this infection.
http://www.iobit.com/removal/remove-trojan-win32-agent-azsy.html
There will be others if you Google for them - just use the method you feel most comfortable with. After removing the infection I would also download and scan with the free version of a-squared which has an excellent detection rate for this type of malware. Just take care that something it finds is not a "false positive". After that, on the assumption that you received no warning for this infection from AVG I would ditch this in favor of either Avast! or Avira.
howw... um do u download itt?
Download what from where?
BOClean used to be an excelent anti-malware. Now it is part of Comodo Security Suite. It comes with anti-virus and firewall. They don't offer it alone.
Post new comment