LiveUpdate Locked-Can’t Update Symantec Antivirus How to Update to Office 2007
Jan 06

How Do I Get Rid of a Trojan

Recently, Windows Live Messenger users have been the target of a Trojan that installs a bot on the host computer. Windows Live Messenger user will receive a zip file called “pics”. The file is actually an exe (executable) file that will install a bot.

Just Don’t Click

This Trojan will send the bot file to other users in the contacts list of Windows Live Messenger. Normally you can trust a file from a person on your contact list, but no more. By the way, the same goes for email–don’t click attachments unless your are sure of the source.

Trojan: A destructive program that masquerades as a benign application.
source: Webopedia.com

Once the file is clicked, a bot is installed on the host computer. The bot will will turn the host computer into an email spam machine. This bot is hard to detect. In fact, Norton, Spybot, and Ad-aware are not able to detect of delete the bot. You may not notice anything until your ISP sends a notice that there is an unusually high amount of outbound email traffic.

bot: Short for robot, a computer program that runs automatically.
source: Webopedia.com

How to Get Rid of a Trojan

If you have a bot, do a little research on the internet. You may be able to remove the bot fairly easily. Some bots a inbeded deep in the operating system and in the registry and may be difficult to remove.

Note: If you get the Windows Live Messenger Trojan, notify all your contacts that they may be infected.

The best way to delete a Trojan, after running any anti-virus software, or trying to remove the bot, is to wipe the hard drive and reload the system. Reloading the computer is a major job but it is the only way to fully ensure that the Trojan/bot is gone.

When I work on a computer that is infected with a bot, I will:

  • Back up the hard drive/data
  • Check the back up to ensure it is good
  • Wipe the hard drive at least once
  • Install the operating system and programs

This method ensures that the bot is completely gone. Take this opportunity to clean the inside of your computer and update the BIOS and update your programs.
Get you own signature


Print This Post Print This Post      

3 Responses to “Windows Live Messenger ZIP File with Trojan–bot”

  1. Navin Says:

    Hi Jim,
    could I add my link on how to deal with the conditions like you stated.
    here is the link
    http://www.meroguff.com/2008/01/latest-msn-messenger-wormvirus.html

    and, If I were you, I would be sticking out with my operating system
    and try to clear the nuts out of my system..
    don’t you think it’s bit hassle to go through all re-setup again ?

    regards

  2. Jim Says:

    Navin,
    Thanks for the link and good info there.

    Sometimes it is easier to just reload a system than trying to figure out all the issues. This was my kids computer and they were due for a reload. Besides, I keep a good Ghost image of my systems, so it only took about 30 minutes to reload.

    pcguy

  3. Navin Says:

    Yeap, Ghost image are another perfect solution :) Keep the posts flowing Jim

Leave a Reply

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word