How to Remove a Trojan Virus

A Trojan virus is faulty computer program that can infect remote computers by changing the desktop or deleting important files. Generally called a Trojan Horse, it appears as a legitimate file or software from a trusted source, therefore tricking users into opening it or downloading it. Take action and protect your personal computer files by learning to delete this Trojan virus.

Difficulty: Moderate

Instructions

1. Reboot your computer if you have a Mac. Do this by holding down the "Shift" key while the computer restarts itself.

2. Launch an antivirus program that you should have installed on your computer, such as Symantec's Norton or McAfee. Wait for the program's window to appear, then go to "Disk View." Highlight your computer, then select "Scan/Repair" so that the antivirus can detect the Trojan and trash it.

3. Exit the antivirus program on your Mac. Restart your computer again to ensure that the Trojan has been deleted. Empty the trash can on your computer once it is back up and running.

4. Disable the System Restore feature if you're a Windows user. Go to "Start" at the bottom of your screen, then right-click the "My Computer" icon to go to "Properties." Check "Turn off System Restore" under the System Restore tab in the "Properties" window, then select "Apply." Confirm that you want to disable System Restore by clicking "Yes" and "OK."

5. Update your virus definitions in your antivirus program. Open the program, or go to the website, to download the latest definitions so that you can receive the most recent alerts and keep your computer protected.

6. Scan your files to detect the Trojan file. Follow the instructions in your antivirus program to delete any suspicious files. You may want to write down the path and file name of the Trojan, which is usually found in the "C:\" hard drive. Then, edit your computer's backup registry by choosing "Start," then "Run." Type "regedit" in the window that appears and click "OK."

7. Search for the registry entry from which the Trojan derived, which may begin with "HKEY" followed by the file path. Delete the registry entry to ensure that the Trojan is removed. Exit the registry entry, and restart your computer so that the changes can take effect.

Tips & Warnings

• After you've removed the Trojan and restarted your computer, remember to turn the System Restore function back on. Follow Step 4, then uncheck "Turn off System Restore," then "Apply." Confirm that you want to turn on the feature, then hit "OK."

[boricuamama]

on 3/12/2009 The Mcafee virus program I have kept detecting the trojan and supposedly quarentined it but never really removed it. So, I followed the steps in this article and it work!! I was able to find the trojan file and delete it. Thank you!!