Target platforms
Trojan Remover is designed for Windows 98, ME, 2000, XP and Vista. It is not currently compatible with any 64bit version of Windows. On 64bit machines the separate FastScan component is able to locate and scan system32 files and drivers.
Description
Trojan Remover aids in the removal of malware, including Trojan Horses, worms, adware and spyware, when standard antivirus software either fails to detect them or fails to remove them effectively. Standard antivirus programs are good at detecting this malware, but they are not always so good at effectively removing it.
Trojan Remover is designed specifically to disable and remove malware without the user having to manually edit system files or the Registry. The program also removes the additional system modifications some malware carries out, which are ignored by standard antivirus and Trojan scanners.
What Trojan Remover does
- Trojan Remover examines all the system files, the Windows Registry, and the programs and files loaded at boot time. The majority of malicious programs load this way once they are triggered.
- It scans all the files loaded at boot time for adware, spyware, remote access Trojans, internet worms and other malware. It also checks whether Windows loads services that are hidden by rootkit techniques and warns you if it finds any.
- For each identified Trojan Horse, worm or other malware, Trojan Remover pops up an alert screen that shows the file location and name. It offers to remove the program reference from the system files and lets you rename the file to stop its activation.
- Most modern malware programs are memory resident, which makes them harder to deactivate. Trojan Remover handles this for you. When it finds malware that is memory resident, it restarts your system on request and completely disables the malware before Windows restarts.
- Trojan Remover writes a detailed logfile every time it performs a scan. The logfile lists the programs that load at boot time and the actions the program carried out, and it can be viewed and printed in Notepad.
- The FastScan component is set to scan for malware every time you start your PC, and you can disable that if you wish. You can also run the FastScan by hand at any time from the Trojan Remover program group. It checks all program loading points, which makes it a quick and effective check for actively loading malicious programs.
- You can scan a whole drive, or any directory on it, by selecting Scan a Drive or Directory from the main menu, and you can scan individual files and folders from within Windows Explorer.
- Trojan Remover incorporates an integral updater for quick database updates, and you can use the Windows Task Scheduler to schedule automatic updates.
- The program comes with a comprehensive help file. Context sensitive help is also available for most screens by tapping the F1 key.
Screenshots and windows
| Window | What it is for |
|---|---|
| Main window | Run a scan, reach the program menu, and see the current database date. |
| Active Scan | Shows the progress of a scan as it works through the system. |
| Database | Lists the malware signatures the program is matching against. |
| Drive scan | Scans a whole drive or a chosen directory on demand. |
| Alert | Names the file that was found and offers to remove or rename it. |
| Updater | Collects program and database updates from the update servers. |
| FastScan | Quick check of the program loading points when Windows starts. |
Registration
The registration fee for Trojan Remover is US$24.00*. This fee covers all database updates and future program updates for one year from the date of registration. The fee for renewals in subsequent years is currently US$17.00. You can install Trojan Remover on up to 4 computers for the single registration fee.
You can register it online now through a secure server, or read the registration page for the full set of payment options.
* EU residents will also have to pay VAT at the standard rate applicable in their country.
Recent changes and improvements
-
Version 6.7.5
- Improved heuristic detection routines.
-
Version 6.7.4
- Added a new heuristic rootkit agent detection routine.
- Improved removal techniques for the TDSS rootkit.
- Improved heuristic detection for Trojan.VirtuMonde.
- Added a routine to reset the Windows Update Service when it has been disabled by Trojan.VirtuMonde.
- Added a routine to remove older Trojan Remover uninstall entries.
-
Version 6.7.3
- Added a new heuristic detection routine for modified rootkits.
- Improved removal techniques for embedded malware.
- Improved removal of malicious registry keys and values.
- Added scan timing information to the logfile and the active scan screen, so the total scan time is shown when a scan finishes with no alerts.
-
Version 6.6.5
- Added a new heuristic detection routine for Adware.NaviPromo files.
- Improved detection of usermode rootkitted files.
- Added routines to remove hidden registry keys and values during a PC restart if they cannot be removed normally.
- Added information on whether UAC is enabled or disabled in Windows Vista and Server 2008.
-
Version 6.6.4
- Added a routine to check for restrictive Windows Explorer policies and remove any that are found.
- Added a new heuristic detection routine for Downloader.Agent.AWF and Trojan.Zonebac.
- Added routines to restore program files replaced by that malware when the backup files can be located.
- Added a debug option to the FastScan program for diagnosis by Simply Super Software.
- Removed the program dependence on the external Microsoft GDIPLUS.DLL file so the program runs on Windows 9x and 2000 without it.
-
Version 6.6.3
- Added a new heuristic detection routine to detect Worm.Zhelatin files.
- Added a scanning routine that checks the temporary files directory when active malware is found loading.
- Updated the FastScan program to locate and scan system32 files and drivers on 64bit machines.
The program help file can also be read online at the Simply Super Software help pages. A UK mirror site is available if the main download server is busy.
Further reading
Reference material that explains the malware families and Windows features this page describes.
- Trojan horse in computingThe definition of a Trojan and how it hides.
- Computer wormSelf replicating malware and its spread.
- SpywareMonitoring software and data collection.
- AdwareAdvertising software and browser changes.
- RootkitHow services and files are hidden from the system.
- Windows RegistryWhere malware often leaves its loading points.
- MD5The signature method some monitors use to identify a program.
- Safe modeThe Windows startup mode Trojan Remover avoids.
- Microsoft Safety ScannerA Microsoft on demand scanning tool.
- Microsoft Windows lifecycleSupport dates for the Windows versions we target.