Trojan Horses

xtrustno1x

Kinky.
Joined
Jan 4, 2004
Messages
392
Age
41
Location
Texas
I have SpySweeper on my computer, and I run it almost every day. Today, I noticed a Trojan Horse, Mantice, pop up. I deleted it and everything, then ran SS again, but it still shows up. Does anyone know of another program that might rid my computer of this, or do I need to take more drastic measures?...
 
Yeah spysweeper...I know where you're coming from. I just started using it recently myself. It seems to find stuff other programs don't.

This can mean a lot of things. It can mean they're finding false positives. It can also mean it's a damn fine program that finds things other programs miss. I haven't made up my mind about it yet.

There's another program called pest patrol that's similar. It also identifies Mantice. You can find what I think is an evaluation version for home users here pest patrol or get an online scan. It won't clean anything unless you buy the program, but it will tell you if they also detect Mantice.

There's another free trojan scanner called A2. It isn't quite as twitchy (picky?) about the stuff it finds. You can get a free home-user version of the program here A2 anti-trojan scanner . I think it will attempt to clean the trojan, if it finds it.

There's a commercial trojan scanner-cleaner I've often heard recommended, called Trojan Hunter. You can download a free trial version here Trojan Hunter Trial. I'm hoping the trial version will clean as well as identify.

If none of this helps, there is a forum I know of that will help you clean trojans manually. You have to register. If they decide to help you they will probably ask you to download a program called Hijack This, and post a log. Find the forum here Spywareinfo.com Trojan Cleaning

BTW are you the person who posted this

Same Mantice Question at the fagfarm forum?
 
I checked out those sites you mentioned. Downloading the A2 program right now to see if it'll clean up the Trojan. I'm not really savvy on adware programs and such - I know you can get them from downloading other programs and such - but can you also get them by simply going to a website? Or can they install themselves on your computer? I haven't downloaded anything in awhile, but I keep getting new adwares on my computer. I'm going to sign up on the forum you linked me to, as well. And, nope, that question wasn't from me, although I did come across it earlier today while looking for removal programs. Thanks bunches for the help, Nerd!
 
Yeah, there's lots of good info on that site. It should help. I can start you off though.

Adware just delivers ads to you.

Spyware logs what you do online and sends the info home.

The line between spyware and what's commonly called a trojan gets fuzzy, because spyware meets the definition of a trojan. It doesn't self-replicate, and it downloads secretively or by deceptive means. The main difference between what's generally called spyware, and what's generally called a trojan is Spyware seems to have a commercial motivation.

A spyware trojan might do something like watch where you're going, and deliver ads to you based on what you watch. It would download those ads from a remote server. It might also change your homepage, and change your default search engine.

Mantice is something different. It's a backdoor trojan.

Trojans are programs (often malicious) that install themselves or run silently on a victims machine. They do not install or run automatically, but may entice users into installing or executing by masquerading as another program altogether (such as a game or a patch) or they may be packaged with hacked legitimate programs that install the trojan when the host program is executed.

Generally you click on something to get that kind of malware. For example you might get a message from someone on an instant messenger that says "click this to see some really cool pictures".

You're right by the way. It's possible to get malware by viewing an evil website. It's usually delivered by an Active X control if you use an insecure Internet explorer browser. Even previously secure browsers such as Firefox are now vulnerable if you click for a plug-in. This is usually commercial spyware that's delivered in this fashion. There are legal issues that commercial spyware has found a way around. Commercial spyware is legal, because they claim they warn you (sometimes it's a lie, but prove it).

New vulnerabilities appear to be popping up primarily affecting newer operating systems like XP that allow users to be exploited remotely. I was reading about one that can get you if you view WMF files. Then there's the sasser worm.

There's a scary thing about Mantice. I was just looking at a graphic of it's controller, and it appears to have a keylogger function. This means it can watch what keys you push and send the info home. Mantice also appears to able to take control of some of the functions of your machine. Mantice Controller

It's good to have a firewall that blocks outgoing messages; something like Zone Alarm. This way if anything unauthorized tries to call out, you can stop it. Some malware can shut your firewall down, but from what I can find on Mantice, it doesn't appear to do that.
 
I've just managed to get rid of all my Spyware by using 'SpyCleaner Pro' the free version will get rid of some programmes but not all, I just upgraded and bought it since it was only £15, a small price to pay for a faster, spyware and pop up free computer.

Adaware won't work, I tried several times with that and it said that it removed them and it didn't. There is a good site I go to for a lot of computer related things and one of their sections is on spyware. Try http://www.majorgeeks.com they have a list of different programmes you could use.
 
The way things stand right now, you have 3 separate kinds of Scanner-cleaners: Virus, trojan, and spyware.

A virus cleaner may clean some trojans or spyware, but it specializes in viruses and worms. A trojan cleaner may clean spyware, but it specializes in non-commercial trojans. The free spyware cleaners specialize in commercial spyware.

It's possible to keep all three malwares under relative control with free programs.

Viruses/Worms - AVG
Trojans - A2
Commercial Spyware - SpyBot and Adaware

You have to be careful if you're buying a spyware cleaner these days. What some crooks have been doing is putting another name on a free program like SpyBot, then selling it.

Some commercial spyware has gotten pretty clever. You clean it, then it comes back. When that happens, you'll probably have to go to an expert site such as Spywareinfo.com and manually clean it.
 
M'kay...I downloaded that message boards HijackThis program. Did what they told me to, just wating for a reply back to see if everything was cleared up. I just downloaded Ad-Aware, and I got this really long list of stuff. Do you think it's safe to just delete everything it has listed? And what exactly is a "regkey"? I'm assuming it has something to do with the registry...
 
If you just think of a regkey as a small piece of information in the registry, you should be OK.

Here's a definition of the registry:

the registry is a single place for keeping such information as what hardware is attached, what system options have been selected, how computer memory is set up, and what application programs are to be present when the operating system is started.

You say you ran a scan with adaware and it found a bunch of stuff it tells you is bad, and asks your permission to remove it.

Check your options in Adaware (just run your cursor over everything until you find something that says options). Click in there and make sure the program is set up to quarantine objects prior to removal. As I recall this is like a backup. You can restore anything in quarantine with Adaware, I think. Don't quote me on that. Look it up in their help file to double-check.
 
Back
Top Bottom