Trojan Remover examines all major keys in the Windows Registry that can be used to call a program or file at boot time. If it finds a program being called that it does not recognise it pops up an Alert box. The options available to you will depend on whether Trojan Remover can locate the referenced file. Select the required option by clicking on the appropriate radio button and then clicking on the OK button:

 

If the file exists, Trojan Remover will scan it to see if it contains Malware. If the file is suspect a warning will be displayed. Clicking on the Details button will open the Malware Reference Database and provide details on the Malware, if they are available.

 

If the file can be located you will be presented with the following options:

 

Continue to allow this program to load as normal

Selecting this option will make no changes - the program will continue to load at boot time (so long as it exists).

 

Prevent this program from running by removing its reference

Selecting this option will remove the call to this program from the Windows Registry. The logfile will be updated with details of this change.

This option is useful if you determine that a program or file being called does not actually exist on your system. Removing the reference will eliminate the error you get each time you start Windows, stating that a file required by Windows is missing.

 

Prevent this program from running, and rename the program file

You should use this option only if you are sure that the program is in fact a Malware file.

Selecting this option will remove the call to this program from the Windows Registry. Next Trojan Remover will attempt to rename the file. If the file cannot be located a warning will be displayed.

Trojan Remover may not be able to rename the file immediately if the program is in memory. Most Malware files adopt this method to try to make their detection and removal more difficult. In this event, Trojan Remover will offer to reboot the system and then rename this file. If you do not accept this option and the program is a Malware file, it is highly likely that the program will immediately re-infect the system.

If the file is successfully renamed details will be written to the logfile.

 

Exclude this file from future scans

Choose this option if you no longer wish Trojan Remover to show an alert screen when this file is scanned. No action will be taken on the file. You should note that if you select this option, the file will continue to be excluded from future scans, even if, when such a scan is carried out, the file is no longer in-use/locked. If you select this option to exclude the file from future scans, you can arrange for the file to be re-included in future scans by selecting File > Manage Excluded Files from the main menu.

 

If the file cannot be located you will be presented with the following options:

 

Leave this reference in place

Choosing this option will mean that Trojan Remover will take no action. The file will continue to be called at boot time.

 

Remove this reference from the Windows Registry

Selecting this option will remove the call to this program from the Windows Registry. This option is useful if you determine that a program or file being called does not actually exist on your system. Removing the reference will eliminate the error you may be getting each time you start Windows, stating that a file required by Windows is missing.

The logfile will be updated with details of this change.

 

Remove this reference and rename the file (if it exists)

If Trojan Remover thinks that the file referenced does exist but may be stealthed (e.g. by a rootkit) then you will also be offered this option. If you choose it, the registry entry will be removed. Then an attempt will be made to rename the file. If it still cannot be located, a command will be set to attempt to rename the file during the next PC restart.

 

Should the Malware be known to make system modifications and you elect to take action on it, Trojan Remover will offer to reset any changes made by the Malware.

 

See also:

Alerts

Startup Group Alert Options