Recovering from a Trojan Horse or Virus

US-CERT is charged with providing response support and defense against cyber attacks for the Federal Civil Executive Branch (.gov) and information sharing and collaboration with state and local government, industry and international partners. US-CERT interacts with federal agencies, industry, the research community, state and local governments, and others to disseminate reasoned and actionable cyber security information to the public.

All IT Downloads from US-CERT » | Visit US-CERT »

From US-CERT | Dec 19, 2011

It can happen to anyone. Considering the vast number of viruses and Trojan horses traversing the Internet at any given moment, it’s amazing it doesn’t happen to everyone. Hindsight may dictate that you could have done a better job of protecting yourself, but that does little to help you out of your current predicament. Once you know that your machine is infected with a Trojan Horse or virus (or if your machine is exhibiting unexpected behavior and you suspect that something is wrong), what can you do?

If you know what specific malicious program has infected your computer, you can visit one of several antivirus websites and download a removal tool. Chances are, however, that you will not be able to identify the specific program. Unfortunately your other choices are limited, but the following steps (Trojan Recovery.pdf) may help save your computer and your files.

Included in this zip file are:

• Intro Page.doc
• Terms and Conditions.pdf
• Trojan Recovery.pdf

Related IT Downloads

• 

  Top 10 Sources of Viruses - October 2009

  RESEARCH

  This table is taken from Network Box's report on Globalization of Malware Production.

• 

  Guide to Computer Security Log Management

  TUTORIALS

  Log data must be secure and your team must closely monitor it.

• 

  Protecting Your Passwords

  TUTORIALS

  Is your password all it can be? Better check.