When Trojan Remover finds a suspect command line in the AUTOEXEC.BAT file an Alert screen will be shown. Suspect lines are defined as follows:
·
Any line beginning with DEL
·
Any line containing the word DELETE
·
Any line containing the word FORMAT
·
Any line containing the word DELTREE
The Alert will show the actual suspect line being examined.
You will be presented with the following options:
Leave this line in place, and suppress future alerts on it
Choosing this option will mean that Trojan Remover will allow the line to remain active in the Autoexec.bat file. Further, Trojan Remover will record the line - for all subsequent scans, Trojan Remover will *not* raise an alert for this line. This is useful for users who use DELETE commands in the Autoexec.bat to remove temporary files on a regular basis.
If you wish to re-enable alerts on this line, select 'Options > Reset Suppressed Autoexec.bat Alerts' from Trojan Remover's main menubar (this option will be greyed out if Trojan Remover is not currently suppressing any alerts).
Leave this line in place
Choosing this option will mean that Trojan Remover will take no action. The line will remain active in the Autoexec.bat file.
Prevent this line from being executed by commenting it out
Trojan Remover will place a REM comment at the start of the suspect line, thus preventing it from being executed. This is the safest option to choose because if it is later determined that the line was required then it can be reinstated simply by removing the REM comment.
Prevent this line from executing by removing it
Trojan Remover will delete the line from the Autoexec.bat.
Should Trojan Remover make any modifications to the Autoexec.bat file it will save the original file as AUTOEXEC.TR. This file can then be used for recovery purposes if required.