Trojan Remover examines all files and programs called at boot time from any Startup Group, including User Startup Groups. If it finds a file or program that it does not recognise it pops up an Alert box. If the file is called via a Windows Shortcut, the options available to you depend on whether Trojan Remover can locate the referenced file:
If the file exists, Trojan Remover will scan it to see if it contains Malware. If the file is suspect a warning will be displayed. Clicking on the Details button will open the Malware Reference Database and provide details on the Malware, if they are available.
Continue to allow this Shortcut to load as normal
Selecting this option will make no changes - the Shortcut will continue to load the file it references at boot time (so long as it exists).
Remove this Shortcut from the Start Group
Selecting this option will remove the Shortcut from the Startup Group from which it is loaded, thus preventing a call to the file it references. The logfile will be updated with details of this change.
This option is useful if you determine that a program or file being called does not actually exist on your system. Removing the Shortcut will eliminate the error you get each time you start Windows, stating that a file required by Windows is missing.
This is also a good option to choose if you are uncertain that the called file is Malware. If you later determine that the file is not a Malware file you can reinstate the Shortcut.
If the file can be located you will be presented with this additional option:
Remove this Shortcut and rename the called file
You should use this option only if you are sure that the program is in fact Malware.
Selecting this option will remove the Shortcut from the Startup Group from which it is called. Next Trojan Remover will attempt to rename the file referenced by the Shortcut. If the file cannot be located a warning will be displayed. If the file is called from more than one Startup Group, then Trojan Remover may already have renamed the referenced file.
Trojan Remover may not be able to rename the file immediately if the program is in memory. Most Malware files adopt this method to try to make their detection and removal more difficult. In this event, Trojan Remover will offer to reboot the system and then rename this file. If you do not accept this option and the program is a Malware file, it is highly likely that the program will immediately re-infect the system.
If the file is successfully renamed details will be written to the logfile.
Exclude this file from future scans
Choose this option if you no longer wish Trojan Remover to show an alert screen when this file is scanned. No action will be taken on the file. You should note that if you select this option, the file will continue to be excluded from future scans, even if, when such a scan is carried out, the file is no longer in-use/locked. If you select this option to exclude the file from future scans, you can arrange for the file to be re-included in future scans by selecting File > Manage Excluded Files from the main menu.
If the file is actually located in the Startup Group folder you will be presented with the following options:
Continue to allow this file to load as normal
Selecting this option will make no changes - the file will continue to be loaded at boot time (so long as it exists).
Prevent this file from loading by moving and renaming it
This is a good option to choose if you are not sure whether the file is Malware.
Selecting this option will move the file out of the Start Group in which it is located to the C:\Windows\System directory. As the file is called from the Startup Group it is quite possible that it is still in memory thus preventing its move. In this event Trojan Remover will offer to reboot the system and then move the file. If you do not accept this offer and the file is Malware it will simply continue to infect your system. If the file is successfully moved details will be written to the logfile.
Exclude this file from future scans
Choose this option if you no longer wish Trojan Remover to show an alert screen when this file is scanned. No action will be taken on the file. You should note that if you select this option, the file will continue to be excluded from future scans, even if, when such a scan is carried out, the file is no longer in-use/locked. If you select this option to exclude the file from future scans, you can arrange for the file to be re-included in future scans by selecting File > Manage Excluded Files from the main menu.
If you later determine that the file is not Malware you can manually move it back to the Startup Group directory from which it was originally removed.
You can select the required option by selecting the appropriate radio button and then clicking on the OK button.
Should the Malware be known to make system modifications and you elect to take action on it, Trojan Remover will offer to reset any changes made by the Malware.
[Main] 