Copyright (c) 1999-2004 Simply Super Software - All Rights Reserved
------------------------------------------
CONTENTS
-------------------
1. Target Platforms
2. Description
3. What's New
4. Program Updates
5. Technical Support
6. Known Issues
7. Disclaimer
------------------------------------------
1. Target Platforms
----------------------------
Trojan Remover will run on Windows 95/98/NT/Millenium/XP. It is being successfully run on Windows 2000 by many users but formal testing on that platform has not been carried out.
------------------------------------------
2. Description
----------------------
Trojan Remover was written to aid in the removal of Trojan Horses from a computer when standard anti-virus software has either failed to detect the Trojan Horse or is unable to effectively eliminate it.
The majority of Virus and Trojan scanners are well able to detect malicious Trojan Horses but are not very efficient in removing them if they have already been triggered. Trojan Remover was written specifically to carry out such a removal without the user having to manually edit system files, including the Windows Registry.
Trojan Remover also removes the additional system modifications some Trojans carry out which are ignored by most other Virus and Trojan scanners.
What Trojan Remover Will Do
-----------------------------------------------
a) Trojan Remover will examine all the system files, including the Windows Registry and determine the programs and files that are loaded at boot time. The majority of Trojan Horses (once active) are loaded this way. Trojan Remover can be set to carry out these checks automatically each time the computer is started.
b) Trojan Remover will attempt to identify the file in question. If it is a known system file required at start up a note will be placed in the logfile. If the name is identical to a known Trojan Horse name a warning will be issued.
c) For each identified Trojan Horse, or unrecognised program or file, Trojan Remover will pop up a screen showing the file location and name, offer to remove its reference from the system files and allow you to rename the file if you request it.
d) If the file being called exists on the system, it will be scanned to see if it contains a Remote Access Trojan. If one is discovered, Trojan Remover will issue an alert.
e) Trojan Remover will on request remove all the modifications carried out by those Trojan Horses which make system changes.
f) Most modern Trojan Horses are activated as soon as Windows starts thus making their renaming more difficult. Trojan Remover can, on request, reboot the system and rename these files before Windows restarts. When this option is chosen, the Windows system files are set to read-only to prevent re-infection. The read-only attribute is removed when Trojan Remover has restarted the system.
g) Trojan Remover will examine the autoexec.bat file to search for suspect DELETE, DELTREE or FORMAT command lines. It will also search for and disable if necessary the entries that KAKWorm make in this file.
h) Trojan Remover will write information to a logfile each time a new Scan is activated. This logfile will contain detailed information on which system areas were checked, which programs/files are loaded at boot time and what (if any) actions were taken. The logfile is viewable from the Main Menu.
------------------------------------------
3. What's New
-----------------------
Version 6.3.1 - 5th October 2004
--------------------------------
a) Added a routine to manually reset the HOSTS file, which sometimes has malicious/annoying IP Address re-directs added to it by various malware.
b) Modified the routine for scanning/fixing the AppInit_DLLs registry entry on Windows XP systems. Certain Adware/Spyware using this method to load protect the entry, and the associated DLL, by continually re-writing it. The DLL hides itself from all running processes. If Trojan Remover suspects the presence of such a hidden DLL, it will offer to re-write the AppInit_DLLs entry completely, and disable any associated DLL during the computer restart process.
Version 6.3.0 - 22nd September 2004
-----------------------------------
This is primarily a maintenance release:
a) Improved the way certain Adware files are disabled; some immediately re-write themselves. Where this is known, Trojan Remover is now set to disable such files during the reboot process.
b) Hopefully fixed the intermittent Access Violation that appears when the Scan button is pressed. Should anyone still experience this error please let us know.
c) Fixed a bug in the Drive/Directory screen. Previously, when the 'Stop' button was scanned, the 'Pause' button was not disabled.
d) Updated the help files.
Version 6.2.9 - 27th August 2004
--------------------------------
a) Added a new utility to the Utilities menu which can be used to reset default Internet Explorer Home, Start and Search pages. It also resets any Policy Restrictions that may have been created. This utility can be useful if Adware/Spyware has altered these settings.
b) Added a "Pause" button to the Drive/Directory scan. This type of scan can now be paused and then restarted.
c) Added Digital Signatures to Trojan Remover's installation files and main Program components. This makes it easier to verify that the files have been produced by Simply Super Software and have not been tampered with.
d) Added routines to the integral Updater program so that it can be used in conjunction with the Windows Task Scheduler to allow automatic checks for updates. Information on how to set this up has been included in the updated Help File. To see this, start Trojan Remover and click on 'Help > Contents' in the main menubar. On the Help screen, select 'Updating > Scheduling Automatic Update Checks'.
------------------------------------------
4. Program Updates
--------------------
Trojan Remover contains an integrated updater. To check for both Program and Database updates, start Trojan Remover and click on the "Update" button on the main menubar. If there is an update available you will be able to automatically download and install it.
You can manually check for updates of Trojan Remover at:
http://www.simplysup.com
All updates are free to registered users.
------------------------------------------
5. Technical Support
---------------------------------
Should you have queries concerning the use of Trojan Remover these can be addressed to support@simplysup.com. Support will be limited to the use and operation of Trojan Remover.
------------------------------------------
6. Known Issues/Conflicts
--------------------------
(1) You should temporarily disable any memory-resident virus scanner (such as AVP Monitor, McAfee System Scan, Nortons Active Monitor etc) before running scans with Trojan Remover. When Trojan Remover opens a file to scan it, if another antivirus program is running it could conflict with Trojan Remover. You can re-enable your standard antivirus scan after Trojan Remover has completed its own scan.
(2) When running cpu-intensive background programs such as Seti@home and the United Devices distributed computing project, Trojan Remover's scan speed can be substantially degraded. You should consider temporarily disabling such programs before running a scan.
------------------------------------------
7. Disclaimer
--------------------
SIMPLY SUPER SOFTWARE DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO TROJAN REMOVER. THE END-USER ASSUMES ALL RISK AS TO THE SUITABILITY, QUALITY, AND PERFORMANCE OF TROJAN REMOVER. IN NO EVENT WILL SIMPLY SUPER SOFTWARE BE LIABLE TO THE END-USER FOR ANY CONSEQUENTIAL, INCIDENTAL, INDIRECT, SPECIAL OR EXEMPLARY DAMAGES (INCLUDING DAMAGES FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF DATA OR BUSINESS INFORMATION, AND THE LIKE) ARISING OUT OF THE USE OF OR INABILITY TO USE TROJAN REMOVER OR ACCOMPANYING WRITTEN MATERIALS, EVEN IF SIMPLY SUPER SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
SIMPLY SUPER SOFTWARE'S LIABILITY TO THE END-USER (IF ANY) FOR ACTUAL DIRECT DAMAGES FOR ANY CAUSE WHATSOEVER, AND REGARDLESS OF THE FORM OF THE ACTION, WILL BE LIMITED TO, AND IN NO EVENT SHALL EXCEED, THE AMOUNT ORIGINALLY PAID TO SIMPLY SUPER SOFTWARE FOR THE LICENSE OF THE SOFTWARE.
SIMPLY SUPER SOFTWARE DOES NOT WARRANT THAT TROJAN REMOVER WILL SATISFY THE REQUIREMENTS OF YOUR COMPUTER SYSTEM OR THAT TROJAN REMOVER OR ITS DOCUMENTATION ARE WITHOUT DEFECT OR ERROR OR THAT THE OPERATION OF TROJAN REMOVER WILL BE UNINTERRUPTED.
