HOW DO I KILL A TROJAN ON NT 4.0?

[arfjay]

According to my IP I have a Trojan or something in a NT 4.0 SP6 workstation that is busy sending out SPAM. I have tried to download several pieces of freeware and they will not run on this PC. Norton 2005 will have no effect on this OS apparently.

I have about a 4 hour 'window' during which I can shut this Computer down for scanning and eradication if I could find a program that worked on NT 4 SP6.

I have read the Forum and will try sophos later. My alternative is to build another machine however there is a proprietory piece of hardware in the original - I would rather eradicate first ... does anyone have any ideas?

Thank you

Ron

 

[dk87]

The first thing I would do is to look at what might be starting automatically. The easiest way to do this is download a utility called Autoruns from

http://www.sysinternals.com

and run it on this machine. If there is a worm it probably starts itself automatically and will show up in there. Since you said that many freeware programs do not work, you can also try looking at the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\Run to see if anything may have been dumped in there.