Trojan detection methods?

Post Reply New Topic

A buddy of mine recently got his WoW account ripped off. He didn't go to any sites and enter any of his information, so I'm thinking trojan or keylogger. I offered to help.

The problem is that I can't actually find anything! I've scanned with Spybot S&D, AVG, gmer, and browsed his registry with HijackThis. Nothing at all! Everything is normal. I then looked at file creation over the last week, and found nothing. Then I looked at files modified over the last week and found nothing.

Seems pretty clear! I'm not satisfied yet, and I'd like to try something new. I'm just not sure what though.

I want a method that helps me tell if there is a trojan or a keylogger of some sort. I don't care about detecting the name of it and all, I just want to be certain there isn't anything there. Running 5000 different programs to detect intrusive software isn't up my ally, because they could be wrong. I want something that wont be wrong!

Any ideas?

Google tells me about Trojan Remover. Or you could try Backtrack Linux (livecd, it doesn't install anything) to do a full security test and find what vulnerabilities your friend has.

I never understood why a Trojan is called a "Trojan"; if this refers to so-called Trojan-Horse of the Illias it should be called "Greek" (as explained in this scene of Yes Minister after 02'55):

[youtube]http://www.youtube.com/watch?v=zL_m5Czneno[/youtube]

(Loved that clip! Also like "The New Statesman" with Rick Mayall.)


Anyway, the reason i think it is called a trojan horse is that the Trojans recieved a gift and accepted it because they thought it was a legitemate gift, such as a peace offering or something.

I also think it was not much the point of who gave what to who, but more the event that took place - a "trojan horse" were presented to the people at Troja, which accepted it, and with it came a mallicious payload (soldiers). If it had been presented at, say Constantinople, it would could just as well have been called a "Byzantine horse".

If it was a rabbit or a badger....