1. Home
  2. Computing & Technology
  3. Antivirus Software
Mary Landesman
Mary's Antivirus Software Blog

By Mary Landesman, About.com Guide to Antivirus Software

What’s a Trojan Horse virus?

Wednesday May 31, 2006
I came across this gem on the Visa website:
Trojan Horse virus
What’s a Trojan Horse virus?
A Trojan Horse is an email virus usually released by an email attachment. If opened, it will scour your hard drive for any personal and financial information such as your social security, account, and PIN numbers. Once it has collected your info, it is sent to a thief’s database.

Now, there are Trojan Horses and there are viruses, but there's no such thing as a Trojan Horse virus. In fact, the very definition of each precludes any chance of there being such a thing. A Trojan does not replicate. Viruses do. That fact alone means there can never be a "Trojan Horse virus".

The Visa description continues with, "A Trojan Horse is an email virus usually released by an email attachment." Not so. A Trojan may be sent as an attachment in email, but it's certainly not an email virus. (In fact there are few true email viruses, but that's a whole other topic). So it may or may not arrive in email, and it's equally likely to have been downloaded from a website or resulted from a P2P file transfer. In other words, vector has nothing to do with whether something is or isn't a Trojan.

Just what is a Trojan then? A Trojan is a program that appears to be legitimate, but in fact does something malicious. Quite often, that something malicious involves gaining remote, surreptitious access to a user's system. Unlike viruses, a Trojan does not replicate (i.e. infect other files), nor does it make copies of itself as worms do.

There are several different types of Trojans. Some of these include: remote access Trojans (RATs), backdoor Trojans (backdoors), IRC Trojans (IRCbots), and keylogging Trojans. Many Trojan encompass multiple types. For example, a Trojan may install both a keylogger and a backdoor. IRC Trojans are often combined with backdoors and RATs to create collections of infected computers known as botnets.

But one thing you probably won't find a Trojan doing is scouring your hard drive for personal details, as the Visa description alleges. Contextually, that would be a bit of a trick for a Trojan. Instead, this is where the keylogging functionality most often comes into play - capturing the user's keystrokes as they type and sending the logs to the attackers. Some of these keyloggers can be pretty sophisticated, targeting only certain websites (for example) and capturing any keystrokes involved with that particular session.

But why is it important to know the difference between a virus, a worm, and a Trojan? Because a virus infects legitimate files, thus if antivirus software detects a virus, that file should be cleaned. Conversely, if antivirus software detects a worm or a Trojan, there is no legitimate file involved and action should be to delete the file.

Comments
May 31, 2006 at 7:29 pm
(1) EAguer says:

After a recent incident ,an unknown entity trying to download a bank command into my computer to get my bank accounts information, I suspended all Internet banking operations.
It does not make sense the financial institutions to secure their systems if the weak link in the security is me ,and I do not have or will have the means to secure my computer.Also I concluded that is logically and physically imposible to secure any computer system.

June 5, 2006 at 9:45 pm
(2) Maryellen Jones says:

I read your explanation of Trojan several times. But I still don’t know what to do with a trojan. Your instructions say “delete the file”. How will I know which file to delete? How will I recognize the trojan? If my antivirus doesn’t quantine the trojan, how do I protect my computer from it.

Your article is full of information, but I haven’t a clue what to do with the information. Could you write something in plain English, please?
submitted respectfully,

June 6, 2006 at 12:52 pm
(3) Mary says:

“…if antivirus software detects a virus, that file should be cleaned… if antivirus software detects a worm or a Trojan (the) action should be to delete the file.”

When the antivirus software detects the threat, it may prompt your for an action. Choose ‘clean’ for viruses, and ‘delete’ for worms and Trojans.

June 8, 2006 at 2:25 pm
(4) Sharon says:

I contracted the BackDoor-AWV virus, even though I have McAfee Suite installed and current. I cannot Delete, Quarantine or Remove. McAfee warns me that the virus is present, but cannot help with the removal, nor does it recognize the name when I enter the name on their customer support site. Any suggestions?

June 8, 2006 at 8:18 pm
(5) Ms. Truschel says:

Not the most lucid explanation I’ve ever read.
If folks didn’t have a pretty good idea what viruses, Trojan horses, and worms were before they read this explanation, they sure didn’t pick up much from this piece.
I think you know what you’re talking about, but you could have expressed yourself a lot more clearly.

June 9, 2006 at 1:24 am
(6) Mary says:

I am sorry you are having difficulty understanding the material. Perhaps if you can explain just what part of it you did not understand, I can better respond to your comments. You may find “What is a Virus of help.

June 9, 2006 at 1:29 am
(7) Mary says:

Hi Sharon,

If you can, please post your question to the antivirus forum. That way, other members will benefit as well. Plus, it may take a bit of back and forth to resolve your issue, and that’s outside of the scope of this comments section. :-)

June 9, 2006 at 6:18 am
(8) Terry says:

So a infector is a worm or virus?

June 9, 2006 at 12:24 pm
(9) Andrew says:

I found the info fairly informative although I need to know a lot more in this area. As the lady said, if your computer says I have a Trogen, how do I know which file(s) it is in so that I can only delete those affected files. I am also interested in knowing more about GAIN.exe and other support cookies regarding which one’s do I have to use and need and which one’s will be a problem for me. I have accessed some websites on them, but found myself bogged down in unfamiliar information. I plan on signing up for your website for a while. This might help.

June 12, 2006 at 10:19 am
(10) Bill says:

The article was well written and totally understandable. Thank you!

June 16, 2006 at 12:16 pm
(11) Holly says:

Thanks for the article. I got a trojan horse and was able to delete the file using Avast! antivirus software, but now I cannot get onto the internet.. I’ve tried unplugging the modem and plugging it back in as a friend advised, but it didn’t help.. any suggestions?

September 21, 2006 at 9:54 am
(12) Keetta says:

I found this article to be very informative. I THINK I got rid of the Trojan last night using AVG, but I’m afraid that it will return. Is that possible? Is it ok to have more than one anti-virus agent for extra protection?

March 11, 2008 at 9:43 pm
(13) John says:

of course it can always be a good thing to have more than 1 program for virus protection, i reccommend the following ones:

spybot – search & destroy (free download)
ad-aware SE personal (free download)
webroot’s spysweeper (costs $40 for 2 years, it really is the best thing out there in my opinion. worth the money)

the main place you’re gonna get those viruses (of course you’ve heard it a million times) porn, and downloads from ’suspicious’ sites. limewire of course, but that’s really only if you’re not careful about how you use it. bottom line, stop downloading so many odd/illegal programs/videos/pics/porn/songs

(i’m a hypcrite myself on that part, lol. but i know what i’m doing.)

March 11, 2008 at 9:44 pm
(14) John says:

*hypocrite

September 28, 2008 at 10:37 pm
(15) Laina says:

I have my antivirus software find two trojan viruses today and two a couple weeks ago and it says it quarantined them. They were in my temporary internet files. I deleted these files after finding out that’s where my antivirus software found them but, should I do anything else?

November 10, 2008 at 7:06 am
(16) jhenyfer says:

i have this trojan horse downloader agent that infects my system, i have it scanned and removed everytime the AVG detects threats from it but now that i have idea that this virus came from a website for downloading games, does this mean i cant download anything on that site anymore? can i just healed the virus and install the game to my computer anyway? thanks..

December 3, 2008 at 8:59 pm
(17) Aejey says:

I’m currently writing a case study on this topic and trying to understand it, therefore starting from scratch. can these trojans be found on social networking sites? If so, do you happen to know any specific ocurences in the past where this has been proven an issue?

January 2, 2009 at 4:13 pm
(18) lisa says:

My computer just detected a trojan and said that disinfect was recommended; when I click okay it said that it could only rename it .. but I have just scanned my computer and its not picking anything up. does this mean its still there? and can the trojan tamper with my anti virus software so that it doesn’t show up?

January 2, 2009 at 11:54 pm
(19) this says:

there is such thing as trojan horse i almost got infected with it on myspace good thing i have avast and it stoped it from anything from downloading : )
but if you want to check it out go to FIND FRIENDS then look for this name Proxy – “spotproxy.com”. TROJAN HORSE IS REAL BE ON THE LOOK OUT OK

January 3, 2009 at 12:08 am
(20) this says:

this has nothing to do with this but if anyone can help me with the name of this virus

discription: thing comes out of egg; starts growling; makes a hole in the backround;and destroys my computer.

please help

January 21, 2009 at 9:51 pm
(21) lexa says:

what is an example of the trojan virus??

March 18, 2009 at 1:44 am
(22) Nik says:

well well well its not a virus aye well thats what it’s called so ummm i presume it it 1

April 1, 2009 at 10:25 pm
(23) Krystin says:

It says I have a Trojan virus on my iPod but idk how I could recieve an email virus on it when I have not used it for email.

April 3, 2009 at 9:30 am
(24) Mary Landesman says:

As the topic of the article discusses, a trojan isn’t a virus. So one cannot have a trojan virus. I’m not sure what the email question is regarding. Malware spreads via many vectors. An iPod is pretty much just a portable hard drive with specialized software. If you can transfer files onto something, you can transfer malware as well.

April 8, 2009 at 11:23 pm
(25) brad says:

A Trojan virus attached to my flash drive after I used it on an infected computer. If a Trojan does not infect other areas, how is this possible? The exact name was “Trojan horse Dropper.Generic.ZMN” I have scanned my computer several times and it’s not on my computer. So why would it transfer to a flash drive and not a computer?

April 9, 2009 at 11:50 am
(26) Andrea says:

my mom says that Trojan infestation, but can you honestly know what to look for when trying to find the source of the infestation?

April 18, 2009 at 11:25 pm
(27) Jennie says:

this is all very confusing.
today someone got into my hotmail account and e mailed all of my contacts using my name as the sender… the only reason i knew this is because I have another screen name and it is on my contact list as well. so I was shocked to see mail from myself. how did they do this??? and what is this called and how do I prevent this from happening again.
I have AVG and when i scanned my pc it did not show anything odd except cookies. So what do I do now????

April 21, 2009 at 9:04 am
(28) BJ says:

Okay, I did a scan and I have 32 viruses. I have disconnected the iternet already, but not sure what to do know. Is there anyay to get rid of it wihout getting an antivirus? I need some help and fast.

April 27, 2009 at 2:32 pm
(29) Aaron Baker says:

Hi

April 27, 2009 at 2:33 pm
(30) w/e says:

B-)

May 6, 2009 at 3:17 pm
(31) Geoff Powell says:

Last week the computer flashed up on the Screen TROJAN in very large letters.This was accompanyed by a verl lound Klaxon sound from the computer.Does this mean that the Trojan has breached the computers defense system.?
All seems to be operating as Normal

May 25, 2009 at 5:42 pm
(32) Leah says:

theres a serious problem with my computer. ok so i start it up and the dell screen comes up. then it says that windows did not start successfully and that i should select last known good configuration. so i pick that and a blue screen comes up and it says that there is a problem on my computer and it needs to be shut down to protect my computer. i have no idea whats wrong with it but i cant get past the blue screen. if anyone has even the slighest idea how to fix this problem i would really appreciate it. thanks:)

June 11, 2009 at 10:37 pm
(33) dar says:

i have a trojan virus on my computer,it will not let me delete it & when i tried to use your free virus removal tool,it blocks me,i just want this to be deleted from my computer

June 20, 2009 at 3:10 pm
(34) Rawr!? says:

Trojan needs to Die. D:

June 29, 2009 at 3:46 am
(35) Lindsey says:

Tonight my computer was infected with “Trojan.Win32.Agent.azsy” what is that? It says it copies its body to the current user’s window startup directory and attempts to steal passwords. We have 385 threats. What should I do? Could I have gotten this from a website, because it all came up right after I had clicked on a Site about Farrah Faucets death. Our Pc has been running a little slow, so we had already thought that something was going on. So Please tell me what you think! I am scared and in need of desperate help. Thanks

September 7, 2009 at 8:30 am
(36) BlackCharizard says:

it also diguised as a game or something like that

September 7, 2009 at 8:32 am
(37) BlackCharmander says:

my antivirus is kaspersky that is a nice antivirus

Leave a Comment

Line and paragraph breaks are automatic. Some HTML allowed: <a href="" title="">, <b>, <i>, <strike>

Explore Antivirus Software
About.com Special Features

Holiday Central

What to eat, where to go, fun things to do and how to save money on the perfect gifts. More >

Family Tech Center

Stay connected and entertained with reviews on tips on the latest HDTVs, cellphones and more. More >

  1. Home
  2. Computing & Technology
  3. Antivirus Software

©2009 About.com, a part of The New York Times Company.

All rights reserved.