Hi,
You are taking a risk : depending on the type of trojan, if could carry and inject more malicious payload into your system, once you open the file. Depending on your AV, it may well detect and remove the original trojan, but not neccessarily the later injected payload (which could be worse than the original trojan).
If it was my decision, I wouldn't take the risk.
Regards,
Golden
@baxxter
If the AV says it contains a trojan, depending on the AV will depend on whether the program is blocked or not. Not always will it block the program immediately.
However, some AVs will indeed quarantine the file/program immediately, some will prompt you to remove it.
Sometimes, when you are prompted to remove it during its current program run, it will kill the process/program and delete the malicious part of it.
Usually it is best to run the program in a sandbox, so it does not damage your computer. Sandboxie is a good choice to use.
Usually an AV will detect the trojan, but it will be in the sandbox...then that will tell you if it is bad or good. In this case, you can decide whether it should be run normally on your computer. :)
The chances of a trojan corrupting the BIOS or even damaging your computer beyond control is actually very rare.
To sum it up...The AV will be able to detect it during run. Usually, it will also make sure it does not damage your computer as well, by blocking its additional actions.
There are many known good antivirus programs that have sandboxing powers.
If I recommend any, I would the following:
Kaspersky's Internet Security solutions are very powerful and will definitely protect your computer, being well worth the buy. It has its feature, "Safe Run" that will allow you to sandbox any program.
Also, Avast's products are good solutions to use. Avast's sandboxing powers are included in Avast! Pro, and Avast! Internet Security.
For free sandboxing abilities, Sandboxie is well worth using. :)
The very fact that you're having doubts about running the program because it might contain a trojan and are asking about it over here should be enough to prevent you from running the program at all in the first place. In other words: if you are unsure about a program, it is strongly recommended that you do not run it. In the end, it's your decision and your responsibility
If you want to check it, submit it to VirusTotal & see what they say about it.
VirusTotal - Free Online Virus, Malware and URL Scanner
If you're set on running this file, Sandboxing it is a good suggestion.
When your AV flags something as potentially dangerous, giving it the go ahead will generally allow it to install it's files, including malicious ones (provided it asked and didn't automatically delete it). The next time it boots, it may/may not flag them as dangerous since you put those files on the OK list.
It might be wise to heed everyone's warnings here. Yes, there are recovery methods, but most malicious viruses will disable those corridors and you may find yourself faced with a full re-install. Not to mention the fact that most viruses have a nasty way of rebuilding themselves and causing problems down the road if there's a fragment of them left somewhere, the result from a deep infection.
If I said its sure that the program has a trojan !Can the owner of the trojan remote my pc later(maybe by Ports) ?Or the AV (wich found it before) can make me safe by deleting it
No, the supplier of the Trojan will not be able to maneuver your PC remotely, coz torjans are not spy programs .
Still, you should follow the instructions that DragonMasterJay supplied .... open the program in sandbox.
It cannot be said with certainty that the AV will make you out of all the risks after running the program.
Quote
