I'd expect that if a trojan were to be inserted that it will probably want access to all interfaces. I would take extra care at your hardrive interface, USB int

I'd expect that if a trojan were to be inserted that it will probably want access to all interfaces. I would take extra care at your hardrive interface, USB interface and Ethernet interface. I'd look for JTAG connectors on the boards to see if direct flashing is plausible. I'd also look for damage done from removing them. Small point be social sourcing could generate a false positive unless you can verify said individuals interests. Of course removing anything placed by warrant is possibly illegal irregardless of you position on it. {this isn't legal advice} I'd also say this would take a significant amount of effort to validate and you're likely to find quasi poor information.