| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 62859 | 2005-10-21 23:00:00 | Xuron 55 (trojan ?) - Spybot seems to have fixed ? | Misty (368) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 398291 | 2005-10-21 23:00:00 | I ran Spybot and got the following result - Error during check!: Xuron55 (Datei C:\WINDOWS\win.ini kann nicht geöffnet werden. The process cannot access the file because it is being used by another process) () Windows Security Center.AntiVirusOverride: Settings (Registry change, nothing done) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0 Windows Security Center.FirewallOverride: Settings (Registry change, nothing done) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride!=dword:0 Googled the results (including Xuron 55) and in amongst a lot of results (mostly in German etc) I obtained the following earlier threads from other forums (1) from “Happo” forum regular Whirlpool.net.au discussion forum Download Ewido Security Suite, it has a free trial, it has had very good results removing malware that others can't. Download, update, disable system restore, restart and boot into safe mode and run a full scan with Ewido, that should do it. (2) from "Marianna Schmudlach" C/net forum Download Ewido Security Suite, it has a free trial, it has had very good results removing malware that others can't. Despite these two consistent suggestions and from people with good credentials I was loathe to download yet another program to solve just one problem - unless it was absolutely necessary. Both originators mentioned Spybot as identifying the virus originally but not being able to remove. I decided to give Spybot a try at removing it before moving to the next step. To my surprise Spybot seems to be telling me that it has removed the problem, including the offending hkeys. I guess that this is the result of a Spybot update. (a) Am I right in concluding that and are these particular hkeys "offenders" ? (b) Presumably I should run Spybot again to make sure that they are gone ? Misty (cautious as ever !) :rolleyes: |
Misty (368) | ||
| 398292 | 2005-10-21 23:06:00 | Try what it says here castlecops.com _geoffnet.html The first link on the bottom post doesnt work tho. Are u using the latest version of Spybot and its update? |
Speedy Gonzales (78) | ||
| 398293 | 2005-11-13 05:18:00 | Try what it says here castlecops.com _geoffnet.html The first link on the bottom post doesnt work tho. Are u using the latest version of Spybot and its update? Hi Speedy I go to the last link on the page and it gives me the message "Error 403" verboten (forbidden !) Will try further. Misty :( |
Misty (368) | ||
| 398294 | 2005-11-13 05:30:00 | Look here, that message is normal. forum.tweakxp.com It maybe the version of S&D you're using. If ur using 1.3 update to 1.4 or whatever the latest version is. And look here castlecops.com _geoffnet.html |
Speedy Gonzales (78) | ||
| 1 | |||||