PDA

View Full Version : Xuron 55 (trojan ?) - Spybot seems to have fixed ?



Misty
22-10-2005, 11:00 AM
I ran Spybot and got the following result -


Error during check!: Xuron55 (Datei C:\WINDOWS\win.ini kann nicht geöffnet werden. The process cannot access the file because it is being used by another process) ()


Windows Security Center.AntiVirusOverride: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0

Windows Security Center.FirewallOverride: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride!=dword:0

Googled the results (including Xuron 55)

and in amongst a lot of results (mostly in German etc) I obtained the following earlier threads from other forums

(1) from “Happo” forum regular
Whirlpool.net.au discussion forum

Download Ewido Security Suite, it has a free trial, it has had very good results removing malware that others can't.
Download, update, disable system restore, restart and boot into safe mode and run a full scan with Ewido, that should do it.
(2) from "Marianna Schmudlach"
C/net forum

Download Ewido Security Suite, it has a free trial, it has had very good results removing malware that others can't.

Despite these two consistent suggestions and from people with good credentials I was loathe to download yet another program to solve just one problem - unless it was absolutely necessary. Both originators mentioned Spybot as identifying the virus originally but not being able to remove.

I decided to give Spybot a try at removing it before moving to the next step. To my surprise Spybot seems to be telling me that it has removed the problem, including the offending hkeys. I guess that this is the result of a Spybot update.

(a) Am I right in concluding that and are these particular hkeys "offenders" ?

(b) Presumably I should run Spybot again to make sure that they are gone ?
Misty (cautious as ever !) :rolleyes:

Speedy Gonzales
22-10-2005, 11:06 AM
Try what it says here

http://castlecops.com/t120363-SpyBot_Xuron_55_datei_C_Windows_win_ini_kann_nicht _geoffnet.html

The first link on the bottom post doesnt work tho.

Are u using the latest version of Spybot and its update?

Misty
13-11-2005, 05:18 PM
Try what it says here

http://castlecops.com/t120363-SpyBot_Xuron_55_datei_C_Windows_win_ini_kann_nicht _geoffnet.html

The first link on the bottom post doesnt work tho.

Are u using the latest version of Spybot and its update?

Hi Speedy
I go to the last link on the page and it gives me the message "Error 403" verboten (forbidden !) Will try further.
Misty :(

Speedy Gonzales
13-11-2005, 05:30 PM
Look here, that message is normal.

http://forum.tweakxp.com/forum/Topic170958-59-1.aspx

It maybe the version of S&D you're using. If ur using 1.3 update to 1.4 or whatever the latest version is.

And look here

http://castlecops.com/t120363-SpyBot_Xuron_55_datei_C_Windows_win_ini_kann_nicht _geoffnet.html