Vista - Trojan and Keylogger immediately after install

Immediately after I install Vista Business (before I connect to the
internet) one of my spyware checkers (XSOFT) finds two problems:-

1 PCTattletate File Keylogger C:\Windows\System32\winload.exe SEVERE RISK
2 Troj/Agent Host File Item Trojan local host Severe Risk

XSOFT will not allow me to remove these as they are in use????

I have run three other spyware/virus checkers and not one of these have
found anything.
My main AV is Norton and it has not found anything

Any advice would be greatly appreciated

TIA

Young Mandy wrote:
> Immediately after I install Vista Business (before I connect to the
> internet) one of my spyware checkers (XSOFT) finds two problems:-
>
> 1 PCTattletate File Keylogger C:\Windows\System32\winload.exe SEVERE RISK
> 2 Troj/Agent Host File Item Trojan local host Severe Risk
>
> XSOFT will not allow me to remove these as they are in use????
>
> I have run three other spyware/virus checkers and not one of these have
> found anything.
> My main AV is Norton and it has not found anything

This is probably a false-positive. I would be very wary of using any
antispyware programs that aren't specifically designed for Vista.
Contact XSoft regarding this.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

There have been a few false positives with Vista and the software not
designed for it. It one finds it and the others don't, it's almost a
for-sure false positive.

You might check to see if there is a Vista update for your software.

--
Dustin Harper
dharper@vistarip.com
http://www.vistarip.com | Vista Resource & Information Page


Young Mandy wrote:
> Immediately after I install Vista Business (before I connect to the
> internet) one of my spyware checkers (XSOFT) finds two problems:-
>
> 1 PCTattletate File Keylogger C:\Windows\System32\winload.exe SEVERE RISK
> 2 Troj/Agent Host File Item Trojan local host Severe Risk
>
> XSOFT will not allow me to remove these as they are in use????
>
> I have run three other spyware/virus checkers and not one of these have
> found anything.
> My main AV is Norton and it has not found anything
>
> Any advice would be greatly appreciated
>
> TIA

In message <CBB80965-B571-40C5-93D1-6B136BA39D2B@microsoft.com> "Young
Mandy" <nospamming@yahoo.co.uk> wrote:

>Immediately after I install Vista Business (before I connect to the
>internet) one of my spyware checkers (XSOFT) finds two problems:-
>
>1 PCTattletate File Keylogger C:\Windows\System32\winload.exe SEVERE RISK
>2 Troj/Agent Host File Item Trojan local host Severe Risk
>
>XSOFT will not allow me to remove these as they are in use????
>
>I have run three other spyware/virus checkers and not one of these have
>found anything.
>My main AV is Norton and it has not found anything
>
>Any advice would be greatly appreciated

I don't suppose you happened to use a DVD image you downloaded from the
net, did you?

More then once I've been at a customer's side who "lost" their XP disc,
but had a copy that had various forms of malware added to the unattended
install.

I haven't seen it happening under Vista yet, but it's only a matter of
time.
--
Insert something clever here.

"DevilsPGD" <spam_narf_spam@crazyhat.net> wrote in message
news:b4aj03t4eljbklps94lg2p53k180qhf9uv@4ax.com...
> In message <CBB80965-B571-40C5-93D1-6B136BA39D2B@microsoft.com> "Young
> Mandy" <nospamming@yahoo.co.uk> wrote:
>
>>Immediately after I install Vista Business (before I connect to the
>>internet) one of my spyware checkers (XSOFT) finds two problems:-
>>
>>1 PCTattletate File Keylogger C:\Windows\System32\winload.exe SEVERE
>>RISK
>>2 Troj/Agent Host File Item Trojan local host Severe Risk
>>
>>XSOFT will not allow me to remove these as they are in use????
>>
>>I have run three other spyware/virus checkers and not one of these have
>>found anything.
>>My main AV is Norton and it has not found anything
>>
>>Any advice would be greatly appreciated
>
> I don't suppose you happened to use a DVD image you downloaded from the
> net, did you?
>
> More then once I've been at a customer's side who "lost" their XP disc,
> but had a copy that had various forms of malware added to the unattended
> install.
>
> I haven't seen it happening under Vista yet, but it's only a matter of
> time.
> --
> Insert something clever here.


No this is a genuine OEM Copy of Microsoft Business (32 Bit)