Trojan and Keylogger immediately after install

Immediately after I install Vista Business (before I connect to the
internet) one of my spyware checkers (XSOFT) finds two problems:-

1 PCTattletate File Keylogger C:\Windows\System32\winload.exe SEVERE RISK
2 Troj/Agent Host File Item Trojan local host Severe Risk

XSOFT will not allow me to remove these as they are in use????

I have run three other spyware/virus checkers and not one of these have
found anything.
My main AV is Norton and it has not found anything

Any advice would be greatly appreciated

TIA

Probably a false positive.

Young Mandy wrote:
> Immediately after I install Vista Business (before I connect to the
> internet) one of my spyware checkers (XSOFT) finds two problems:-
>
> 1 PCTattletate File Keylogger C:\Windows\System32\winload.exe SEVERE RISK
> 2 Troj/Agent Host File Item Trojan local host Severe Risk
>
> XSOFT will not allow me to remove these as they are in use????
>
> I have run three other spyware/virus checkers and not one of these have
> found anything.
> My main AV is Norton and it has not found anything

Please see the answers you have already received in your other thread.
Please don't multipost like this; it makes more work for everyone. Here
is a link explaining that:

http://www.blakjak.demon.co.uk/mul_crss.htm


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

1. Is this a clean install or an upgrade from XP?
2. Did you use OEM or Microsoft media to install from?
3. What else did you install afterward but before you noticed the problem?
4. Is your install 32 or 64-bit?

"Young Mandy" wrote:

> Immediately after I install Vista Business (before I connect to the
> internet) one of my spyware checkers (XSOFT) finds two problems:-
>
> 1 PCTattletate File Keylogger C:\Windows\System32\winload.exe SEVERE RISK
> 2 Troj/Agent Host File Item Trojan local host Severe Risk
>
> XSOFT will not allow me to remove these as they are in use????
>
> I have run three other spyware/virus checkers and not one of these have
> found anything.
> My main AV is Norton and it has not found anything
>
> Any advice would be greatly appreciated
>
> TIA
>

"Malke" <notreally@invalid.invalid> wrote in message
news:%23xCnvSMcHHA.2188@TK2MSFTNGP04.phx.gbl...
> Young Mandy wrote:
>> Immediately after I install Vista Business (before I connect to the
>> internet) one of my spyware checkers (XSOFT) finds two problems:-
>>
>> 1 PCTattletate File Keylogger C:\Windows\System32\winload.exe SEVERE
>> RISK
>> 2 Troj/Agent Host File Item Trojan local host Severe Risk
>>
>> XSOFT will not allow me to remove these as they are in use????
>>
>> I have run three other spyware/virus checkers and not one of these have
>> found anything.
>> My main AV is Norton and it has not found anything
>
> Please see the answers you have already received in your other thread.
> Please don't multipost like this; it makes more work for everyone. Here is
> a link explaining that:
>
> http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User


Apologies; YES you are 100% correct about multiposting...............just
when I first posted it did not show up in here for at least 5 hours
Sorry

"Jesper" <Jesper@discussions.microsoft.com> wrote in message
news:03B514BF-829B-428B-A983-F321685F09CE@microsoft.com...
> 1. Is this a clean install or an upgrade from XP?
> 2. Did you use OEM or Microsoft media to install from?
> 3. What else did you install afterward but before you noticed the problem?
> 4. Is your install 32 or 64-bit?
>


1 Clean Install (three times)
2 Genuine OEM Copy of Microsoft Business (32 Bit)
3 First Time after quite a few known software programs that I have always
used on my previous XP set up.
Second Time immediately after install, updates to Vista
Third Time, just Vista Business Operating System (no internet connection)
with Xsoft
4 32 Bit

If anyone else is about to install Vista Business I can send them the Xsoft
software with code to analyse it

"Young Mandy" <nospamming@yahoo.co.uk> wrote in message
news:FF74848F-DBE0-4C65-9992-D94B16E6421B@microsoft.com...
>
> "Jesper" <Jesper@discussions.microsoft.com> wrote in message
> news:03B514BF-829B-428B-A983-F321685F09CE@microsoft.com...
>> 1. Is this a clean install or an upgrade from XP?
>> 2. Did you use OEM or Microsoft media to install from?
>> 3. What else did you install afterward but before you noticed the
>> problem?
>> 4. Is your install 32 or 64-bit?
>>
>
>
> 1 Clean Install (three times)
> 2 Genuine OEM Copy of Microsoft Business (32 Bit)
> 3 First Time after quite a few known software programs that I have always
> used on my previous XP set up.
> Second Time immediately after install, updates to Vista
> Third Time, just Vista Business Operating System (no internet
> connection) with Xsoft
> 4 32 Bit
>
> If anyone else is about to install Vista Business I can send them the
> Xsoft software with code to analyse it

Just an update..................only had Vista on PC (NO internet
connection) and NO other programs except Xoft and it definitely through up
these two problems

Spoke to Xoft who gave this reply :--

"Hello,

Thank you for your email.

Because XoftSpySE is not compatible with Vista, we can not confirm whether
or not PCTattleTale or Troj/Agent Host File are false positives.

If you have further questions, please get back to us.

Best Regards,
Blake

Customer Support Team "

On Tue, 3 Apr 2007 06:31:22 +0100, "Young Mandy"

>Because XoftSpySE is not compatible with Vista, we can not confirm whether
>or not PCTattleTale or Troj/Agent Host File are false positives.
>
>If you have further questions, please get back to us.

XoftSpy has a history; it started as one of 200+ fake "antispyware"
scanners that would pretend to scan your system, tell you have
malware, then offer to clean it if you threw money at them.

In reality, they had done no scanning at all, and the "malware" they
found was fake. It was a scam, pure and simple.

The site that listed these initial 200+ fake scanners may list new
versions of XoftSpy OK, but I would still avoid them. I suggest using
free scanners that don't have a history of being scammers:
- AdAware
- Spybot
- A-Squared
- AVG Antispyware
- Microsoft Defender (built into Vista).

I would not be surprised if these detect XoftSpy itself as a problem.



>------------ ----- ---- --- -- - - - -
The most accurate diagnostic instrument
in medicine is the Retrospectoscope
>------------ ----- ---- --- -- - - - -