xyzhSox2.exe
CastleCops
-> Startup Programs
Author: IP: 70.55.*.*,
Posted: Tue Jul 10, 2007 7:34 pm Post subject: xyzhSox2.exe
Can anybody identify this item? I haven't been able to find any mention of it anywhere on the web. Iolo System Mechanic identifies it as "Windows xyzhSox2 Server", and it's sitting in C:\WINDOWS\System32
Author: PCBruiser,
Posted: Tue Jul 10, 2007 7:45 pm Post subject:
It's malware. I strongly recommend that you follow CastleCops' Malware Removal and Prevention procedure, a system CastleCops devised to enable users to either partially, or fully clean their systems without the direct aid of an expert.
Please read these instructions carefully. You will find the Malware Removal and Prevention Procedure here:
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
If that doesn't fix the problem, then go to this Forum, read the instructions at the top of the page carefully:
/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html
Follow these instructions:
/t102301-Hijackthis_Guidelines_Read_Before_Posting.html
and one of CC's trained 1st Responders or Security Experts will help you.
Note: You must be a CastleCops member to post for help in the HJT forum.
Author: IP: 70.55.*.*,
Posted: Thu Jul 12, 2007 12:35 am Post subject:
Thanks for the quick and detailed response, but after having spent half the night following the procedure outlined, the offending process still ended up being started at reboot. I finally ended up removing it from the startup using IOLO System Mechanic, then immediately rebooted into safe mode and deleted xyzhSox2.exe from my hard drive. That seems to have done it. The only problem I have now is that my quick launch toolbar won't stay put... it disappears at every reboot. I believe it was CClean that somehow did that to me, and haven't been able to get that fixed yet, though that's really more an annoyance than anything else.
Thanks again!
CastleCops
-> Startup Programs
All times are GMT
Page 1 of 1
Powered by phpBB © 2001 phpBB Group