XeroBase browser - help uninstalling needed

Hi, superior officer geeks. Second post here.

I recently installed XeroBase (xB) browser, which you probably know runs over the Tor network. Panda Cloud found a Trojan in three locations regarding the program, and Malwarebytes found one also. That's scary enough to me that I want it off my machine. I'd like to do a thorough uninstall.

BUT ... neither Revo nor Glary shows it as existing on my computer! For that matter, neither does Add/Remove Programs. It's right there in C:\Program Files\XeroBase, but the uninstallers can't find it. It has its own uninstaller in the start menu listing, but I'm afraid that won't go deep enough. I want every trace of it gone, if two good anti-malware programs say its a baddie.

Am I stuck simply running its own uninstaller and then deleting the odds and ends manually? If so, would somebody more geeky than I am tell me in painful detail exactly which registry entries to delete?

Thanks a million!

 

It depends on when you installed it and how far back your system restore points go, but assuming you have a restore point that predates installation then that really is all you need. OK a few harmless files might get left behind which you may be able to deal with manually, but the registry will be clean.

Run an imaging program regularly if you want to be able to step back in time 100%.

 

Thank you for the advice. I probably do have a restore point that predates installation several days ago (trojans didn't show up in any scans until just now), but I've run CCleaner, Glary, etc. since then and hate to confuse the registry further by trying to put all that back.

That being the case, should I just run the xB program's uninstaller? Or if I do revert to a restore point, should I do so before or after uninstalling? I'm thinking after, but I'm just a buck private.

Just an aside -- I really hate that I got a trojan, if indeed it's a true positive, from CNET, as a trojan was even found in the installer. Strange that Avira didn't pick it up, as I always immediately scan every installer with that program before executing. I'm just sayin.'

 

I would uninstall first, in the hope that it might remove some of its own files, but either way the system restore will completely disable it and restore the system to a fully consistent state. There is no risk at all of your registry becoming confused. You can always run CCleaner etc afterwards.

False positives from scanners are quite common. I wouldn't give it another thought

 

Thank you very much, again. I wouldn't give it much thought except that its Tor network put me through Moscow once. Who knows what malware may have been installed, being that nothing had shown up in the several previous days that it had been installed and used?

But now that the alleged trojans are quarantined, I may just leave it in place and not worry and keep scanning. Or just uninstall it and not worry, especially after a sys restore. Much appreciated.