power

Distinguished
Aug 3, 2001
6
0
18,510
Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

hwclock virus? Thanks a lot that's really helped.

A problem i'm having now is identifying wether my system 32 file
userinit.exe is safe or is the userint.exe (notice the missing i)
unsafe worm as suggested in the startup database from the link you gave
me.

Thanks again, i'll get some spyware software too.

Wesley Vogel Wrote:
> hwclock.exe is a trojan.
>
> Bleeping Computer - HWCLOCK.EXE - File Information
> http://tinyurl.com/9busu
>
> Virus information W32/Hwbot-A
> http://www.sophos.com/virusinfo/analyses/w32hwbota.html
>
> How to remove a Trojan, Virus, Worms, or other Malware
> http://tinyurl.com/ctldy
>
> In my opinion, this should go out in printed form with all new
> computers.
> It should also be bundled with any Windows XP software.
>
> Internet Storm Center: "If you know of someone who is about to receive
> a
> new computer, or if you have received one yourself, please, please read
> our
> new Windows XP survival guide, 'Windows XP: Surviving the First Day.
> (PDF)'"
> http://isc.sans.org/presentations/xpsurvivalguide.pdf
>
> Clean Install Windows
> http://www.michaelstevenstech.com/cleanxpinstall.html
>
> Windows XP Clean Installation - Partitioning and Formatting using
> Windows XP
> CD
> http://www.mvps.org/sramesh2k/XPClean.htm
>
> HOW TO Partition and Format a Hard Disk in Windows XP
> ;Q313348]http://support.microsoft.com/default.aspx?scid=kb;[LN];Q313348
>
> --
> Hope this helps. Let us know.
>
> Wes
> MS-MVP Windows Shell/User
>
> In news:power.1ril1p@pcbanter.net,
> power power.1ril1p@pcbanter.net hunted and pecked:-
> hey, i just got a new pc and had to connect fresh to the internet
> without any protection. Once i did this and then set up my firewall
> and
> virus software it said that hwclock.exe was trying to acess the
> internet
> and didn't know what it was. I'm pretty new to this and when i went
> on
> the net to see what it was there was all this talk about trojans and
> the likes and that i should get it off. i tried to restart my
> computer
> in safe mode and then root it out and delete it, but was unable to
> because the file was protected. i have since checked out my task
> manager and it doesn't seem to be slowing down my system and my virus
> software is stopping any traffic from it over the net. should i just
> chill my boots and leave it? should i try and get rid of it cause
> it's
> nasty and if so how? or should i let it gain access to the net
> because
> it is actually part of my genuine software and needs to connect and
> everyone is just panicing over nothing? Any help will be much
> appreciated. stay safe, use protection....
>
>
> --
> power-


--
power
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

userinit.exe is a valid XP file.

userinit.exe is Userinit Logon Application.

userinit.exe should be in these two folders...

C:\WINDOWS\system32
and
C:\WINDOWS\system32\dllcache

userint.exe is *not* an XP file.

userint.exe is part of a trojan.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:power.1rjz1n@pcbanter.net,
power <power.1rjz1n@pcbanter.net> hunted and pecked:
> hwclock virus? Thanks a lot that's really helped.
>
> A problem i'm having now is identifying wether my system 32 file
> userinit.exe is safe or is the userint.exe (notice the missing i)
> unsafe worm as suggested in the startup database from the link you gave
> me.
>
> Thanks again, i'll get some spyware software too.
>
> Wesley Vogel Wrote:
>> hwclock.exe is a trojan.
>>
>> Bleeping Computer - HWCLOCK.EXE - File Information
>> http://tinyurl.com/9busu
>>
>> Virus information W32/Hwbot-A
>> http://www.sophos.com/virusinfo/analyses/w32hwbota.html
>>
>> How to remove a Trojan, Virus, Worms, or other Malware
>> http://tinyurl.com/ctldy
>>
>> In my opinion, this should go out in printed form with all new
>> computers.
>> It should also be bundled with any Windows XP software.
>>
>> Internet Storm Center: "If you know of someone who is about to receive
>> a
>> new computer, or if you have received one yourself, please, please read
>> our
>> new Windows XP survival guide, 'Windows XP: Surviving the First Day.
>> (PDF)'"
>> http://isc.sans.org/presentations/xpsurvivalguide.pdf
>>
>> Clean Install Windows
>> http://www.michaelstevenstech.com/cleanxpinstall.html
>>
>> Windows XP Clean Installation - Partitioning and Formatting using
>> Windows XP
>> CD
>> http://www.mvps.org/sramesh2k/XPClean.htm
>>
>> HOW TO Partition and Format a Hard Disk in Windows XP
>> ;Q313348]http://support.microsoft.com/default.aspx?scid=kb;[LN];Q313348
>>
>> --
>> Hope this helps. Let us know.
>>
>> Wes
>> MS-MVP Windows Shell/User
>>
>> In news:power.1ril1p@pcbanter.net,
>> power power.1ril1p@pcbanter.net hunted and pecked:-
>> hey, i just got a new pc and had to connect fresh to the internet
>> without any protection. Once i did this and then set up my firewall
>> and
>> virus software it said that hwclock.exe was trying to acess the
>> internet
>> and didn't know what it was. I'm pretty new to this and when i went
>> on
>> the net to see what it was there was all this talk about trojans and
>> the likes and that i should get it off. i tried to restart my
>> computer
>> in safe mode and then root it out and delete it, but was unable to
>> because the file was protected. i have since checked out my task
>> manager and it doesn't seem to be slowing down my system and my virus
>> software is stopping any traffic from it over the net. should i just
>> chill my boots and leave it? should i try and get rid of it cause
>> it's
>> nasty and if so how? or should i let it gain access to the net
>> because
>> it is actually part of my genuine software and needs to connect and
>> everyone is just panicing over nothing? Any help will be much
>> appreciated. stay safe, use protection....
>>
>>
>> --
>> power-
>
>
> --
> power