hwclock.exe virus?

[power]

hey, i just got a new pc and had to connect fresh to the internet
without any protection. Once i did this and then set up my firewall and
virus software it said that hwclock.exe was trying to acess the internet
and didn't know what it was. I'm pretty new to this and when i went on
the net to see what it was there was all this talk about trojans and
the likes and that i should get it off. i tried to restart my computer
in safe mode and then root it out and delete it, but was unable to
because the file was protected. i have since checked out my task
manager and it doesn't seem to be slowing down my system and my virus
software is stopping any traffic from it over the net. should i just
chill my boots and leave it? should i try and get rid of it cause it's
nasty and if so how? or should i let it gain access to the net because
it is actually part of my genuine software and needs to connect and
everyone is just panicing over nothing? Any help will be much
appreciated. stay safe, use protection....

 

[Wesley Vogel]

hwclock.exe is a trojan.

Bleeping Computer - HWCLOCK.EXE - File Information
http://www.bleepingcomputer.com/startups/HWCLOCK.EXE-7823.html

Virus information W32/Hwbot-A
http://www.sophos.com/virusinfo/analyses/w32hwbota.html

How to remove a Trojan, Virus, Worms, or other Malware
http://www.bleepingcomputer.com/for...ojan_Virus_Worms_or_other_Malware-tut101.html

In my opinion, this should go out in printed form with all new computers.
It should also be bundled with any Windows XP software.

Internet Storm Center: "If you know of someone who is about to receive a
new computer, or if you have received one yourself, please, please read our
new Windows XP survival guide, 'Windows XP: Surviving the First Day. (PDF)'"
http://isc.sans.org/presentations/xpsurvivalguide.pdf

Clean Install Windows
http://www.michaelstevenstech.com/cleanxpinstall.html

Windows XP Clean Installation - Partitioning and Formatting using Windows XP
CD
http://www.mvps.org/sramesh2k/XPClean.htm

HOW TO Partition and Format a Hard Disk in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;[LN];Q313348

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Bill McCartney]

hey, i just got a new pc and had to connect fresh to the internet
without any protection. Once i did this and then set up my firewall and
virus software it said that hwclock.exe was trying to acess the internet
and didn't know what it was. I'm pretty new to this and when i went on
the net to see what it was there was all this talk about trojans and
the likes and that i should get it off. i tried to restart my computer
in safe mode and then root it out and delete it, but was unable to
because the file was protected. i have since checked out my task
manager and it doesn't seem to be slowing down my system and my virus
software is stopping any traffic from it over the net. should i just
chill my boots and leave it? should i try and get rid of it cause it's
nasty and if so how? or should i let it gain access to the net because
it is actually part of my genuine software and needs to connect and
everyone is just panicing over nothing? Any help will be much
appreciated. stay safe, use protection....

Here's a site you can get all the help you will ever need with
"adware/spys/trojans/etc..

http://castlecops.com/

First download the two links below for: Spybot Search and Destroy, and,
Highjack This. These links are *direct* downloads.

SB SD: > http://castlecops.com/downloads-file-108.html
HJT: > http://castlecops.com/downloads-file-328.html

Run these excellent utilities and if you have questions about any of the
results, then check the forums at:

http://castlecops.com/forums.html

For "Spybot Search and Destroy" and "Hijack This".

These folks will give you all the help you need to remove *ANY*
spyware/adware/trojan/etc.. on your system.

--
Bill McCartney
Union City, Georgia

E-mail rot 13ed
(e-mail address removed)
(e-mail address removed) < this is here for the e-mail bots.