hwclock.exe virus?

[power]

hwclock virus? Thanks a lot that's really helped.

A problem i'm having now is identifying wether my system 32 file
userinit.exe is safe or is the userint.exe (notice the missing i)
unsafe worm as suggested in the startup database from the link you gave
me.

Thanks again, i'll get some spyware software too.

hwclock.exe is a trojan.

Bleeping Computer - HWCLOCK.EXE - File Information
http://tinyurl.com/9busu

Virus information W32/Hwbot-A
http://www.sophos.com/virusinfo/analyses/w32hwbota.html

How to remove a Trojan, Virus, Worms, or other Malware
http://tinyurl.com/ctldy

In my opinion, this should go out in printed form with all new
computers.
It should also be bundled with any Windows XP software.

Internet Storm Center: "If you know of someone who is about to receive
a
new computer, or if you have received one yourself, please, please read
our
new Windows XP survival guide, 'Windows XP: Surviving the First Day.
(PDF)'"
http://isc.sans.org/presentations/xpsurvivalguide.pdf

Clean Install Windows
http://www.michaelstevenstech.com/cleanxpinstall.html

Windows XP Clean Installation - Partitioning and Formatting using
Windows XP
CD
http://www.mvps.org/sramesh2k/XPClean.htm

HOW TO Partition and Format a Hard Disk in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;[LN];Q313348

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In power (e-mail address removed) hunted and pecked:-
hey, i just got a new pc and had to connect fresh to the internet
without any protection. Once i did this and then set up my firewall
and
virus software it said that hwclock.exe was trying to acess the
internet
and didn't know what it was. I'm pretty new to this and when i went
on
the net to see what it was there was all this talk about trojans and
the likes and that i should get it off. i tried to restart my
computer
in safe mode and then root it out and delete it, but was unable to
because the file was protected. i have since checked out my task
manager and it doesn't seem to be slowing down my system and my virus
software is stopping any traffic from it over the net. should i just
chill my boots and leave it? should i try and get rid of it cause
it's
nasty and if so how? or should i let it gain access to the net
because
it is actually part of my genuine software and needs to connect and
everyone is just panicing over nothing? Any help will be much
appreciated. stay safe, use protection....

 

[Wesley Vogel]

userinit.exe is a valid XP file.

userinit.exe is Userinit Logon Application.

userinit.exe should be in these two folders...

C:\WINDOWS\system32
and
C:\WINDOWS\system32\dllcache

userint.exe is *not* an XP file.

userint.exe is part of a trojan.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

hwclock virus? Thanks a lot that's really helped.

A problem i'm having now is identifying wether my system 32 file
userinit.exe is safe or is the userint.exe (notice the missing i)
unsafe worm as suggested in the startup database from the link you gave
me.

Thanks again, i'll get some spyware software too.

hwclock.exe is a trojan.

Bleeping Computer - HWCLOCK.EXE - File Information
http://tinyurl.com/9busu

Virus information W32/Hwbot-A
http://www.sophos.com/virusinfo/analyses/w32hwbota.html

How to remove a Trojan, Virus, Worms, or other Malware
http://tinyurl.com/ctldy

In my opinion, this should go out in printed form with all new
computers.
It should also be bundled with any Windows XP software.

Internet Storm Center: "If you know of someone who is about to receive
a
new computer, or if you have received one yourself, please, please read
our
new Windows XP survival guide, 'Windows XP: Surviving the First Day.
(PDF)'"
http://isc.sans.org/presentations/xpsurvivalguide.pdf

Clean Install Windows
http://www.michaelstevenstech.com/cleanxpinstall.html

Windows XP Clean Installation - Partitioning and Formatting using
Windows XP
CD
http://www.mvps.org/sramesh2k/XPClean.htm

HOW TO Partition and Format a Hard Disk in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;[LN];Q313348

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In power (e-mail address removed) hunted and pecked:-
hey, i just got a new pc and had to connect fresh to the internet
without any protection. Once i did this and then set up my firewall
and
virus software it said that hwclock.exe was trying to acess the
internet
and didn't know what it was. I'm pretty new to this and when i went
on
the net to see what it was there was all this talk about trojans and
the likes and that i should get it off. i tried to restart my
computer
in safe mode and then root it out and delete it, but was unable to
because the file was protected. i have since checked out my task
manager and it doesn't seem to be slowing down my system and my virus
software is stopping any traffic from it over the net. should i just
chill my boots and leave it? should i try and get rid of it cause
it's
nasty and if so how? or should i let it gain access to the net
because
it is actually part of my genuine software and needs to connect and
everyone is just panicing over nothing? Any help will be much
appreciated. stay safe, use protection....