Skip to content
virus, hclean32 tro...
 
Notifications
Clear all

virus, hclean32 trojan

9 Posts
3 Users
0 Likes
1,994 Views
(@maxo127)
Posts: 301
Reputable Member
Topic starter
 

i think i may hav gotten rid of it by running a program called fixwareout.exe

this is the report log of what the program did. it says to post it in forums.

Fixwareout ver 1.002
Post this report in the forums please

Reg Entries that were deleted
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruinspgtshlld
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruinsnidnsdr
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins23naelch
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruinsaplnsftn
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins23rtcdaol
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins7
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins8
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins9
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins10
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins11
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins12
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins13
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins14
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins15
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins16
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins17
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins18
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins19
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins20
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins21
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins22
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins23
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins24
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins25
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins26
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins27
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins28
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins29
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins30
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins31
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins32
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins33
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins34
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins35
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins36
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins37
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins38
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins39
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins40
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins41
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins42
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins43
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins44
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins45
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins46
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins47
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins48
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins49
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins50
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins51
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins52
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins53
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins54
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins55
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins56
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins57
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins58
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins59
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruins60
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionruinshytmd
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUrlspgtshlld
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUrlsgib_ogol
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUrlsnidnsdr
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUrls23naelch
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUrlsytpme
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUrls23lserspg
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUrlsaplnsftn
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUrls23rtcdaol

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

»»»»» Search by size and names...
C:WINDOWSSYSTEM32HCLEAN32.EXE
C:WINDOWSSYSTEM32CSRIY.EXE

»»»»» Misc files

»»»»» Checking for older varients covered by the Rem3 tool

im not really sure what any of this meens.....do you guys no?

is it gone?

$MAX$

 
Posted : 21/09/2005 10:13 pm
 Nils
(@nils)
Posts: 2849
Famed Member
 

What you had there was a fake adware finder with little impact to the system. The only thing left to do is the following to make sure it is gone.

Removal
Use the entry in the Control Panel's Add/Remove Programs list to remove the software called WareOut , then restart the computer, open the Windows folder and delete the file wotmp.tmp or wotmp11.tmp, then open the System32 folder (inside the Windows folder, called just ‘System' on Windows 95/98/Me) and delete the file wosys.dll or wosysdll.dll.

Nils' Page - Guitar Information and other Stuff
DMusic Samples

 
Posted : 21/09/2005 10:46 pm
(@nicktorres)
Posts: 5381
Illustrious Member
 

I don't think they meant a guitar forum.... :D

 
Posted : 21/09/2005 10:48 pm
 Nils
(@nils)
Posts: 2849
Famed Member
 

I don't think they meant a guitar forum.... :D
I meant to mention that. I think they meant their forum.

Nils' Page - Guitar Information and other Stuff
DMusic Samples

 
Posted : 21/09/2005 10:51 pm
(@maxo127)
Posts: 301
Reputable Member
Topic starter
 

lol i no hahah, but....i dont no ther forum lol and i figured ther would be someone helpful like yourself ( nils ) thanks alot man

$MAX$

 
Posted : 21/09/2005 10:59 pm
 Nils
(@nils)
Posts: 2849
Famed Member
 

Your welcome. Atleast it did not cause you no big time problems

Nils' Page - Guitar Information and other Stuff
DMusic Samples

 
Posted : 21/09/2005 11:04 pm
(@maxo127)
Posts: 301
Reputable Member
Topic starter
 

nills,

none of those files that you said to delete existed.....does that meen everything is gone?

$MAX$

 
Posted : 21/09/2005 11:05 pm
 Nils
(@nils)
Posts: 2849
Famed Member
 

nills,

none of those files that you said to delete existed.....does that meen everything is gone?
Yup. Just wanted to make sure it cleaned everything

Nils' Page - Guitar Information and other Stuff
DMusic Samples

 
Posted : 21/09/2005 11:10 pm
(@maxo127)
Posts: 301
Reputable Member
Topic starter
 

nils sent u a private message.....

$MAX$

 
Posted : 21/09/2005 11:31 pm