HCNRV.EXE - Dangerous
%SysDir%\HCNRV.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
HCNRV.EXE is known as: Trojan.Usuge!gen3 [Symantec] Trojan.Win32.VBKrypt [Ikarus] packed with UPX [Kaspersky Lab].
MD5 of HCNRV.EXE = 4A832BC73431F6EC366E25DF27C371B9
HCNRV.EXE size is 76800 bytes.
Full path on a computer: %SYSTEM%\HCNRV.EXE
Related Files:
%APPDATA%\YBXAXY.EXE
C:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\ACLEANER.EXE
%SYSTEM%\HCNRV.EXE
%WINDIR%\AADRIVE32.EXE
%TEMP%\NOUVEAU DOSSIER\GROUP1\HNM5.EXE
C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\VSBNTLO.EXE
%TEMP%\NOUVEAU DOSSIER\GROUP4\88.EXE
%TEMP%\NOUVEAU DOSSIER\GROUP3\SLMGR.VBS
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\SYITM.EXE
%TEMP%\NOUVEAU DOSSIER\GROUP4\CDQJ.EXE
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1214\T7VD.EXE
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-9043\JWKD.EXE
%TEMP%\NOUVEAU DOSSIER\GROUP5\ACLEANER.EXE
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1343\JWJQA.EXE
%TEMP%\NOUVEAU DOSSIER\GROUP5\HOSTS
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-2734\JU7BD.EXE
%TEMP%\NOUVEAU DOSSIER\GROUP5\MENARA ADSL.LNK
C:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\DESKTOP.INI
C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\DESKTOP.INI
%WINDIR%\LOGFILE32.TXT