<https://forum.zebulon.fr/topic/100992-mon-rapport-hi-jack/#comment-792334>
<http://schema.org/text>
"Fixwareout ver 1.003 \nLast edited 07/1/2006 \nPost this report in the forums please  \n  \nReg Entries that were deleted  \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ruins\\}DE821D879FA0-035B-ED14-D628-11F94A08{ \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ruins\\}9A5270EA7749-BE29-EA24-213A-577699AF{ \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ruins\\}BB0F4A76C577-4C3A-D4E4-39AE-BA73C6BA{ \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ruins\\}62214323EF24-7109-C844-FBB6-DBDE43B2{ \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ruins\\}4A713BBBC4D9-D0A8-2744-DD5A-5701344B{ \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ruins\\}5873E4D874B8-9B1A-1144-792D-63F827A4{ \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ruins\\}57513FDC8EA5-F1AB-8F14-F4F2-D9E6870B{ \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ruins\\fohmd \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Urls\\swen \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Urls\\ogol \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Urls\\eno \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Urls\\llun \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Urls\\owt \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Urls\\eerht \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Urls\\ruof \nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Urls\\evif \n... \n  \nMicrosoft ® Windows Script Host Version 5.6 \nRandom Runs removed from HKLM  \n\"dmhof.exe\"=- \n... \n  \nPLEASE NOTE, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. \nExample ipsec6.exe is legitimate \n  \n»»»»» Search by size and names...  \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\XFIND.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\XFIND.COM \n  \n»»»»» Misc files  \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\XFIND.COM \n  \n»»»»» Checking for older varients covered by the Rem3 tool \n  \n»»»»»  \nSearch five digit cs, dm and jb files \nThis WILL/CAN also list Legit Files, Submit them at Virustotal \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \nImpossible d'ex‚cuter C:\\FIXWAREOUT\\FINDT\\LOCATE.COM \n Other suspects \nDirectory of C:\\WINDOWS\\system32 \n{4A728F36-D297-4411-A1B9-8B478D4E3785}.exe \n{B4431075-A5DD-4472-8A0D-9D4CBBB317A4}.exe \n{FA996775-A312-42AE-92EB-9477AE0725A9}.exe \n  \n  \n  \nVoila j'ai executé ton logiciel, verdict selon toi ??? \n"
<https://forum.zebulon.fr/topic/100992-mon-rapport-hi-jack/>