svcinit.exe removal?

This is a discussion about svcinit.exe removal? in the Windows Security category; Somehow I managed to get this worm. It's supposed to register keystrokes and send them out. So far, I've veen able to prevent it from accessing the net but I can't get rid off it. Virus scanner, Ad-Aware or Spybot won't recognise it, so I can't delete it.

Windows Security 292 This topic was started by , . Last reply by ,


data/avatar/default/avatar12.webp

113 Posts
Location -
Joined 2002-04-17
Somehow I managed to get this worm. It's supposed to register keystrokes and send them out. So far, I've veen able to prevent it from accessing the net but I can't get rid off it. Virus scanner, Ad-Aware or Spybot won't recognise it, so I can't delete it. What the heck?
Oh, I'm running Win2kPro + SP3.

Participate in our website and join the conversation

You already have an account on our website? To log in, use the link provided below.
Login
Create a new user account. Registration is free and takes only a few seconds.
Register
This subject has been archived. New comments and votes cannot be submitted.
Oct 8
Created
Jun 30
Last Response
0
Likes
3 minutes
Read Time
User User User User
Users

Responses to this topic


data/avatar/default/avatar12.webp

1915 Posts
Location -
Joined 2000-03-30
I have always believed in a complete format and reinstall when a nasty worn hits.
 
 
Any other method and you just cant be sure

data/avatar/default/avatar12.webp

113 Posts
Location -
Joined 2002-04-17
OP
Success, thank God! I had to try every trick and then some suggested by pestpatrol until I got rid off it. The SOB just wouldn't die. Thanks Sampson
@ sapiens 74- Yeah, you have a point there. If struck by a clear cut malicious worm, which you can't get ridd off by ordinary means, there really isn't much you can do but format. Searching help from the web would be downright irresponsible, for instance. However, I'm in the process of installing Mandrake aside Win2k, so just wouldn't want to go and do the whole shite all over again, if at all possible.

data/avatar/default/avatar12.webp

1915 Posts
Location -
Joined 2000-03-30
Invest in some backup software like Drive IMage 2003
 
Make an backup of your hard drive and then downtime and resintalling will be easy

data/avatar/default/avatar12.webp

113 Posts
Location -
Joined 2002-04-17
OP
Hmm. Since dealing with CDs is such a drag and not even very safe alternative for backups, I'll have to think about that.
Thanks

data/avatar/default/avatar33.webp

1 Posts
Location -
Joined 2003-10-10
Sorry, I am french with a poor knowledge in IT, so be kind with me
 
Could somebody explain to me with simple words how to remove this svcini.exe from my windows 98SE ?
 
For the time being, Norton has moved it in a temporary file. I contacted Symantec who told me that I can definitively removed this file from my computer but when I reboot my machine, Windows request me this file
 
I tried to remove the command line in my win.ini file but it comes again the next reboot...
 
Do not ask me to format my disk, I am not able to do that
 
How could I proceed ???

data/avatar/default/avatar38.webp

3 Posts
Location -
Joined 2004-06-29
post a hijackthis log. There is a spyware program trying to load this file. It is unable to do so since the file has been quarantined. The HijackThis log will help to show where the bad processes are.