also @ TechSpot: IBM's Watson conquers Jeopardy, cancer and now customer service

how to remove svcinit.exe?

Discussion in 'Virus and Malware Removal' started by cairo, Oct 10, 2003.

  1. cairo Newcomer, in training Posts: 21

    Hello, everyone...

    A Backdoor trojan stays in C:\windows\system32\svcinit.exe

    It's a keylogger, and always tempts to connect itself to the internet (ZoneAlarm detected this)

    It cannot be deleted! neither Norton Antivirus...

    hard to find some useful info thru the internet about this.

    Can anyone tell me how to remove this?
  2. Stephen79 Newcomer, in training Posts: 66

    k, to remove it, bootup in safe mode and look for the file c:\windows\system\ and delete it.

    Search the reg for the file and delete the entries.

    look here:
    HKEY_LOCAL_MACHINE\software\microsoft\windows\current version\
  3. brucej Newcomer, in training

    is svcinit.exe a real windows file ?

    hi all
    i had a backdoor.trojan in my windows/sysyem folder called svcinit.exe, i removed it ok useing the instructions from the nortons site.
    i read that the virus replaces the original file
    now when i do a search on my hard drive this file is no longer there.
    IS it a real windows ME file ? as i now have a problem when i have been logged onto the net for a few minutes .
    when i first logon the connection runs at full speed but after a few minutes it just slows right down to the point of stopped.
    this has only happened since removeing this file with nortons anti virus 2003
    any clues ?
    thanks
    brucej
  4. RealBlackStuff Newcomer, in training Posts: 8,165