how to remove svcinit.exe?

[cairo]

Hello, everyone...

A Backdoor trojan stays in C:\windows\system32\svcinit.exe

It's a keylogger, and always tempts to connect itself to the internet (ZoneAlarm detected this)

It cannot be deleted! neither Norton Antivirus...

hard to find some useful info thru the internet about this.

Can anyone tell me how to remove this?

 

[Stephen79]

k, to remove it, bootup in safe mode and look for the file c:\windows\system\ and delete it.

Search the reg for the file and delete the entries.

look here:
HKEY_LOCAL_MACHINE\software\microsoft\windows\current version\

 

[brucej]

is svcinit.exe a real windows file ?

hi all
i had a backdoor.trojan in my windows/sysyem folder called svcinit.exe, i removed it ok useing the instructions from the nortons site.
i read that the virus replaces the original file
now when i do a search on my hard drive this file is no longer there.
IS it a real windows ME file ? as i now have a problem when i have been logged onto the net for a few minutes .
when i first logon the connection runs at full speed but after a few minutes it just slows right down to the point of stopped.
this has only happened since removeing this file with nortons anti virus 2003
any clues ?
thanks
brucej

 

[RealBlackStuff]

Find a full description of removal here:
http://it.trendmicro-europe.com/enterprise/security_info/ve_detail.php?VName=BKDR_CALYPS.A