PDA

View Full Version : svi00001.[exe,dll]



skulcap
2006-01-04, 18:35
I found svi00001.exe and svi00001.dll in my "Local Settings/Temp" dir. svi00001.exe was being run by explorer via some additions to the registry - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell="explorer.exe [excessive white space] c:\Documents and Settings\username\Local Settings\Temp\svi00001.exe"
There was another registry addition, but I dont remember where/what it was.

I have deleted the the .exe but attached a zip of the dll.

tashi
2006-01-04, 20:30
Thank you, I forwarded to detections.