False Pos svc.exe SrvStart
CoolWWWSearch.Aff.Madfinder: [SBI $5C09119C] Executable (File, nothing done)
C:\WINDOWS\system32\svc.exe
SVC.EXE
md5 D9531A2FD0D369EEF4F5EF1C9A417587 crc32 16136654
9/27/2000 11:02:40 116,224 bytes
File belongs to SrvStart, a program to run command or programs as a service.
http://www.nick.rozanski.org.uk/inde...e=software#svc
Synopsis. SVC.EXE is a simple Windows NT command-line program to manage NT services. Services can be listed, and individual services can be displayed, installed, modified or removed. It includes facilities to define service dependencies. The program prompts for all needed information from stdin. For most prompts, typing ? will display a help message.
Author comments
http://www.nick.rozanski.org.uk/virus
MADFINDER Spyware and SVC.EXE
Spyware is software which is installed on your computer without your knowledge or consent, and which proceeds to secretly gather information about you or your on-line activities. Spyware is surreptitiously installed after visiting a malicious or compromised Internet site, or may be delivered to your PC by a virus. Spyware is not always detected by anti-virus software and may not be blocked by firewalls. It usually needs specialised removal software such as Ad-Aware in order to remove it.
Madfinder is spyware written using an Internet Explorer technology called the Browser Helper Object. I understand that Madfinder installs a file called SVC.EXE, and that if you delete this file and references to it in your Startup folder it re-appears the next time you boot your PC.
This file is unrelated to my utility of the same name. I can't help you remove it so please don't ask!
