Results 1 to 2 of 2

Thread: False Pos svc.exe SrvStart

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Junior Member
    Join Date
    Jun 2008
    Posts
    3

    Default False Pos svc.exe SrvStart

    CoolWWWSearch.Aff.Madfinder: [SBI $5C09119C] Executable (File, nothing done)
    C:\WINDOWS\system32\svc.exe

    SVC.EXE
    md5 D9531A2FD0D369EEF4F5EF1C9A417587 crc32 16136654
    9/27/2000 11:02:40 116,224 bytes

    File belongs to SrvStart, a program to run command or programs as a service.
    http://www.nick.rozanski.org.uk/inde...e=software#svc
    Synopsis. SVC.EXE is a simple Windows NT command-line program to manage NT services. Services can be listed, and individual services can be displayed, installed, modified or removed. It includes facilities to define service dependencies. The program prompts for all needed information from stdin. For most prompts, typing ? will display a help message.

    Author comments
    http://www.nick.rozanski.org.uk/virus
    MADFINDER Spyware and SVC.EXE

    Spyware is software which is installed on your computer without your knowledge or consent, and which proceeds to secretly gather information about you or your on-line activities. Spyware is surreptitiously installed after visiting a malicious or compromised Internet site, or may be delivered to your PC by a virus. Spyware is not always detected by anti-virus software and may not be blocked by firewalls. It usually needs specialised removal software such as Ad-Aware in order to remove it.

    Madfinder is spyware written using an Internet Explorer technology called the Browser Helper Object. I understand that Madfinder installs a file called SVC.EXE, and that if you delete this file and references to it in your Startup folder it re-appears the next time you boot your PC.

    This file is unrelated to my utility of the same name. I can't help you remove it so please don't ask!

  2. #2
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    thank you for reporting this issue,
    we will change our detection rules to avoid this issue
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •