Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
Hi, today my AVG anti-virus free edition scanned and found a "trojan horse madfind virus". At the end of the scan it said the infected file could not be healed, and it recomended moving the whole infected file into the virus vault. But then I clicked to move it there, and it said "File C:\WINDOWS\SYSTEM\SVC.exe can not be removed. Somebody please help me i don't know much about computers and i don't know what to do!
And then i just downloaded a program called trojan remover, and i scanned with it but it gave me this message. (i scanned right after my computer started up, so i don't know how it says a program is running) Error checking C:\WINDOWS\SYSTEM\svc.exe for Trojans. Trojan Remover may not be able to read the file because it is in use by another program. Try closing other running programs and then carry out a new scan. If the error persists you will need to scan this file in SAFE mode......... So anyway i don't know what to do, should i scan it in safemode like it said? how do i get into safe mode.
0 
SVC.EXE is: "Hijacker, Clientman parasite variant, redirecting to madfinder.com."
Likely other ways, but I've removed some stubborn Trojans by doing the following:
Restart your computer in SAFE mode, then see if you can run your AV and Trojan Remover in that mode. Some AV's (such as Panda) will not run in SAFE mode. Anyway, if neither will run, just search for the SVC file and delete it and search for all other possible occurances of it on your hard drive and delete those if found. Then restart normally and run your AV and Trojan Remover to see if it's been cleared off your system. Also, check through your register to see if the file or Madfinder is referenced in it. BUT, be carefull of what you delete in there! Make sure it's related to SVC.exe and/or Madfinder before removing an entry.
0
cool, thanks for the help, i went into safe mode and deleted the infected file or whatever it was. One more question though, is your mouse supposed to work in safe mode? mine didn't, so i had to use the keyboard for everything, so i was just curius is the mouse supposed to work?
0
hello
my mouse in m.e safe mode works. your should too.in safe mode look in device manager under mouse and see if theres ghost device there(duplicates) and delete them and reboot.
0
Glad it worked out!!! And, yes, I can run my USB mouse in 2000Pro Safe mode. Not sure why yours didn't, but I've never used ME, so maybe it's just an OS thing?
0
Hey,
I am having a similar problem. I went into safe mode to delete svc.exe, but I couldn't find the file. It was not where it said it should've been. I did delete the file while it was in quarantine, but every time I open up an internet explorer window, I get a "virus alert" about the same file. I don't know what to do.
0
I had this virus today and had similar problems. I'm running Windows XP and use Norton Antivirus (which won't delete the file). Booting up Windows in safe mode you won't find the SVC.exe file though it will be there in Windows/system32 when you boot up normally.
Anyway, I eventually managed to delete the file but still got virus alert pop-ups every time I opened an internet explorer window. I played around with the Windows registry (dangerous if your not sure what to do) and deleted 2 values relating to SVC.exe and Madfinder. Still kept getting the pop-up alerts though.
But I eventually got rid of these too by running Ad-Aware 6.0. This great little program cleaned the beast off my system. You should download it (its free!) and update its definitions (simply download them from within the program). Run it and should identify a lot of bad crap which you can then simply delete.
So in summary, download, install and run Ad-Aware 6.0 which should get rid of the rubbish left behind on your sysytem by this nasty.
0
hey, thanks so much, that worked like a charm, plus ad-aware found a bunch more stuff on my computer too. i really appreciate you taking your time to write a response and really helping me out.
will
0
hey
I have problem with SVC.exe.
I have downloaded the AD-AWARE 6.0.
I did scan my computer and i do not know which files i should delete.
I have many files Regkey, Regdata, Regvalue and others.Could you help me?
I'm sorry for my English :-)
0
Was experiencing problems with a Trojan horse. My Norton AV was telling me file svc.exe was infected. At first, the AVS was not putting it into quarantine. I eventually was able to run, find, and quarantine the file in SafeMode. I even did the bit of removing it from the Registry. When all was said and done, the virus alerts kept coming up. I searched and found Tauscan on the Download.com website. I downloaded and installed it without a problem. I ran it, it found NOTHING. I updated the definitions, ran a full scan again. It found NOTHING. I ran a scan of the folders that Norton was telling me the file was in. It found nothing.
I kept searching and here on the Computing.net website I found this series of posts with the same issue. I searched for Ad-Aware and after seeing it on PC Magazine website, I felt confident enough to download and try the FREE program.
Quick easy install of Ad-Aware. Looked more professional. Found 20... TWENTY, legitimate issues, INCLUDING the Trojan horse that was causing my problems. Items Quarantined. System checked and all is running smooth.
Two thumbs down to Tauscan.
Two thumbs up to Ad-Aware.
0
mistrzu,
Double-click on the files. You can learn what type of file many of them are and what they do. There are also comments over to the right on some of them that may clue you in for sure to quarantine a particular file or not.
Good luck.
0
merhaba,
işletim sistemi win9x, winME olanlar! svc.exe' den kurtulmak için;
1)başlat> çalıştır> msconfig
2)buradan sart up seçilir.
3)açılışta çalışan programlar içinde svc.exe görülür. Yanındaki çek işareti kaldırılarak uygula denir. msconfig kapatılır.
4)PC, kendisini restart yapar.
5)PC yeniden açılınca windows gezgininden;
windows > system > svc.exe bulunur ve SİLİNİR.
ingilizcem yok. bu nedenle TÜRKÇE yazdım. bilenler tercüme etsin :))
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
