Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
Upon start up, I receive the error message Svcinit has performed an illegal operation and will be shut down. I've tried several things unsuccessfully and am at ropes end. What is it and is it something that needs to be fixed or can it be removed somehow? One thing that may help is that around the same time, I started having the iedll error. I have removed that thanks to a program called cwshredder, but the svcinit problem still exists. Any help would be greatly appreciated. Thanks.
i bet you didn't try a system restore
c:\scanreg/restoreor tried to install win98 on top of win98 to correct the system files and the registry
0 
no, I didn't try a system restore. can anyone walk me through that? I'm a bit leery of reinstalling win98. I thought I had read somewhere that numerous reinstalls will/may cause other problems.
0
Im not sure but i think it may be a keylogger, while i was online something very quickly installed itself on my computer. then my firewall told me that a program was trying to connect. when i looked at svcinit properties i realised it has been installed on the same day.
i searched the web and i found that it is a keylogger, or if you like a trojen horse. ive deleted it and ma comps runng smoothly again.
to uninstall startup in safe mode and look for the file c:\windows\system or wherever
go to run, type msconfig, in the startup tab unclick the SVC service option, and the run= option, this will stop giving you errors on start up.
i also advise on getting lavasoft adaware a spyware dection program
Hope it helps
0
I got the same problem - while online, something got quickly installed on my computer. I have Norton Internet security that started telling me that this program was trying to connect to a particular IP address and that the IP was trying to connect to my computer. I set security to block cvsinit, but after reading your e-mail did what you suggested, i.e. unchecked svc service and run=. Is there anything else? Should I try to delete the cvsinit.exe itself? any log files it creates? Report that particular IP address that cvsinit is trying to access?
Thanks in advance.
0
Delete the svcinit.exe program, the program requires you to start it up as does any program, the options that you unchecked will prevent if from loading up with windows, but if you double click the exe it will start doing the same thing and may re-check the options you disabled.
0
One more thing i forgot to mention is that the program does make a registry key which as i said above allows it to load with windows. its important that you do all the above FIRST before deleting the reg key.
to load regedit, go to run and type regedit
i went to the below address to identify what the svcinit program actually does but it doesnt have it,
http://www.pacs-portal.co.uk/startup_index.htm
what i did find is that all programs that want to load with windows will attempt to store their keys within the following location with your registry.
HKEY_LOCAL_MACHINE\software\microsoft\windows\current version\
now if in doubt about program within this dir always look for something like run, or RunOnce or RunServices. although you may have these key they may be ok but programers try to confuse you by naming their keys the same as those other common programs do.
as the svcinit program does. it stores its key within the above path and RunServices-
notice the (-) after the name there is a RunServices already within the registry but this is not a virus or anything is basically used by windows to start certain programs.So all you need to do is:
Go to run type regedit, then go toHKEY_LOCAL_MACHINE\software\microsoft\windows\current version\RunServices-
and delete the folder.
sorry about the bolk of info trying to be as informative as possoible.
Have a nice day
0
Hi AlwaysWillingToLearn,
I have been desperately searching for a solution to removing this thing, and you are the only one who claims to have the diffinitive answer. I have already run a scan with Housecall at the Trend Micro website, which found the svcinit.exe in the windows system folder and deleted it. I have looked in the registry as you instructed and have found the key:
Name: SVC Service
Data: "C:\WINDOWS\SYSTEM\svcinit.exe"I also found another strange key:
Name: 1A:Stardock TrayMonitor
Data: ""I recognised this name as I remember disabling it from startup (using msconfig) when I disabled svcinit. Any idea what this is?
Regarding the svcinit.exe registry key removal, I want to make sure I understand your instructions. Should I delete the entire RunServices- folder? Wouldn't this cause problems for the PC? If you could be so kind as to help me out, I would be very grateful.
Thanks,
DanteG
p.s. I noticed you said sorry for posting alot of info - don't be. The more information you can give, the better it is for people who need it (like me) :)
0
Hi AlwaysWillingToLearn,
Thank you for the prompt and detailed answer.
I did what you described and now feel soooo much better.
And I agree with the previous poster - the more info you give the better for those who need it.
Thanks again!
0
Hi DanteG
Stardock key in the registery is probably related to some software you installed, to skin windows (windows blind, or sth like)
for a compete list, see http://www.stardock.com/Hope this helps
Regards
0
svcinit.exe .........
win98 does NOT need this file to run correctly
How to remove it:
1. open the regedit ckick on edit\find type in svcinit click find delete any and all keys you find refering to this file use find next to search the entire registry.
2. click on start\run type in sysedit, close the first two windows { autoexec and config }
This time click search\find type in svcinit and click find, delete all refrences to this file then close the win.ini.
You also might want to search the system.ini and the protocol.ini
3.restart the pc in the dos mode at the prompt c:\windows type cd system and press enter
the prompt will change to c:\windows\system at this prompt type del svcinit.exe and press enter
at the prompt c:\windows\system type cd\ and press enter
then type exit and press enter
4. last but not least in windows go to start\programs\accessories\system tools\system information\tools\system configuration utility\start uncheck and refrences to svcinit.exe
5. restart your pc congrats you are now completely free of the SPYWARE svcinit
0
Thanks AweMan! I got rid of my svcinit! I just had ZoneAlarm not allow it internet access but decided to find out what exactly it was. I was surprised when Housecall AND my virus scan AND AdAware didn't catch it yet I had no idea what it was for. :D
YAY!
0
I have the BackDoor-Bam Trojan in my Svcinit.exe file. McAfee software cannot fix the problem. I've read the other questions and answers but I want to confirm that I can DELETE this file as it is not need........
THANKS
Ray
0
I have deleted the svcinit using the method above but when I go back to msconfig.exe startup there is an entry "run=" that refers to C\Windows\svcinit.exe. It is unchecked but how can I delete it?
Thanks
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
