Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Spyware and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.
MalwareByte's Anti-Malware Download

> 

When posting your problem, do not run and post a ComboFix logs. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

 
Reply to this topicStart new topic
> Remoteadmin.ave/svkp - Malware?
spartdd
post Dec 2 2007, 03:21 AM
Post #1


New Member
*

Group: Members
Posts: 1
Joined: 2-December 07
Member No.: 173,922



Hi, I've just switched to AVG and it's raising alerts that SYSTEM32/SVKP.SYS is infected with RemoteAdmin.AVE. I can't find any info anywhere about this, which is a little unusual. There are no ill effects on my machine, the alert appeared seconds after midnight, indicating possible association with a scheduled task. The AVG website doesnt provide any specifics. Any one have any ideas? Any help would be appreciated...

Thanks - sprat
Go to the top of the page
 
+Quote Post
rookie147
post Dec 2 2007, 05:55 AM
Post #2


Forum Addict
******

Group: HJT Team Coach
Posts: 5,271
Joined: 1-April 06
Member No.: 62,052



The presence of SVKP.SYS does not necessarily mean that this trojan is installed. SVKP.SYS is part of SVK Protector, which this trojan is packed with. SVK Protector is used in innocent programs as well.
It is entirely possible that this is a false positive.


--------------------
If you are pleased with the service I have offered, you may like to consider making a donation.
Go to the top of the page
 
+Quote Post
quietman7
post Dec 2 2007, 10:54 AM
Post #3


Bleepin' Janitor
******

Group: Global Moderator
Posts: 14,074
Joined: 9-July 05
From: Virginia, USA
Member No.: 26,513



If you suspect a file may be a False positive, get a second opinion by submitting the file to jotti's virusscan or virustotal.com.
In the "File to upload & scan" box, browse to the location of the suspicious file and submit [upload] it for scanning/analysis.


--------------------
"THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"

Microsoft MVP - Windows Security 2007-2009
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 9th January 2009 - 03:34 AM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Malware Removal Guides

© 2003-2008 All Rights Reserved Bleeping Computer LLC.