Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Remoteadmin.ave/svkp - Malware?

  • Please log in to reply
2 replies to this topic

#1 spartdd


  • Members
  • 1 posts
  • Local time:11:03 AM

Posted 02 December 2007 - 03:21 AM

Hi, I've just switched to AVG and it's raising alerts that SYSTEM32/SVKP.SYS is infected with RemoteAdmin.AVE. I can't find any info anywhere about this, which is a little unusual. There are no ill effects on my machine, the alert appeared seconds after midnight, indicating possible association with a scheduled task. The AVG website doesnt provide any specifics. Any one have any ideas? Any help would be appreciated...

Thanks - sprat

BC AdBot (Login to Remove)


#2 rookie147


  • Members
  • 5,321 posts
  • Local time:05:03 PM

Posted 02 December 2007 - 05:55 AM

The presence of SVKP.SYS does not necessarily mean that this trojan is installed. SVKP.SYS is part of SVK Protector, which this trojan is packed with. SVK Protector is used in innocent programs as well.
It is entirely possible that this is a false positive.

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image

#3 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 51,768 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:03 PM

Posted 02 December 2007 - 10:54 AM

If you suspect a file may be a False positive, get a second opinion by submitting the file to jotti's virusscan or virustotal.com.
In the "File to upload & scan" box, browse to the location of the suspicious file and submit [upload] it for scanning/analysis.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users