Computer help (RE: "System Configuration Utility" Screen) (svcnet.exe virus)

self

[jdm]

Hi folks,

Is there anyway to delete an item directly from the "System Configuration Utility" screen? If you look at the photo below, you'll see that "svcnet.exe" is NOT checked under the "startup" tab.

When I go into the registry [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] of course there's no key for "svcnet.exe" because it's unticked in the "startup" tab. The only key there is "NVCPL" since it's the only item ticked to launch at startup.

My question is this: is there anyway to delete the unchecked item "svcnet.exe" from "System Configuration Utility" (so it doesn't appear there again) WITHOUT having to run the program again at startup and then go to the registry to delete the key [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svcnet]????

It's just bugging me that the item is there in the "System Configuration Utility" screen in the first place.

I've taken care of everything else to rid myself of the virus, such as turning off system restore, booting into safe mode to remove files, etc.

Many thanks for any help!

[jdm]

bttt

[RedBloodedAmerican]

Disable system restore (and leave it disabled forever)

Run a scan of your PC for viruses usining an updated Norton or get some free AV program

Then

1. Click Start > Run.
2. Type regedit
   
   Then click OK.
   
   
3. Navigate to the key:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   
   
4. In the right pane, delete the value:
   
   "System Restore" = "svcnet.exe"
   
   
5. Navigate to the key:
   
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
   
   
6. In the right pane, delete the value:
   
   "System Restore" = "svcnet.exe"
   
   
7. Exit the Registry Editor.

[RedBloodedAmerican]

...oh...

then fr mail me for my paypal account.

That'll be $25.

[RedBloodedAmerican]

Did you get it via file sharing, or are you on a network with file sharing in your network properties enabled? Just curious. Symantec doesn't specify which it comes thru, but they say "file sharing"

[jdm]

"Did you get it via file sharing"

Ummmmm.... LOL.

Hey, thanks so much for your responses! Really, REALLY appreciate it. I still have to try what you suggested. Downloading AVG and running that first. Have a great night and thanks a million for taking the time, effort, knowledge to type everything out.

[jdm]

Hmmmmmm.... There is no "System Restore = "svcnet.exe" under either:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

or

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

I looked for it earlier tonight and didn't see it either.

I don't think "svcnet.exe" is under the path(s) listed due to the fact that it isn't "ticked" in the "startup" tab, in System Configuration Utility.

Is that a possibility?

Thanks again for your input.

[RedBloodedAmerican]

What about open regedit and do a "find" (CTRL+F) of "svcnet.exe"

[RedBloodedAmerican]

Panda ActiveScan - http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Mcafee OnlineScan - http://us.mcafee.com/?wt.mc.n=us_us_learnmore_home&wt.mc_t=int_pro_hom&cid=10348

[RedBloodedAmerican]

I forgot to add: do a search (include hidden files and folders) of svcnet.exe and it might be in the windows system or system32 folder. Delete it when you find it. And symantec says it creates allot of files in the windows msview folder but Ithink the Panda online scan will fix it. Maybe.

[jdm]

"What about open regedit and do a "find" (CTRL+F) of "svcnet.exe"

Bingo! That did it. Found two occurrences of "svcnet" -- deleted both. I think I should be okay -- can't thank you enough for your knowledge and assistance.

Have a good night!

JDM

[jdm]

Forgot to add: yes, I had an "MSview" folder in "System32" -- the MSview folder contained more than 24,000 corrupt files! (a total of 5+ gigs). Glad they're now gone. Hope it stays that way!