Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SNDSrvc.exe is being nuked!

Status
Not open for further replies.

Sk8n8or

IS-IT--Management
Feb 22, 2005
4
US
This just happened today. SNDSrvc.exe is automatically deleted from whatever directory I try to write it too--including of course "E:\Program Files\Common Files\Symantec Shared" where it belongs.

It cannot be copied from an another OS partition, as something just nukes it immediately Symantec Corp ED 10.5 will not install as it can't get past not being able to create this service file.

I've seen some reports about IRCBot-FP trojans that disable AV programs as part of their malace---but I've scanned my system with all sorts of AV tools including SAVCE from another OS partition and I'm not seeing any indication of a virus.

Symantec reports it as either a permission issue or virus but I'm admin and have all the directories set with proper access.

There are no registry entries for SNDSRVC so I'm mystified as to what is messing with it--or how. I've even rolled back my entire OS partition with an Acronis image predating this problem and it didn't help---so it's not the registry or the system files.

Coming from something though.This just happened today. SNDSrvc.exe is automatically deleted from whatever directory I try to write it too--including of course "E:\Program Files\Common Files\Symantec Shared" where it belongs.

It cannot be copied from an another OS partition, as something just nukes it immediately Symantec Corp ED 10.5 will not install as it can't get past not being able to create this service file.

I've seen some reports about IRCBot-FP Trojans that disable AV programs as part of their malice---but I've scanned my system with all sorts of AV tools including SAVCE from another OS partition and I'm not seeing any indication of a virus.

Symantec reports it as either a permission issue or virus but I'm admin and have all the directories set with proper access.

There are no registry entries for SNDSRVC so I'm mystified as to what is messing with it--or how. I've even rolled back my entire OS partition with an Acronis image predating this problem and it didn't help---so it's not the registry or the system files.

Coming from something though.
 
spellcheck anywhere" caused the double entry of text--which I didn't notice. Nice to have an edit feature :)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top