Posted on 2004-10-27
Have a file srvcat.exe. It is located in the c:\windows\cursors folder. I cannot delete this file. I am running window xp home and this file won't allow me to open the task manager, registry or connect to hotmail when XP is opened normally. Something creates a *srvcat in the HKLM/software/microsoft/windows/currentversion/run folder of the registry and a srvcat.exe in the HKLM/software/microsoft/windows/currentversion/runonce folder. I have run Norton 2005 (with the most recent updates) and pest patrol (with the most recent updates) as well as run Norton from the symantec web site.
In safe mode I can get into the registry and delete these files but not the source file on the hard drive. The registry entry keeps returning. There is a process in the task manager called *srvcat that every time I "end process" immediately starts up again.
Our fire wall indicates that it is sending out files via ports 6777 and 7000.
There is no reference to this file on google, symantec or mcafee. Any ideas how to find out what is generating this file?