Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Fservice.exe & Qservice.exe Cant Get It Away!


  • Please log in to reply
4 replies to this topic

#1 Forg0t

Forg0t

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Local time:02:45 AM

Posted 10 February 2006 - 10:33 PM

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\fservice.exe
O4 - HKCU\..\Run: [qservices] C:\WINDOWS\qservice.exe

can someone help me get this thing away?

great..i am able to delete qservice.exe..i used the same method as qservice.exe to delete fservice.exe but it didnt work!

I used Autoruns to delete the qservice.exe..

Edited by Forg0t, 10 February 2006 - 10:54 PM.


BC AdBot (Login to Remove)

 


#2 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:07:45 PM

Posted 11 February 2006 - 04:28 AM

Hi Forg0t

I have read your post and I think it would be wise for you to post a HijackThis log for an expert to review. I bet you are wondering what HijackThis is. Well it's a program that is simply able to show others what's going on inside your computer, in terms of infection etc.. The files are showing up to be premium rate phone dialers. To be safe i would check with your ISP/telephone company to make sure that no expense calls are being made.

I recommend you follow the HijackThis preparation guide which can be found here. It is important that you follow the guide closely. A number of scans will be run which may well fix your problem.

As the guide says, after you have completed the scans that are recommended, please post your "HijackThis" log in a new topic in the forum found here. Please add your system infomation and also what problems you are having. Please wait for a few days and one of our experts will get onto fixing your computer for you.

David

#3 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:07:45 PM

Posted 11 February 2006 - 08:14 AM

Hmm, Forg0t you didn't follow the instructions --> read the preparation guide properly and you will understand where to post the log. At the moment, it's in the wrong place.

A Premium Rate Phone Dialer is a program that dials out to high cost telephone numbers and therefore charges your phone bill for them. It can happen without you realising.

David

#4 KoanYorel

KoanYorel

    Bleepin' Conundrum


  • Members
  • 19,461 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:65 miles due East of the "Logic Free Zone", in Md, USA
  • Local time:02:45 PM

Posted 11 February 2006 - 08:55 AM

I have split your HJT log away from this thread and moved it to the HJT forum here.
The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)

#5 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:07:45 PM

Posted 11 February 2006 - 09:14 AM

Thanks Koan :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users