Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Command Service (malware)


  • Please log in to reply
4 replies to this topic

#1 iml

iml

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:10 AM

Posted 04 November 2006 - 01:57 PM

Hey guys I need your help removing some registry keys for the Command Service bug.

I have ran S&D and it shows three entries, one I can remove. The other two are "inuse". I am wondering how to remove these registry keys. I have tried to remove them manually and they are like I said above "inuse".
Wondering if I could get some help with this problem.

Also the bug dosen't show up on the Add/Remove Programs list so please don't tell me to go there.

Thanks in advance,
-imL

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,319 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:10 AM

Posted 04 November 2006 - 02:14 PM

check out the info at the link below:
http://www.2-spyware.com/remove-cmdservice...CFQ-4WAodUCNziQ
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 iml

iml
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:10 AM

Posted 05 November 2006 - 01:33 PM

I am sorry but this did not help. :thumbsup:
I can get rid of everything but the two registry files, if you know how to remove them or disable them from being inuse please reply.

#4 buddy215

buddy215

  • Moderator
  • 13,319 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:10 AM

Posted 05 November 2006 - 02:58 PM

It is not unusual for a program to report false positives. Did you have any of the symptoms described in the link I posted? For instance:

cmdService properties:
Shows commercial adverts
Connects itself to the internet
Hides from the user
Stays resident in background

If you would like you can post a Hijack This Log and let the experts help you by following the instructions found here:
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 iml

iml
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:10 AM

Posted 05 November 2006 - 07:05 PM

Yes it has all of these sypmtoms, the way that it recommends for killing the processes do not work. It dosen't show up in the running files (Stays resident in background and Hides from the user). I need to know how to delete the registry keys that it has imbeded into my regitry files. I have used hijack this and it cant remove them. This is not a false positive.

-imL




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users