close

Privacy guaranteed - Your email is not shared with anyone.

Question: Re: SpyBot and Command Service

Discussion in 'Tech Talk' started by JCM298, Aug 27, 2006.

  1. JCM298

    JCM298

    Messages:
    637
    Likes Received:
    0
    Joined:
    Dec 25, 2002
    Location:
    Tucson, AZ
    I've been having problems with my "devil's device". Firefox keeps freezing up and I posted about it a few days ago. I thought it was fixed but it's doing it again.

    I've run SpyBot three times. As soon as the scan starts, I get a notification that a threat called Command Service is in the system. SpyBot can't erase it, even when I let it do a scan when I re-start the system.

    In addition, when I shut down the computer, I get two notices saying that these programs can't be installed as the unit is shuting down. These programs are:

    ghynf.exe and

    apriw.exe

    Can somebody tell me how to get rid of these problems?

    Thanks,

    John
     
  2. IndyGunFreak

    IndyGunFreak

    Messages:
    26,836
    Likes Received:
    2,200
    Joined:
    Jan 26, 2001
    Location:
    Indiana
    Try downloading Ewido

    http://www.grisoft.com/doc/10/lng/us/tpl/tpl01

    AVG is also a very good free Antivirus program if you don't already have one.

    Restart in Safe Mode, Press F8(repeatedly) during start up.

    Run all your Antivirus and and Spyware software from there.

    IGF
     

  3. JCM298

    JCM298

    Messages:
    637
    Likes Received:
    0
    Joined:
    Dec 25, 2002
    Location:
    Tucson, AZ
    IndyGunFreak,

    Thanks for the fast reply. I'll give it a try.

    John
     
  4. Washington D.C.

    Washington D.C.

    Messages:
    5,218
    Likes Received:
    1
    Joined:
    Oct 13, 2003
    Location:
    Woestyn Kusdorp
    Command Service can be a false positive or a real threat.It's a server for remotely running command line programs.Some malware uses it and some legit programs use it.Mostly other anti malware programs like Windows Defender.
     
  5. Washington D.C.

    Washington D.C.

    Messages:
    5,218
    Likes Received:
    1
    Joined:
    Oct 13, 2003
    Location:
    Woestyn Kusdorp
    Download delcmdservice http://users.telenet.be/marcvn/tools/delcmdservice.zip
    and save it to your Desktop.

    Unzip the content to your Desktop (a folder named delcmdservice)
    Double-click on the delcmdservice folder
    Double-click on delreg.bat to launch the tool
    When the tool has finished, please reboot your computer.

    Go ahead and remove delcmdservice now.

    Next:

    Download Look2Me-Destroyer http://www.atribune.org/ccount/click.php?id=7 to your Desktop.
    Double-click Look2Me-Destroyer.exe to run it.
    Put a check next to Run this program as a task.
    You will receive a message saying Look2Me-Destroyer will close and re-open in approximately 1 minute. Click OK
    When Look2Me-Destroyer re-opens, click the Scan for L2M button, your desktop icons will disappear, this is normal.
    Once it's done scanning, click the Remove L2M button.
    You will receive a Done Scanning message, click OK.
    When completed, you will receive this message: Done removing infected files! Look2Me-Destroyer will now shutdown your computer, click OK.
    Your computer will then shutdown.
    Turn your computer back on.

    If Look2Me-Destroyer does not reopen automatically, reboot and try again.
     
  6. JCM298

    JCM298

    Messages:
    637
    Likes Received:
    0
    Joined:
    Dec 25, 2002
    Location:
    Tucson, AZ
    IndyGunFreak & Washington,D.C.,


    Thanks for all the info.


    John