Infected with command service

[Guest]

Hi, I have Microsoft Windows XP version 2002. I also have XoftSpySE as my
antispyware program. However, I was infected with a command service that
XoftSpySE is unable to delete. I tried to delete it by searching the file
and right click, then delete it but I keep getting an error message "Cannot
delete command: Access is denied. Make sure the disk is not full or
write-protected and that the file is not currently in use".

How can I get a rid of this file because the pop-ups are getting out of hand
and this seems to be the source of the problem.

Thank you.

 

[Peter Foldes]

Did you try and take ownership of this file
http://support.microsoft.com/?kbid=308421

 

[Bubba]

You say it's a "Service"? IS it indeed a sevice or just an app that is
running from "Stratup"?

In any case, there are seveal "Quick Things to try".

1) Reboot in SAFE mode, locate the file and nuke it, then:
2) Run MSCONFIG and click on the startup tab. Locate any/all entries in
there and deselct the check mark,
3) Restart in normal mode. XP will (upon startup) indicate that a change was
made to your startup, select OK and "Don't tell me again" (or whatever the
check box says).

Also, it may be sitting in PREFETCH, nuke it there as well.

If I/we new the name of the sevice, I/we would have done a google, but you
didn't supply that information.

You could try a System Restore (which won't nuke the file, but it will
restore certain registry settings that may allow you to Nuke the file, i.e.
the registry setting(s) that allow the file/service to load will not exist).

You could try Spybot and/or Ad-aware SE. They are both free and are quite
excellent. OK, for free you won't get everything, but they certainly seem to
help keep my system clean.

BTW: Of all the Antispyware/Antivirus tools out there, I have been using
KasperSky and highly recommend and use it for all my clients. It's light
weight (not BLOATware like McAfee and NIS). It's not that expensive. I
realize that there a TONS of these out there, but for some reason the
Russions seem to have a good handle on developing anit-viral and
anit-spamware. Just a thought.

 

[Bubba]

OOPS - When I say Locate any/all entries using MSCONFIG, I mean with regard
to the "SERVICE". Don't remove everything!

Sorry 'bout the incomplete info.

 

[Kelly]

Hi,

Start/Run/Regedit

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

Delete it from there.

Also go to: Start/Run: services.msc
Disable/Stop

--

All the Best,
Kelly (MS-MVP/DTS&XP)

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm