spybot 1.4 : Command Services

G

Guest

Using xp prof and run spybot 1.4 and gave this problem (check) right at the
beginning, quote:
Command Services - system service>Hkey_Local
Machine\System\controlset002\services\cmdService

Question: is this suppose to be delete ?

also I am unsure whether these few findings (all check) are suppose to be
deleted too.
Windows Security Centre AntiVirusDisableNotify
......................................AntiVirusOverride
......................................FirewallDisableNotify
......................................FirewallOverride
......................................SP2Update
......................................UpdateDisableNotify

appreciate some guidance, TIA
 
J

Joe K

oh2oh2 said:
Using xp prof and run spybot 1.4 and gave this problem (check) right at the
beginning, quote:
Command Services - system service>Hkey_Local
Machine\System\controlset002\services\cmdService

Question: is this suppose to be delete ?

also I am unsure whether these few findings (all check) are suppose to be
deleted too.
Windows Security Centre AntiVirusDisableNotify
.....................................AntiVirusOverride
.....................................FirewallDisableNotify
.....................................FirewallOverride
.....................................SP2Update
.....................................UpdateDisableNotify

appreciate some guidance, TIA
I deleted them in a XP HOme as it was infested with viruses and
trojans.This may have been installed by a virus to actually stop the
anti virus and close the firewall.Please do a complete virus scan and
trojan scan. Try an AD ware remoaval too.
But I could be mistaken.
 
A

Alias

oh2oh2 said:
Using xp prof and run spybot 1.4 and gave this problem (check) right at the
beginning, quote:
Command Services - system service>Hkey_Local
Machine\System\controlset002\services\cmdService

Question: is this suppose to be delete ?

also I am unsure whether these few findings (all check) are suppose to be
deleted too.
Windows Security Centre AntiVirusDisableNotify
.....................................AntiVirusOverride
.....................................FirewallDisableNotify
.....................................FirewallOverride
.....................................SP2Update
.....................................UpdateDisableNotify

appreciate some guidance, TIA

Right click on each one and choose, "Do not show this detection again".
All this means is that you're XP Security Center is turned off and is
nothing to worry about, although you should install SP2 ASAP.
 
A

Alias

Joe said:
I deleted them in a XP HOme as it was infested with viruses and
trojans.This may have been installed by a virus to actually stop the
anti virus and close the firewall.Please do a complete virus scan and
trojan scan. Try an AD ware remoaval too.
But I could be mistaken.

If the OP followed your erroneous advice, he or she would have wasted
their time. If you don't know the answer, don't post a reply.

Alias

Use the Reply to Sender feature of your news reader program to email me.
Utiliza Responder al Remitente para mandarme un mail.
 
D

David H. Lipman

From: "oh2oh2" <[email protected]>

| Using xp prof and run spybot 1.4 and gave this problem (check) right at the
| beginning, quote:
| Command Services - system service>Hkey_Local
| Machine\System\controlset002\services\cmdService
|
| Question: is this suppose to be delete ?
|
| also I am unsure whether these few findings (all check) are suppose to be
| deleted too.
| Windows Security Centre AntiVirusDisableNotify
| .....................................AntiVirusOverride
| .....................................FirewallDisableNotify
| .....................................FirewallOverride
| .....................................SP2Update
| .....................................UpdateDisableNotify
|
| appreciate some guidance, TIA

Yes !
HKEY_LOCAL_MACHINE\System\controlset002\services\cmdService

That is a malware related service and should be removed !

Please let SpyBot do what it has suggested to be done.
 
G

Guest

Run either in safe mode or normal mode and right click the various files of,
say-
Windows Security Centre AntiVirusDisableNotify, it does not give me the
"Do not show this detection again".

what is shows are as follows:-

Deselect all
select this product
select only this product (gray out)
deselect this product (gray out)

Excludes this detection from further searches (gray out)
Exclude this product from further searches

More details>choice of "jump rto location" or "open with user defined
application"
More options> clear list

save full report to file
copy full report to clipboard
save result to file
copy results to clipboard

Just been cautious, which ones should I choose after the right click.

"cmdservices"- ok I will delete it
Many thanks ++ ..............................
 
G

Guest

Reading through the whole messages, I have a few questions with regard to my
OP.
David,
with regrd to the various files on Window Security Centre, and I quote your
response "Please let SpyBot do what it has suggested to be done. " so its ok
then I delete these WSC files or are you refering to other files found by
spybot.

Alias, right click on the windows security centre files , I dont seems to be
able to select the option you mentioned as it was gray out. How can I make it
stand out then? Thanks.
 
D

David H. Lipman

From: "oh2oh2" <[email protected]>

| Reading through the whole messages, I have a few questions with regard to my
| OP.
| David,
| with regrd to the various files on Window Security Centre, and I quote your
| response "Please let SpyBot do what it has suggested to be done. " so its ok
| then I delete these WSC files or are you refering to other files found by
| spybot.
|
| Alias, right click on the windows security centre files , I dont seems to be
| able to select the option you mentioned as it was gray out. How can I make it
| stand out then? Thanks.

I can't tell you without seeing the screen. I always prefer to let anti malare do what they
suggest. It is rare, but occasional does happen, when a False Positive declaration is made.
 
Top