Jump to content

Infected with command service


Recommended Posts

Guest MKGMIKE
Posted

Hi, I have Microsoft Windows XP version 2002. I also have XoftSpySE as my

antispyware program. However, I was infected with a command service that

XoftSpySE is unable to delete. I tried to delete it by searching the file

and right click, then delete it but I keep getting an error message "Cannot

delete command: Access is denied. Make sure the disk is not full or

write-protected and that the file is not currently in use".

 

How can I get a rid of this file because the pop-ups are getting out of hand

and this seems to be the source of the problem.

 

Thank you.

  • Replies 4
  • Created
  • Last Reply

Popular Days

Guest Peter Foldes
Posted

Re: Infected with command service

 

Did you try and take ownership of this file

http://support.microsoft.com/?kbid=308421

--

Peter

 

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

 

"MKGMIKE" <MKGMIKE@discussions.microsoft.com> wrote in message news:8382DD21-DE63-4354-A770-F1D1FAED9BFE@microsoft.com...

> Hi, I have Microsoft Windows XP version 2002. I also have XoftSpySE as my

> antispyware program. However, I was infected with a command service that

> XoftSpySE is unable to delete. I tried to delete it by searching the file

> and right click, then delete it but I keep getting an error message "Cannot

> delete command: Access is denied. Make sure the disk is not full or

> write-protected and that the file is not currently in use".

>

> How can I get a rid of this file because the pop-ups are getting out of hand

> and this seems to be the source of the problem.

>

> Thank you.

Posted

Re: Infected with command service

 

You say it's a "Service"? IS it indeed a sevice or just an app that is

running from "Stratup"?

 

In any case, there are seveal "Quick Things to try".

 

1) Reboot in SAFE mode, locate the file and nuke it, then:

2) Run MSCONFIG and click on the startup tab. Locate any/all entries in

there and deselct the check mark,

3) Restart in normal mode. XP will (upon startup) indicate that a change was

made to your startup, select OK and "Don't tell me again" (or whatever the

check box says).

 

Also, it may be sitting in PREFETCH, nuke it there as well.

 

If I/we new the name of the sevice, I/we would have done a google, but you

didn't supply that information.

 

You could try a System Restore (which won't nuke the file, but it will

restore certain registry settings that may allow you to Nuke the file, i.e.

the registry setting(s) that allow the file/service to load will not exist).

 

You could try Spybot and/or Ad-aware SE. They are both free and are quite

excellent. OK, for free you won't get everything, but they certainly seem to

help keep my system clean.

 

BTW: Of all the Antispyware/Antivirus tools out there, I have been using

KasperSky and highly recommend and use it for all my clients. It's light

weight (not BLOATware like McAfee and NIS). It's not that expensive. I

realize that there a TONS of these out there, but for some reason the

Russions seem to have a good handle on developing anit-viral and

anit-spamware. Just a thought.

 

"MKGMIKE" <MKGMIKE@discussions.microsoft.com> wrote in message

news:8382DD21-DE63-4354-A770-F1D1FAED9BFE@microsoft.com...

> Hi, I have Microsoft Windows XP version 2002. I also have XoftSpySE as my

> antispyware program. However, I was infected with a command service that

> XoftSpySE is unable to delete. I tried to delete it by searching the file

> and right click, then delete it but I keep getting an error message

> "Cannot

> delete command: Access is denied. Make sure the disk is not full or

> write-protected and that the file is not currently in use".

>

> How can I get a rid of this file because the pop-ups are getting out of

> hand

> and this seems to be the source of the problem.

>

> Thank you.

>

Posted

OOPS - Re: Infected with command service

 

OOPS - Re: Infected with command service

 

OOPS - When I say Locate any/all entries using MSCONFIG, I mean with regard

to the "SERVICE". Don't remove everything!

 

Sorry 'bout the incomplete info.

 

:)

 

"Bubba" <bubba@netnews.ca> wrote in message

news:OINyDbJ8HHA.5712@TK2MSFTNGP04.phx.gbl...

> You say it's a "Service"? IS it indeed a sevice or just an app that is

> running from "Stratup"?

>

> In any case, there are seveal "Quick Things to try".

>

> 1) Reboot in SAFE mode, locate the file and nuke it, then:

> 2) Run MSCONFIG and click on the startup tab. Locate any/all entries in

> there and deselct the check mark,

> 3) Restart in normal mode. XP will (upon startup) indicate that a change

> was made to your startup, select OK and "Don't tell me again" (or whatever

> the check box says).

>

> Also, it may be sitting in PREFETCH, nuke it there as well.

>

> If I/we new the name of the sevice, I/we would have done a google, but you

> didn't supply that information.

>

> You could try a System Restore (which won't nuke the file, but it will

> restore certain registry settings that may allow you to Nuke the file,

> i.e. the registry setting(s) that allow the file/service to load will not

> exist).

>

> You could try Spybot and/or Ad-aware SE. They are both free and are quite

> excellent. OK, for free you won't get everything, but they certainly seem

> to help keep my system clean.

>

> BTW: Of all the Antispyware/Antivirus tools out there, I have been using

> KasperSky and highly recommend and use it for all my clients. It's light

> weight (not BLOATware like McAfee and NIS). It's not that expensive. I

> realize that there a TONS of these out there, but for some reason the

> Russions seem to have a good handle on developing anit-viral and

> anit-spamware. Just a thought.

>

> "MKGMIKE" <MKGMIKE@discussions.microsoft.com> wrote in message

> news:8382DD21-DE63-4354-A770-F1D1FAED9BFE@microsoft.com...

>> Hi, I have Microsoft Windows XP version 2002. I also have XoftSpySE as my

>> antispyware program. However, I was infected with a command service that

>> XoftSpySE is unable to delete. I tried to delete it by searching the

>> file

>> and right click, then delete it but I keep getting an error message

>> "Cannot

>> delete command: Access is denied. Make sure the disk is not full or

>> write-protected and that the file is not currently in use".

>>

>> How can I get a rid of this file because the pop-ups are getting out of

>> hand

>> and this seems to be the source of the problem.

>>

>> Thank you.

>>

>

>

>

Posted

Re: Infected with command service

 

Hi,

 

Start/Run/Regedit

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

 

Delete it from there.

 

Also go to: Start/Run: services.msc

Disable/Stop

 

--

 

All the Best,

Kelly (MS-MVP/DTS&XP)

 

Taskbar Repair Tool Plus!

http://www.kellys-korner-xp.com/taskbarplus!.htm

 

 

 

"MKGMIKE" <MKGMIKE@discussions.microsoft.com> wrote in message

news:8382DD21-DE63-4354-A770-F1D1FAED9BFE@microsoft.com...

> Hi, I have Microsoft Windows XP version 2002. I also have XoftSpySE as my

> antispyware program. However, I was infected with a command service that

> XoftSpySE is unable to delete. I tried to delete it by searching the file

> and right click, then delete it but I keep getting an error message

> "Cannot

> delete command: Access is denied. Make sure the disk is not full or

> write-protected and that the file is not currently in use".

>

> How can I get a rid of this file because the pop-ups are getting out of

> hand

> and this seems to be the source of the problem.

>

> Thank you.


×
×
  • Create New...