command service

[jimhar]

When I run "check for problems" Command service is detected, but when I run remove problems it does not get removed. The entries are:
hkey_local_machine\system\currentcontrol
hkey_local_machine\system\controlset002
hkey_local_machine\system\controlset003
Any suggestions? Thanks, Jim

[Zenobia]

Could you do this,so that someone might have a look at it?

• Open SpyBot.
• Check for problems.
• When the scan completes, right click on the results list, select "Copy results to clipboard".
• Paste (Ctrl+V) those results here

[jimhar]

Hint of the Day: Click the bar at the right of this to see more information! ()


Command Service: [SBI $957D5FBB] Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService

Command Service: [SBI $F0D8CEEE] Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\cmdService

Command Service: [SBI $55535EE0] Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\cmdService


--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-08-18 TeaTimer.exe (1.6.2.23)
2006-06-20 unins000.exe (51.41.0.0)
2008-08-14 unins001.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-07-07 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-07-07 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-07-07 Tools.dll (2.1.5.7)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2008-08-05 Includes\Adware.sbi (*)
2008-08-19 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-06-03 Includes\Dialer.sbi (*)
2008-08-05 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-08-19 Includes\Hijackers.sbi (*)
2008-08-19 Includes\HijackersC.sbi (*)
2008-08-05 Includes\Keyloggers.sbi (*)
2008-08-12 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-08-20 Includes\Malware.sbi (*)
2008-08-19 Includes\MalwareC.sbi (*)
2008-08-05 Includes\PUPS.sbi (*)
2008-08-19 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-08-19 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-08-12 Includes\Spyware.sbi (*)
2008-08-12 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-08-05 Includes\Trojans.sbi (*)
2008-08-20 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

[Zenobia]

Huh.Well,you could get checked out in malware removal.

The procedures to follow are here:
http://forums.spybot.info/showthread.php?t=288

Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22

[jimhar]

I am the mewest of the new to this forum and went to the link shown but do not know how to get required info to that site. Do I start a new thread? I assume they will need the results of the scan that I posted. Please advise.Jim

[Zenobia]

Hi.

No,they don't usually analyze Spybot logs in there,so you only need to post the log you posted above if requested.You will need to post a hijackthis log,though.This is covered in post #2 of the procedures sticky:
http://forums.spybot.info/showpost.p...50&postcount=2

Yes,you need to start a new thread in the malware removal section of the forum,after following the instructions above.This section:
http://forums.spybot.info/forumdisplay.php?f=22
Just hit New Thread when you're all ready to post.

[Zenobia]

How is it going?