View Full Version : "Command Service" can't be deleted
lucy.photo
2006-08-29, 13:35
I hope someone can help here.
I'm new to this whole area and can't seem to remove 'command service' and Smithfraud-C problems using Spybot. I've tried over and over again and it always tell me I have two that can't be removed.
Can you suggest a solution, please? I'm inundated with popups from various sources.
Thanks.
lucy.photo
2006-08-29, 13:40
sorry forgot to add my SS&D log. Here it is.
spybotsandra
2006-08-29, 13:40
Hello,
Please download the latest detection update (2006/08/25):
http://www.safer-networking.org/en/download/index.html
This should fix it.
Or choose the direct installation file:
http://www.safer-networking.org/updates/files/spybotsd_includes.exe
Best regards
Sandra
Team Spybot
lucy.photo
2006-08-29, 13:45
Sorry,
couldn't seem to attach the log file so renamed it to .txt and here it is again.
I'm running 1.4 and have just downloaded the latest detection updates.
Thanks.
lucy.photo
2006-08-29, 14:12
No further text.
spybotsandra
2006-08-29, 14:26
Hello,
There are some baddies which you can fix with Spybot.
Please delete the following Startup Entries:
C:\WINNT\system32\guard.tmp
C:\WINNT\system32\lv2u09f9e.dll
System.ini, hggghhe.dll
C:\WINNT\system32\vtuuu.dll
Open Spybot in the advanced mode via the menu item mode,
go to 'tools'->'System Startup'
Then mark the entries and remove them.
Please delete the following BHO's:
{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}
{89789F3D-E781-48BE-9B4D-FEA2523790F8}
Open Spybot in the advanced mode via the menu item mode,
go to 'tools'->'BHO's'.
Then mark the entries and remove them.
Best regards
Sandra
Team Spybot
LonnyRJones
2006-08-29, 19:43
Hi lucy.photo, Sandra
Your topic was moved to our malware sections
Specialized tools will be needed
In addremove programs uninstall "Search Bar"
then delete its folder
C:\Program Files\Deskbar
I see you have hijackthis, make a new log and post it please
But first put it in a folder such as c:\antispyware
This topic has been archived.
If you need it re-opened please send me a private message (pm) and provide a link to the thread.
Applies only to the original topic starter.