cmdService manual removal:
Kill processes:
adtech2006.exe, cmdinst.exe, command.exe, idl.exe, idlemg.exe, mte2odi6odoxng.exe, mte2odm6odoxng.exe, mte3ndi6odoxng.exe, mte3odm6odoxng.exe, sfvbhwd.exe
Delete registry values:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}
Unregister DLLs:asappsrv.dll, atmtd.dll
Delete files:adtech2006.exe, cmdinst.exe, command.exe, idl.exe, idlemg.exe, mte2odi6odoxng.exe, mte2odm6odoxng.exe, mte3ndi6odoxng.exe, mte3odm6odoxng.exe, sfvbhwd.exe, asappsrv.dll, atmtd.dll
Delete directories:C:\Windows\[X]
C:\Winnt\[X]
Misc:[X] is a combination of random characters.
Exact file location:
asappsrv.dll - C:\Windows\[X] or C:\Winnt\[X]
adtech2006.exe, sfvbhwd.exe - C:\Windows or C:\Winnt
atmtd.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
mte2odi6odoxng.exe - C:, C:\Documents and Settings\[Current User]\Local Settings\Temp
cmdinst.exe, idl.exe, idlemg.exe - C:\Documents and Settings\[Current User]\Local Settings\Temp
command.exe - C:\Documents and Settings\[Current User]\Local Settings\Temp; C:\Windows\[X] or C:\Winnt\[X]
Post Comment: