...by Geoff Taylor
     Blog Categories
 - All
 - .NET
 - 4 Word Book Reviews
 - AllPodcasts
 - Business Thoughts
 - Clueless Idiocy
 - Development
 - Life
 - Norn Iron
 - Personal
 - Podcasting
 - PowerPack
 - Weird Interweb Stuff
 - What If...
     Web Tools
 - OPML Viewer
 - RSS Viewer
 - ASP.NET Colors
 - Base64 Encode
 - Base64 Decode
 - HTML Encode
 - HTML Decode
 - URL Encode
 - URL Decode
 - Crazy IPs
 - Whois

     Windows Tools

Source code for all these tools is on GitHub.

ADO.NET ConnTest
A simple, free Windows program to test ADO.NET connection strings.

Lines of C#
Ever wanted to know how many lines of C# code are in a file or folder hierarchy?  This free Windows program will tell you.

Free tools to process XML files from the command line.

What the hell's KService.exe and why is it running on my port 8080?

I signed up for Sky By Broadband today in the hope that it'd have some good movies that I could watch.  Turns out it doesn't - all it has is the same stuff that circulates on Sky Movies, and since I have Sky+ I can already record those to watch whenever I want.  Looks like I don't need the whole Sky By Broadband experience.

Which is just as well really.  I just tried to start my development web server that sits on port 8080, and it didn't work.  It gave the ridiculous error:

ASP.NET Development Server failed to start listening on port 8080.
 Error message:
 Only one usage of each socket address (protocol/network address/port) is normally permitted

That's ridiculous - it's started every other time without problems, and I wasn't running another instance of it.

Except for once the error message from a piece of Microsoft software was actually right.  There was something sitting on port 8080.  A bit of digging with some SysInternals tools told me it was a nasty little Peer To Peer (P2P) sharing application (called KService.exe) from Kontiki that Sky By Broadband installed.

I can't find a way of turning off the Peer To Peer sharing, and even uninstalling Sky By Broadband didn't get rid of the beast.  That's annoying.

Now normally I try to be a good internet citizen.  If I download something using BitTorrent, I leave BitTorrent open for a while afterwards to continue to share the (often very big) file and to help reduce the load on the primary servers.  So normally I wouldn't object to the same thing happening here with Sky By Broadband.

However, there's no choice in the matter here, and most people aren't even going to be aware it's happening.  The only thing most people will see is that their internet connection is suddenly a bit shittier than it used to be, and they'll probably just blame BT or their ISP.  There's no control over what is shared, or how much bandwidth this malware saps.

On the plus side, Kontiki have some instructions on how to uninstall the malware.

On the minus side, the instructions are just plain useless when all they say is to use Add/Remove Programs and the Kontiki malware doesn't even show itself in Add/Remove Programs.

I think I'll manually uninstall the KService nastiness and give Sky By Broadband a wide berth.  I don't care whether they declare what they're doing in the Terms & Conditions, I don't like them installing a nasty Peer 2 Peer applications on my machine and then making it hard to remove.

Just so you don't all think I'm just a miserable old curmudgeon, I'm not the only one who isn't too happy about the Peer 2 Peer aspects of Sky By Broadband.  So there are at least two of us now.

I think I'm lucky they chose port 8080.  If they hadn't I mightn't have noticed for quite a while.  Now I'm scared for all the people who won't notice they're now running a server...

UPDATE (10 minutes later):

Well, the manual uninstall seemed to work.  For those of you in a similar position, here's what I did:

  1. Went into the Services applet (Control Panel - Administrative Tools - Services) and stopped the KService service.  I also set it to Disabled.
  2. Opened Regedit, went to HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run and deleted the entry for 'kdx'.
  3. Still in Regedit, went to HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services and deleted the entry for 'kdx'.
  4. Deleted the entire folder where KService was installed (in my case 'C:\Program Files\KService')
  5. Restarted the machine.

It all seems to have worked OK.  Use these notes at your own risk though - I take no responsibility if it turns your PC into a smoldering lump of plastic and metal.

Categories: Clueless Idiocy
Technorati Tags:  
Permalink #.Posted by 'geoff' on Monday, 23 January 2006 at 4:28PM

Comments, Trackbacks and Pingbacks

Geoff’s Blog :: Sky By Broadband causing trouble for others too
No excerpt.
Posted by 'Pingback' on Monday, 13 February 2006 at 6:08PM

OK, I know you all think I just sit here and rant about every little thing that goes wrong, but that's not entirely true.   It gladdened my heart today to hear from a couple of people that had installed the nastiness that is Sky By Broadband and...
Posted by 'Geoff's Blog' on Monday, 13 February 2006 at 6:08PM

Geoff’s Blog :: Sky By Broadband causing trouble for others too
No excerpt.
Posted by 'Pingback' on Monday, 13 February 2006 at 6:08PM

OK, I know you all think I just sit here and rant about every little thing that goes wrong, but that's not entirely true.   It gladdened my heart today to hear from a couple of people that had installed the nastiness that is Sky By Broadband and...
Posted by 'Geoff's Blog' on Monday, 13 February 2006 at 6:08PM

kservice.exe - what is it and why can I not easily remove it?
I was just doing a checkup on my machine and I noticed a program had "Hung on starting" in the event...
Posted by 'Nick Whittome - "The Naked MVP" ' on Friday, 17 February 2006 at 7:40PM

Geoff’s Blog :: "Not quite user friendly enough"?
No excerpt.
Posted by 'Pingback' on Sunday, 26 February 2006 at 1:23PM

Remember those people at Kontiki who made that P2P app that Sky By Broadband are using to saturate peoples bandwidth?  I've ranted before that I don't think their lack of uninstaller is accidental or a sign of incompetence - I think they quite del...
Posted by 'Geoff's Blog' on Sunday, 26 February 2006 at 1:23PM

Problems with Kontiki/Sky By Broadband make Slashdot
The problems with the peer-to-peer nastiness that is Sky By Broadband have made the front page of Slashdot.   The Slashdot article itself doesn't have any new stuff, and it seems to be more annoyed at Sky not making it clear it's a Peer 2 Peer a...
Posted by 'Geoff's Blog' on Monday, 27 February 2006 at 10:56AM

Is Sky By Broadband Controlling Your Computer
I wrote about Sky By Broadband back in January, a service that lets Sky customers download movies on demand. One of my Daily SearchCast listeners and Daggle readers dropped me a note to say that it looks like Sky installs something called Kservice that...
Posted by 'Daggle: Danny Sullivan's Blog' on Thursday, 06 April 2006 at 10:29PM

An update on KService.exe
I got an email a couple of weeks ago (sorry for the delay) about that malware KService.exe.  No names, no pack drill, but it has some useful info so I'll pass it on here in case anyone's interested. I got the same thing here... only it seems ...
Posted by 'Geoff's Blog' on Saturday, 06 May 2006 at 2:36PM

Media Coder TV » Sky VoD on your PC - Watch Out!
No excerpt.
Posted by 'Pingback' on Thursday, 08 June 2006 at 7:19PM

Sky By Broadband Installs Peer 2 Peer (P2P) Hidden Tool
No excerpt provided.
Posted by 'Guppy's Random Ramblings' on Monday, 31 July 2006 at 8:05PM

Guppy's Random Ramblings - Sky By Broadband Ins...
Excerpt of pingback could not be generated.
Posted by 'Pingback' on Monday, 31 July 2006 at 8:05PM

Jay just emailed me to tell me that Channel 4's new 4oD service (on-demand downloading of some Channel 4 shows) uses Kontiki, the same content delivery system that Sky By Broadband uses that has caused folks so many problems.   I think I'll be a...
Posted by 'Geoff's Blog' on Sunday, 14 January 2007 at 3:48PM

Andy Cunningham » What the hell’...
Geoff’s Blog :: What the hell’s KService....
Posted by 'Pingback' on Wednesday, 14 March 2007 at 4:53PM

kservice.exe, Channel 4 and the stolen bandwi...
here) - it seems Sky By Broadband’s custo...
Posted by 'Pingback' on Wednesday, 09 May 2007 at 8:58AM

BBC's iPlayer uses nasty, bandwidth-leeching Kontiki for peer to peer
I got an email from Ben Ashley, another surprised Kontiki user.  He said: [snip] Midway through a game of rFactor, my lag went through the roof and that made it unbearable.  Alt-tabbing out, I noticed KService kicking up a stink in Task...
Posted by 'Geoff's Blog' on Wednesday, 01 August 2007 at 7:09PM

GingerNinja.net » Blog Archive »...
Geoff’s Blog and checking references to t...
Posted by 'Pingback' on Sunday, 23 September 2007 at 2:35PM

More KService.exe stuff
GingerNinja wrote to let me know that Kservice (that problematic P2P app that often gets installed by other products) uses an ID of '{F4524160-9145-49C9-8810-46CBC1EA0021}'.  That info may help those of you who need/want to rid your registry of th...
Posted by 'Geoff's Blog' on Sunday, 23 September 2007 at 2:44PM

KService Kontiki
I saw this post about KService after some trepidatious times re-installing XP and when my re-installed firewall gave me the thumbs up or thumbs down query, I went looking. For my part Kontiki was installed when I started watching AOL's online TV lineup at in2tv.com. IF you choose to do their download the HiQ video storage client this comes with it. You can watch the shows fine online, but if you go so far as to take them up on storing the hi quality videoclips on YOUR machine, they have you download this too. I am guessing its a typical usage stats report card client and it serves up usage stats back to AOL. But the concern is legit, if it's on your box, then you're running a server you didn't know about.  Now also in my case, I found an uninstaller in the ...\program files\Kontiki\   directory. I ran it after trying the above "stop" the services method which didn't work but I also didn't go so far as regedit either. I have since also deleted the ..\Kontiki\ directory where I found all of it, and told my firewalls to block and alert if it runs again. Thanks for the heads up. 

Posted by 'curby' on Thursday, 29 May 2008 at 4:31PM

Open the Services console (by typing "services.msc" in the box which appears when you select "Run" from the start menu), highlight Kservice and you can change the startup type from Automatic to Manual or Disabled

Posted by 'John' on Saturday, 26 December 2009 at 12:06PM

found AOL hi-q video in 2007 loaded this program if you remove aol Hi-q it rmoves the offending program . If you look at properties  the signature is AOL LLC seems it was a popular program in 2006 -2007 

Posted by 'aoluser' on Tuesday, 14 September 2010 at 2:08PM

Thank YOU all for sharing... BBCi player and KService.exe DO NOT DOWNLOAD!
Boy! Now you are ALL making me HAPPY that both Sympatico and Rogers are placing limits on our monthly download allowance... sometimes even WITHOUT notifying their users (http://www.trishparr.com/tired-of-feeling-ripped-off-by-bell-telephone/). Many of us have stopped watching videos online. It has become too expensive in the GTA of Ontario.

Kontiki will be a name I will DREAD ever seeing in anything I download from now on. Thank YOU for the instructions on removing this "trogan" manually should my computer ever become infected by 

Posted by 'Trish' on Monday, 02 August 2010 at 3:26AM

Kservice from Channel 4oD
I found it was installed along with Channel 4oD.   Hopefully got rid now thanks to above blog. 

Posted by 'Nick B' on Wednesday, 24 September 2008 at 9:20PM

XP failing to boot... most of the time! | keyon...
Posted by 'Pingback' on Thursday, 22 January 2009 at 7:56AM

BBCi player
Since downloading BBCi player I now have a Norton antivirus window saying Kontiki is trying to access my computer.Everytime I block it the warning window pops up.I can't get rid of it.Stay clear of BBCi PLayer!!

Posted by 'Lynca' on Sunday, 26 October 2008 at 11:59AM

Post A Comment

Your Name:
Your URL (optional):
Comment Title:

RSS 2.0 Subscribe to the RSS 2.0 feed for Geoff's Blog.