What the hell's KService.exe and why is it running on my port 8080?

I signed up for Sky By Broadband today in the hope that it'd have some good movies that I could watch.  Turns out it doesn't - all it has is the same stuff that circulates on Sky Movies, and since I have Sky+ I can already record those to watch whenever I want.  Looks like I don't need the whole Sky By Broadband experience.

Which is just as well really.  I just tried to start my development web server that sits on port 8080, and it didn't work.  It gave the ridiculous error:

ASP.NET Development Server failed to start listening on port 8080.
 Error message:
 Only one usage of each socket address (protocol/network address/port) is normally permitted

That's ridiculous - it's started every other time without problems, and I wasn't running another instance of it.

Except for once the error message from a piece of Microsoft software was actually right.  There was something sitting on port 8080.  A bit of digging with some SysInternals tools told me it was a nasty little Peer To Peer (P2P) sharing application (called KService.exe) from Kontiki that Sky By Broadband installed.

I can't find a way of turning off the Peer To Peer sharing, and even uninstalling Sky By Broadband didn't get rid of the beast.  That's annoying.

Now normally I try to be a good internet citizen.  If I download something using BitTorrent, I leave BitTorrent open for a while afterwards to continue to share the (often very big) file and to help reduce the load on the primary servers.  So normally I wouldn't object to the same thing happening here with Sky By Broadband.

However, there's no choice in the matter here, and most people aren't even going to be aware it's happening.  The only thing most people will see is that their internet connection is suddenly a bit shittier than it used to be, and they'll probably just blame BT or their ISP.  There's no control over what is shared, or how much bandwidth this malware saps.

On the plus side, Kontiki have some instructions on how to uninstall the malware.

On the minus side, the instructions are just plain useless when all they say is to use Add/Remove Programs and the Kontiki malware doesn't even show itself in Add/Remove Programs.

I think I'll manually uninstall the KService nastiness and give Sky By Broadband a wide berth.  I don't care whether they declare what they're doing in the Terms & Conditions, I don't like them installing a nasty Peer 2 Peer applications on my machine and then making it hard to remove.

Just so you don't all think I'm just a miserable old curmudgeon, I'm not the only one who isn't too happy about the Peer 2 Peer aspects of Sky By Broadband.  So there are at least two of us now.

I think I'm lucky they chose port 8080.  If they hadn't I mightn't have noticed for quite a while.  Now I'm scared for all the people who won't notice they're now running a server...

UPDATE (10 minutes later):

Well, the manual uninstall seemed to work.  For those of you in a similar position, here's what I did:

  1. Went into the Services applet (Control Panel - Administrative Tools - Services) and stopped the KService service.  I also set it to Disabled.
  2. Opened Regedit, went to HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run and deleted the entry for 'kdx'.
  3. Still in Regedit, went to HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services and deleted the entry for 'kdx'.
  4. Deleted the entire folder where KService was installed (in my case 'C:\Program Files\KService')
  5. Restarted the machine.

It all seems to have worked OK.  Use these notes at your own risk though - I take no responsibility if it turns your PC into a smoldering lump of plastic and metal.

Tags: Clueless Idiocy
Created by on Logo15659OpinionatedGeek Ltd.Logo15659

Geoff’s Blog :: Sky By Broadband causing trouble for others too

No excerpt.
Created by anonymous on Monday, 13 February 2006 at 6:08PM (source)

Trackback

OK, I know you all think I just sit here and rant about every little thing that goes wrong, but that's not entirely true.   It gladdened my heart today to hear from a couple of people that had installed the nastiness that is Sky By Broadband and...
Created by anonymous on Monday, 13 February 2006 at 6:08PM (source)

Geoff’s Blog :: Sky By Broadband causing trouble for others too

No excerpt.
Created by anonymous on Monday, 13 February 2006 at 6:08PM (source)

Trackback

OK, I know you all think I just sit here and rant about every little thing that goes wrong, but that's not entirely true.   It gladdened my heart today to hear from a couple of people that had installed the nastiness that is Sky By Broadband and...
Created by anonymous on Monday, 13 February 2006 at 6:08PM (source)

kservice.exe - what is it and why can I not easily remove it?

I was just doing a checkup on my machine and I noticed a program had "Hung on starting" in the event...
Created by anonymous on Friday, 17 February 2006 at 7:40PM (source)

Geoff’s Blog :: "Not quite user friendly enough"?

No excerpt.
Created by anonymous on Sunday, 26 February 2006 at 1:23PM (source)

Trackback

Remember those people at Kontiki who made that P2P app that Sky By Broadband are using to saturate peoples bandwidth?  I've ranted before that I don't think their lack of uninstaller is accidental or a sign of incompetence - I think they quite del...
Created by anonymous on Sunday, 26 February 2006 at 1:23PM (source)

Problems with Kontiki/Sky By Broadband make Slashdot

The problems with the peer-to-peer nastiness that is Sky By Broadband have made the front page of Slashdot.   The Slashdot article itself doesn't have any new stuff, and it seems to be more annoyed at Sky not making it clear it's a Peer 2 Peer a...
Created by anonymous on Monday, 27 February 2006 at 10:56AM (source)

Is Sky By Broadband Controlling Your Computer

I wrote about Sky By Broadband back in January, a service that lets Sky customers download movies on demand. One of my Daily SearchCast listeners and Daggle readers dropped me a note to say that it looks like Sky installs something called Kservice that...
Created by anonymous on Thursday, 6 April 2006 at 9:29PM (source)

An update on KService.exe

I got an email a couple of weeks ago (sorry for the delay) about that malware KService.exe.  No names, no pack drill, but it has some useful info so I'll pass it on here in case anyone's interested. I got the same thing here... only it seems ...
Created by anonymous on Saturday, 6 May 2006 at 1:36PM (source)

Media Coder TV » Sky VoD on your PC - Watch Out!

No excerpt.
Created by anonymous on Thursday, 8 June 2006 at 6:19PM (source)

Sky By Broadband Installs Peer 2 Peer (P2P) Hidden Tool

No excerpt provided.
Created by anonymous on Monday, 31 July 2006 at 7:05PM (source)

Guppy's Random Ramblings - Sky By Broadband Ins...

Excerpt of pingback could not be generated.
Created by anonymous on Monday, 31 July 2006 at 7:05PM (source)

Trackback

Jay just emailed me to tell me that Channel 4's new 4oD service (on-demand downloading of some Channel 4 shows) uses Kontiki, the same content delivery system that Sky By Broadband uses that has caused folks so many problems.   I think I'll be a...
Created by anonymous on Sunday, 14 January 2007 at 3:48PM (source)

Andy Cunningham » What the hell’...

Geoff’s Blog :: What the hell’s KService....
Created by anonymous on Wednesday, 14 March 2007 at 4:53PM (source)

kservice.exe, Channel 4 and the stolen bandwi...

here) - it seems Sky By Broadband’s custo...
Created by anonymous on Wednesday, 9 May 2007 at 7:58AM (source)

BBC's iPlayer uses nasty, bandwidth-leeching Kontiki for peer to peer

I got an email from Ben Ashley, another surprised Kontiki user.  He said: [snip] Midway through a game of rFactor, my lag went through the roof and that made it unbearable.  Alt-tabbing out, I noticed KService kicking up a stink in Task...
Created by anonymous on Wednesday, 1 August 2007 at 6:09PM (source)

GingerNinja.net » Blog Archive »...

Geoff’s Blog and checking references to t...
Created by anonymous on Sunday, 23 September 2007 at 1:35PM (source)

More KService.exe stuff

GingerNinja wrote to let me know that Kservice (that problematic P2P app that often gets installed by other products) uses an ID of '{F4524160-9145-49C9-8810-46CBC1EA0021}'.  That info may help those of you who need/want to rid your registry of th...
Created by anonymous on Sunday, 23 September 2007 at 1:44PM (source)

KService Kontiki

I saw this post about KService after some trepidatious times re-installing XP and when my re-installed firewall gave me the thumbs up or thumbs down query, I went looking. For my part Kontiki was installed when I started watching AOL's online TV lineup at in2tv.com. IF you choose to do their download the HiQ video storage client this comes with it. You can watch the shows fine online, but if you go so far as to take them up on storing the hi quality videoclips on YOUR machine, they have you download this too. I am guessing its a typical usage stats report card client and it serves up usage stats back to AOL. But the concern is legit, if it's on your box, then you're running a server you didn't know about.  Now also in my case, I found an uninstaller in the ...\program files\Kontiki\   directory. I ran it after trying the above "stop" the services method which didn't work but I also didn't go so far as regedit either. I have since also deleted the ..\Kontiki\ directory where I found all of it, and told my firewalls to block and alert if it runs again. Thanks for the heads up. 
Created by anonymous on Thursday, 29 May 2008 at 3:31PM (source)

Kservice from Channel 4oD

I found it was installed along with Channel 4oD.   Hopefully got rid now thanks to above blog. 
Created by anonymous on Wednesday, 24 September 2008 at 8:20PM

BBCi player

Since downloading BBCi player I now have a Norton antivirus window saying Kontiki is trying to access my computer.Everytime I block it the warning window pops up.I can't get rid of it.Stay clear of BBCi PLayer!!
Created by anonymous on Sunday, 26 October 2008 at 11:59AM

XP failing to boot... most of the time! | keyon...

http://www.opinionatedgeek.com/Blog/...0175/Blo...
Created by anonymous on Thursday, 22 January 2009 at 7:56AM (source)

services.msc

Open the Services console (by typing "services.msc" in the box which appears when you select "Run" from the start menu), highlight Kservice and you can change the startup type from Automatic to Manual or Disabled
Created by anonymous on Saturday, 26 December 2009 at 12:06PM

Thank YOU all for sharing... BBCi player and KService.exe DO NOT DOWNLOAD!

Boy! Now you are ALL making me HAPPY that both Sympatico and Rogers are placing limits on our monthly download allowance... sometimes even WITHOUT notifying their users (http://www.trishparr.com/tired-of-feeling-ripped-off-by-bell-telephone/). Many of us have stopped watching videos online. It has become too expensive in the GTA of Ontario.

Kontiki will be a name I will DREAD ever seeing in anything I download from now on. Thank YOU for the instructions on removing this "trogan" manually should my computer ever become infected by 
KService.exe!
Created by anonymous on Monday, 2 August 2010 at 2:26AM (source)

kservice

found AOL hi-q video in 2007 loaded this program if you remove aol Hi-q it rmoves the offending program . If you look at properties  the signature is AOL LLC seems it was a popular program in 2006 -2007 
Created by anonymous on Tuesday, 14 September 2010 at 1:08PM