Printable Version of Topic

Click here to view this topic in its original format

914World.com _ 914World Garage _ Command.exe Trojan

Posted by: dlo914 Dec 19 2005, 03:19 PM

ive tried numerous spyware removers and no luck. they're all unable to remove the trojan, because it's not located in a file it's actually made itself into a running process. does anyone have a solution other than reformatting? this is the most troublesome trojan ive run into in the last 8 years

Posted by: dlo914 Dec 19 2005, 03:30 PM

here's the bastard:

Attached image(s)

Posted by: dlo914 Dec 19 2005, 03:31 PM

and this constantly pops up every 5 secs

Attached image(s)

Posted by: SirAndy Dec 19 2005, 03:45 PM

start in safe mode. that should prevent the trojan from being loaded.

delete it on the HD, find it in the registry and delete it there too. make sure it's not in your "startup" folder.

look it up online (on symantecs website for example) and get a detailed filelist. viruses usually don't come in just one file. make sure you get them ALL deleted.

then, and only then, run "spybot search & destroy" followed by a good anit virus program.

restart machine in normal mode and cross your fingers ...
Andy

Posted by: dlo914 Dec 19 2005, 04:02 PM

thanks Andy! i was doing everything, but starting in Safe Mode...

Posted by: TROJANMAN Dec 19 2005, 04:16 PM

do a search on Command.exe

you should find the answer you're looking for.

and STOP SURFING PORN SITES

Posted by: Carlitos Way Dec 19 2005, 04:43 PM

QUOTE (TROJANMAN @ Dec 19 2005, 02:16 PM)
do a search on Command.exe

you should find the answer you're looking for.

and STOP SURFING PORN SITES

Am I the only one finding it ironic that a TROJAN is against PORN? Don't the two of them go together by nature???

Posted by: tat2dphreak Dec 19 2005, 04:43 PM

to be sure you got them all... get HiJackThis, and run it 1-2 times a month, it will also tell you unneeded processed that bog down your computer...

paste the log here: http://hjt.networktechs.com/

and http://www.iamnotageek.com/ forums will help you clean things up...

I am not a geek will also aid in spyware removal... good site...

here is how Norton recommends to remove the command.exe trojan
http://securityresponse.symantec.com/avcenter/venc/data/trojan.pws.qqpass.e.html

Posted by: TROJANMAN Dec 19 2005, 04:59 PM

QUOTE (Carlitos Way @ Dec 19 2005, 02:43 PM)
Am I the only one finding it ironic that a TROJAN is against PORN? Don't the two of them go together by nature???

haha.
if you're watching porn, you are probably alone, so no need for a condom.

Posted by: Carlitos Way Dec 19 2005, 05:00 PM

Back On-Track... Andy's recommendation on spyware removal seems to be right on the money. Same procedure we were using at my last job for a while.

Posted by: SLITS Dec 19 2005, 05:02 PM

I thought you grasped it with your thumb and forefinger and pulled...............

Posted by: dlo914 Dec 19 2005, 07:46 PM

to start-up in Safe Mode for Win Xp i press? F8 or F10?

Posted by: Carlitos Way Dec 19 2005, 07:48 PM

Usually F8 will do the trick.

Posted by: dlo914 Dec 19 2005, 07:52 PM

QUOTE (Carlitos Way @ Dec 19 2005, 05:48 PM)
Usually F8 will do the trick.

wow quick response! thanks...a couple of times ive been pressing both F8 n 10 at the same time b/c i didnt remember which one it was