Help - Search - Members - Calendar
Full Version: Command.exe Trojan
914World.com > The 914 Forums > 914World Garage
dlo914
ive tried numerous spyware removers and no luck. they're all unable to remove the trojan, because it's not located in a file it's actually made itself into a running process. does anyone have a solution other than reformatting? this is the most troublesome trojan ive run into in the last 8 years sad.gif
dlo914
here's the bastard:
dlo914
and this constantly pops up every 5 secs mad.gif
SirAndy
start in safe mode. that should prevent the trojan from being loaded.

delete it on the HD, find it in the registry and delete it there too. make sure it's not in your "startup" folder.

look it up online (on symantecs website for example) and get a detailed filelist. viruses usually don't come in just one file. make sure you get them ALL deleted.

then, and only then, run "spybot search & destroy" followed by a good anit virus program.

restart machine in normal mode and cross your fingers ...
type.gif Andy
dlo914
thanks Andy! i was doing everything, but starting in Safe Mode... dry.gif
TROJANMAN


do a search on Command.exe

you should find the answer you're looking for. wink.gif


and STOP SURFING PORN SITES laugh.gif
Carlitos Way
QUOTE (TROJANMAN @ Dec 19 2005, 02:16 PM)
do a search on Command.exe

you should find the answer you're looking for. wink.gif


and STOP SURFING PORN SITES laugh.gif

Am I the only one finding it ironic that a TROJAN is against PORN? Don't the two of them go together by nature???
tat2dphreak
to be sure you got them all... get HiJackThis, and run it 1-2 times a month, it will also tell you unneeded processed that bog down your computer...

paste the log here: http://hjt.networktechs.com/

and http://www.iamnotageek.com/ forums will help you clean things up...

I am not a geek will also aid in spyware removal... good site...

here is how Norton recommends to remove the command.exe trojan
http://securityresponse.symantec.com/avcen...s.qqpass.e.html
TROJANMAN
QUOTE (Carlitos Way @ Dec 19 2005, 02:43 PM)
Am I the only one finding it ironic that a TROJAN is against PORN? Don't the two of them go together by nature???

haha.
if you're watching porn, you are probably alone, so no need for a condom. lol2.gif
Carlitos Way
Back On-Track... Andy's recommendation on spyware removal seems to be right on the money. Same procedure we were using at my last job for a while.
SLITS
hijacked.gif


I thought you grasped it with your thumb and forefinger and pulled...............
dlo914
to start-up in Safe Mode for Win Xp i press? F8 or F10?
Carlitos Way
Usually F8 will do the trick.
dlo914
QUOTE (Carlitos Way @ Dec 19 2005, 05:48 PM)
Usually F8 will do the trick.

wow quick response! thanks...a couple of times ive been pressing both F8 n 10 at the same time b/c i didnt remember which one it was wink.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2024 Invision Power Services, Inc.