Hi, my PC is running Windows XP SP1, 512MB RAM. There is a file in C:\Windows by the name of COMMANDER.EXE. It looks suspicious but I can't find any info on it. There are no Iomega drives nor drivers installed (never have been either). I have tried the latest versions / signatures to the following programs but they still come up negative: AVG 7.0, Spybot, Ad-Aware. Trend online scanner also shows nothing. Now I have tried deleting it from the computer and removing it from where it starts in the registry (after shutting down its process) but on next login, it returns and starts up automatically. Any one know what this file is / does and how to remove it?

Thanks,

Grexnix

It certainly is something harmful, info here:

http://www.google.com/search?hl=en&ie=UTF-8&q=commander.exe&btnG=Google+Search

Check this out to, to remove it:

http://www.google.com/search?hl=en&lr=&ie=UTF-8&q=manual+removal+instructions+commander.exe&btnG=Search

groups.yahoo.com/group/simplycomputers2

Hi thanks for the response. I checked those links. They pretty much point to Iomega software which is not installed or the W32/Sprezza virus (which I don't believe it is since none of the AV programs detect it and I can't find any of the files associated with it on the system). I tried turning off system restore, rebooting, and then manually removing commander.exe from c:\windows (and its associated run entry in HKLM in the registry). However, it must be buried elsewhere (I also checked win.ini & system.ini) as it still came back on the next login. In windows explorer this file is about 98k and has an icon that says "jpg". Any ideas?

Thanks,

Grexnix