Computing.Net > Forums > Security and Virus > Commander.exe in C:\Windows

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Commander.exe in C:\Windows

Reply to Message Icon

Name: Grexnix
Date: September 19, 2004 at 08:53:52 Pacific
OS: XP SP1
CPU/Ram: PIII 1G, 512MB RAM
Comment:

Hi, my PC is running Windows XP SP1, 512MB RAM. There is a file in C:\Windows by the name of COMMANDER.exe. It looks suspicious but I can't find any info on it. There are no Iomega drives nor drivers installed (never have been either). I have tried the latest versions / signatures to the following programs but they still come up negative: AVG 7.0, Spybot, Ad-Aware. Trend online scanner also shows nothing. Now I have tried deleting it from the computer and removing it from where it starts in the registry (after shutting down its process) but on next login, it returns and starts up automatically. Any one know what this file is / does and how to remove it?

Thanks,

Grexnix



Sponsored Link
Ads by Google

Response Number 1
Name: fordman
Date: September 19, 2004 at 09:31:13 Pacific
Reply:

It certainly is something harmful, info here:

http://www.google.com/search?hl=en&ie=UTF-8&q=commander.exe&btnG=Google+Search

Check this out to, to remove it:

http://www.google.com/search?hl=en&lr=&ie=UTF-8&q=manual+removal+instructions+commander.exe&btnG=Search

groups.yahoo.com/group/simplycomputers2


0

Response Number 2
Name: Grexnix
Date: September 20, 2004 at 05:59:41 Pacific
Reply:

Hi thanks for the response. I checked those links. They pretty much point to Iomega software which is not installed or the W32/Sprezza virus (which I don't believe it is since none of the AV programs detect it and I can't find any of the files associated with it on the system). I tried turning off system restore, rebooting, and then manually removing commander.exe from c:\windows (and its associated run entry in HKLM in the registry). However, it must be buried elsewhere (I also checked win.ini & system.ini) as it still came back on the next login. In windows explorer this file is about 98k and has an icon that says "jpg". Any ideas?

Thanks,

Grexnix


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Commander.exe in C:\Windows

C:\Windows\Inetm - Virus? www.computing.net/answers/security/cwindowsinetm-virus/14910.html

.tmp files in c: drive www.computing.net/answers/security/tmp-files-in-c-drive/22344.html

POS. tmp files in C drive, Red X ic www.computing.net/answers/security/pos-tmp-files-in-c-drive-red-x-ic/22790.html