I recently recovered from a virus, but I am still suffering the aftershock of it. The virus must have created a file called cmd32.exe and must have depended on it for something. When I removed the virus it must have removed that file as well. Now whenever I log on to my computer it takes forever and then the error comes up saying that windows could not find the file cmd32.exe. What should I do about this error? I've tryed searching the registry for cmd(32.exe), but no success. I'm running out of ideas and don't know what I should do. If anyone could help I would greatly appreciate it. If anyone needs to know anymore information let me know as well. This thing is a plague and it needs to go! Thanks for any help.
To me it sounds like that you had the KWBOT virus. Read the instructions found here : http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.c.worm.html And down the bottom it has removal instructions, ensure that you check to see if you have any of those registry keys and remove them. CJC
If you are confident that you can handle REGISTRY Editing !! CMD32.exe was brought on your PC when you used P2P services such as Kazaa, Emule, ShareAza, Bit Torrent ... and the likes. It's a small program that gives permission for a hacker to access your PC thru IRc ; it's no longer there because you removed it but the Registry is asking for it. When this is pushed on to you, it is also made so it starts automatically when you boot your PC -- Hence the need to cleanup your Registry . Could be worth a try to download SpySweeper or CW Shredder to give it a try first. Regedit by doing a search for [bold]cmd32.exe[/bold] and delete the entries where cmd32.exe is shown. Be Careful in your Registry Editing.
Seems like that have already been in there... All the info you said, can be found in http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.c.worm.html the link i posted, aswell as removal instructions of the registry keys is creates. CJC
It's gone! Thanks a ton to everyone who gave me the resources to remove this pest of a virus. I must have missed a few registry keys. I'm still kind of slow on log in, but it must be something else that I will figure out eventually. Thanks again.
sarb25 ~~ Once you have done manual clean up of entries in your Registry -- like you just did -- use a registry cleaner to remove any dead keys you may have created. There are many available on Free Trial on the web. Google Registry Cleaner and you will have a choice to download whatever suits your needs.
