Random DOS popups?

[lektrix]

C:\windows\system32\command.com


Is it a virus?

 

[MustISO]

Sounds like it, that's not normal.

 

[lektrix]

Randomly pops up 3-4 times a day

 

[seemingly random]

From a pc with xp sp3 recently installed:

%windir%\system32\command.com
50,620 bytes
Created: august 23, 2001 9:00:00am
Modified: august 23, 2001 9:00:00am
md5: be67d29ca914de072d9971e3fffc4050
sha-1: 3c57a09706d1791ef7cdbe65e62649e52c014e0f

%windir%\system32\cmd. exe
389,120 bytes
Created: april 14, 2008 6:42:16am
Modified: april 14, 2008 6:42:16am
md5: 6d778e0f95447e6546553eeea709d03c
sha-1: 811a005cf787c6ccbe0d9f1c36c1d49a9cb71fd1

---

From a pc with vista sp2 recently installed:

%windir%\system32\command.com
50,684 bytes
Created: november 2,2006 3:09:49am
Modified: november 2,2006 3:09:49am
md5: ba597f9a4bb90f038266ce1a3c3be3fb
sha-1: 8ad4cc6d2dc92180ee6605fc3d205ed77716d490

%windir%\system32\cmd. exe
318,976 bytes
Created: april 12, 2009 1:27:49am
Modified: january 18, 2008 11:33:06pm
md5: 74f26fc01b180d4a99a168ed69c30a53
sha-1: 46372c2278b2e369a7ce3e0879a23d009ccb6340

---

checksums were calculated with File Checksum Integrity Verifier (FCIV) - http://support.microsoft.com/kb/841290

 

[lektrix]

Originally posted by: seemingly random
From a pc with xp sp3 recently installed:

%windir%\system32\command.com
50,620 bytes
Created: august 23, 2001 9:00:00am
Modified: august 23, 2001 9:00:00am
md5: be67d29ca914de072d9971e3fffc4050
sha-1: 3c57a09706d1791ef7cdbe65e62649e52c014e0f

%windir%\system32\cmd. exe
389,120 bytes
Created: april 14, 2008 6:42:16am
Modified: april 14, 2008 6:42:16am
md5: 6d778e0f95447e6546553eeea709d03c
sha-1: 811a005cf787c6ccbe0d9f1c36c1d49a9cb71fd1

---

From a pc with vista sp2 recently installed:

%windir%\system32\command.com
50,684 bytes
Created: november 2,2006 3:09:49am
Modified: november 2,2006 3:09:49am
md5: ba597f9a4bb90f038266ce1a3c3be3fb
sha-1: 8ad4cc6d2dc92180ee6605fc3d205ed77716d490

%windir%\system32\cmd. exe
318,976 bytes
Created: april 12, 2009 1:27:49am
Modified: january 18, 2008 11:33:06pm
md5: 74f26fc01b180d4a99a168ed69c30a53
sha-1: 46372c2278b2e369a7ce3e0879a23d009ccb6340

---

checksums were calculated with File Checksum Integrity Verifier (FCIV) - http://support.microsoft.com/kb/841290

What does this do?

 

[Sam25]

Originally posted by: lektrix
C:\windows\system32\command.com


Is it a virus?

Seems to me it is. Download Superantispyware, update it and run a full system scan.

 

[MrStryker]

I would probably suggest Ewido Anti-Spyware. I've never heard of Superantispyware, the name itself sounds questionable lol.

 

[Sam25]

Originally posted by: MrStryker
I would probably suggest Ewido Anti-Spyware. I've never heard of Superantispyware, the name itself sounds questionable lol.

You have not heard of Superantispyware and I'm also guessing not heard of Malwarebytes as well. I pity your ignorance. Please make an effort to read and actually look into softwares or better still use them before making a post here at AT.

 

[chemwiz]

Superantispyware, Malwarebytes, and ComboFix are the "big 3" right now for cleaning up spyware. Also, the free Spyware Doctor version from the google pack!

 

[chemwiz]

double post, I forgot to disable noscript on AT.

 

[SoulAssassin]

do you have an HP printer? Their update stuff does annoying things like this.

 

[dbarton]

When I try to install Combofix, Avira gives me a message that C:32788rfwjfw\n.pif
"the file contains and executable program that is diguised by a hrmless file extension (hinndent/Crypted)

Is that safe??

(I know you are supposed to disable AV)

 

[chemwiz]

Combofix is safe, assuming you got it from bleeping computer. But Avira detects it as a virus, always. And after it runs, it'll find a bunch of the quarantined stuff in c:\qoobox. It's great for computers that are too far gone for Spyware Doctor, Malwarebytes or Superantispyware. A lot of the viruses block it from running- if that happens, just rename it to 1.exe and run it.

 

[Fayd]

Originally posted by: Sam25

Originally posted by: MrStryker
I would probably suggest Ewido Anti-Spyware. I've never heard of Superantispyware, the name itself sounds questionable lol.

You have not heard of Superantispyware and I'm also guessing not heard of Malwarebytes as well. I pity your ignorance. Please make an effort to read and actually look into softwares or better still use them before making a post here at AT.

i havent heard of superantispyware either. i pity your daily contacts, having to deal with your douchebaggery on a daily basis.

 

[Sam25]

Originally posted by: Fayd

Originally posted by: Sam25

Originally posted by: MrStryker
I would probably suggest Ewido Anti-Spyware. I've never heard of Superantispyware, the name itself sounds questionable lol.

You have not heard of Superantispyware and I'm also guessing not heard of Malwarebytes as well. I pity your ignorance. Please make an effort to read and actually look into softwares or better still use them before making a post here at AT.

i havent heard of superantispyware either. i pity your daily contacts, having to deal with your douchebaggery on a daily basis.

Forget it, I don't want to start a flame war over this.

 

[mechBgon]

Originally posted by: Fayd

Originally posted by: Sam25

Originally posted by: MrStryker
I would probably suggest Ewido Anti-Spyware. I've never heard of Superantispyware, the name itself sounds questionable lol.

You have not heard of Superantispyware and I'm also guessing not heard of Malwarebytes as well. I pity your ignorance. Please make an effort to read and actually look into softwares or better still use them before making a post here at AT.

i havent heard of superantispyware either. i pity your daily contacts, having to deal with your douchebaggery on a daily basis.

Superantispyware is legit, and has fairly good detection rates.

*passes around bottle of chill pills and beer*

 

[Sam25]

Originally posted by: mechBgon
Superantispyware is legit, and has fairly good detection rates.

*passes around bottle of chill pills and beer*

There you go...thanks to mechBgon for settling that! Cheers!! :beer:

 

[manko]

Yes, Superantispyware is well known and legit along with Malwarebytes. Both are highly respected and recommended.

I can't imagine why anyone would bother posting to put down something they haven't heard of. If you haven't heard of it, you can't have much to say about it. Making a post about it only confirms your ignorance of the subject and nothing more.

A few seconds of searching before posting would have clued you in and you would also know about a few new helpful tools in case you ever run into similar problems.