cmd download

It seems my cmd is messed up. I also remembering having to download and install this to begin with. Any chances of getting rid of this one and downloading a free version?

 

I get a ntvdm cpu illegal instructions message and once ackowledged, you're back to square one. I use XP btw.

 

%SystemRoot%\system32\cmd.exe is the target of the shortcut to the command processor when accessed via Start>All Programs>Accessories. Suggest you navigate to the system32 folder and see what happens when you double click either command.com or cmd.exe

 

Hi, Steve, Tony, and Dave.

FYI, Bubba recently posted a HJT log in post #17 of this General Security Forum thread related to LimeWire P2P.

I don't immediately recognize any signs of malware but I'm certainly not a HJT expert either.

Your evaluation would be appreciated.

 

I did see that topic, and the log looks fine to me. Since I've been recommending to people for several years now that they dump Limewire (why invite infections with a P2P program?), no help from me on that issue However, Tony has addressed the most common cause of the problem Bubba has described here, which may or may not reveal an infection that isn't showing in his HJT log.

 

Well, I got rid of all of my spyware and such, scaned for viruses and didn't have any. I still can't get my cmd to get past that alarm I get when using it.

The alarm is verbatim:

C:\windows\system 32\.com
the NTVDM cpu has encountered an illegal instruction
cs:0572 IP:ffe4 OP:fe 1d 09 e9 "choose close to terminate the application "


It has a close or ignore boxes below that and regardless of what you do, everything disapears afterwards. To heck with my music download programs, I need the cmd program to work. BTW, my OS didn't come with it (cmd) and I had to download it and install it. I don't know why my XP didn't have it but that's what I had to do.

 

Where did you get your version of XP from?

 

From this local business that built my computer.

 

Do you have either of the files cmd.exe or command.com in the C:\Windows\system32 folder?

 

I can't even find my systems 32 folder, what's going on with my computer?

 

Click Start then Run, type (or paste) the following command and hit enter.

%systemroot%\system32


The system32 folder should open.

 

OK, I found the cmd exe and also the command icon. I clicked on the cmd and it opened up the box like it did from the run box but without the error signal. So what now, should I go back to the proceedure I was using before? This was the one to allow the router to accept the music download program.

 

It's strange that you got the error when typing [FONT= "Courier New"][SIZE= "4"]cmd[/SIZE][/FONT] in the Start > Run... field and then clicking the OK button.

Are you sure you typed it correctly? Does the error still occur? If so, I would be inclined to resolve the cmd issue first but that is up to you, of course.

BTW, when you are ready to close the DOS window, I suggest instead of clicking the X, type [FONT= "Courier New"][SIZE= "4"]exit[/SIZE][/FONT] at the DOS prompt and then hit your Enter key.

 

Yes, I'm still getting the error message when typing in cmd in the run box. I did notice that after typing in cmd and clicking go, it appears to be hunting C:\Windows\systems32\cmd.com. It's the title at the top of the large prompt window. It just seemed odd to me that it's searching for a .com address.

 

Use the search command and look for the file CMD.*.

You should see CMD.exe in \System32 and in \DLLcache but I'm betting you find either another CMD.exe or more likely a CMD.com file.

When you do Start > Run > {filename}
{filename}.com will run before {filename}.exe

The COM file is most likely a virus.

You can also confirm this by doing Start > Run > CMD.exe

You may also find Ping.com, netstat.com, regedit.com, tracert.com.

These are all dropped by Picrate and Alcra

 

What do you mean by dropped?

 

When a virus strikes it can do so by "dropping" files onto the system.