After scan reboot returns c:\windows\system32\command.com the parameter is incorrect

[maverik713]

Spybot restart problem

Hi everyone, I'm pretty new here but I've used Spybot for some time now. My problem seems to be that I had the same issue as the OP but a few places suggested running a windows xp disk and repairing the OS. I went to the correct repair setup(the second repair option) and during the installation the same, "C:WINDOWS\system32\command.com The Parameter is incorrect." message again.

I tried to log in under safe mode and got a message saying "Windows XP Setup cannot run under Safemode. Setup will restart now."

Any suggestions will be greatly appreciated. Thanks in advance!

P.S. If I'm hijacking this thread, I'm really sorry. I weighed posting here against my other option, posting a new thread and came to the conclusion putting it here would be ok. I'll move it immediately if need be.

 

[rondafan]

Sorry to hijack this but I had the same problem ....yodamas cure worked perfectly but I ran spybot 2 times & had to go thru the "cure" both times.......any idea why this is happening??

I think that md usa spybot fans did diagnose the symptoms of this issue correctly.
But there appears to be an issue with the command.com and/or the cmd.exe on the affected computers.

Let's try another approach to eliminate the symptoms of this issue:

• boot the computer normally
• when the first error messages about the command.com appear open the taskmanager with ctrl+alt+del and then choosing the taskmanager
• terminate the explorer.exe
• then choose file - new task
• enter the path to Spybot S&D (default: c:\Program Files\Spybot - Search & Destroy\SpybotSD.exe) to start Spybot S&D
• switch to advanced mode
• navigate to tools - system startup
• click the export button and save the startup report file to a location you can easily find later
• remove all Spybotdelete entries from the startup list
• within Spybot S&D (Processlist) terminate the remaining instances of command.com and cmd.exe (ntvdm.exe) and close the error message windows if they are still present ( you can mark multiple entries while holding the shift and/or ctrl key and terminate them together)
• from the Taskmanager choose File - new task and enter explorer to restart the explorer
• attach the startup report file you saved ealier to your next post

We will require the startup report file to diagnose the cause of this issue. We may also require a complete log file later.[/QUOTE]

 

[mdkruse84]

Worked Brilliantly.

Thanks Yodama, like many others I tried your directions and my computer restarted just fine. I wanted to attach the startup report file to see if you have any advice, however file size exceeds the limit.

 

[manvantara]

command.com file problem

Hi, the fix suggested by Yodama for command.com problem is working so far but as my friends machine has never had any anti virus or spy ware for years (!) - there are several thousand entries in the System Startup page that will not delete.
I isolated all the files so that the 'spybotdelete' entries are checked (as per instructions), but clicking on the delete button does not remove any, despite waiting for half an hour to give it time to dispose of it all. However, they do delete one by one when highlighted and clicking on the delete button. They will not multiple select or respond to the 'delete' key as such.
Any suggestions? I would be here for days doing them one by one!

cheers and thanks for a great service.

manvantara

 

[AgiDK]

Hey, i still got a problem with that solution you got there.
how everytime i close my Spybot down after ive deleted every Command.com & Cmd.exe they just keep comming back.

thats the thing i dont understand.

 

[KaryL]

Same idea, different fix

there are several thousand entries in the System Startup page that will not delete.

I verified that I had the same problem, saw that the entries were legit, but should have been cmd.exe instead of command.exe and cmd.com.

From task manager: File, Run, cmd, cd \windows\system32, copy cmd.exe command.exe, copy cmd.exe cmd.com, exit, close task manager, click OK to the error message...fixed and can't happen again

 

[Metaslash]

Please help me! If I turn on my pc, black windows appear on the screen called c:\windows\system32\command.com
I followed this but:
# boot the computer normally
# when the first error messages (they aren't error messages, they're black windows, also if I wait them the pc freeze) about the command.com appear open the taskmanager with ctrl+alt+del and then choosing the taskmanager
# terminate the explorer.exe
# then choose file - new task
# enter the path to Spybot S&D (default: c:\Program Files\Spybot - Search & Destroy\SpybotSD.exe) to start Spybot S&D --> This directory doesn't exist, so I wrote c:\Program Files\Spybot - Search & Destroy\SDmain.exe(or something like that)... however the pc freeze...
Also, If I start with safe mode it crashes.

 

[ngutman]

Parameter is incorrect error

hello,

I think that md usa spybot fans did diagnose the symptoms of this issue correctly.
But there appears to be an issue with the command.com and/or the cmd.exe on the affected computers.

Let's try another approach to eliminate the symptoms of this issue:

• boot the computer normally
• when the first error messages about the command.com appear open the taskmanager with ctrl+alt+del and then choosing the taskmanager
• terminate the explorer.exe
• then choose file - new task
• enter the path to Spybot S&D (default: c:\Program Files\Spybot - Search & Destroy\SpybotSD.exe) to start Spybot S&D
• switch to advanced mode
• navigate to tools - system startup
• click the export button and save the startup report file to a location you can easily find later
• remove all Spybotdelete entries from the startup list
• within Spybot S&D (Processlist) terminate the remaining instances of command.com and cmd.exe (ntvdm.exe) and close the error message windows if they are still present ( you can mark multiple entries while holding the shift and/or ctrl key and terminate them together)
• from the Taskmanager choose File - new task and enter explorer to restart the explorer
• attach the startup report file you saved ealier to your next post

We will require the startup report file to diagnose the cause of this issue. We may also require a complete log file later.

I followed this routine to fix and it worked fine. The only problem was that I had thousands of entries to delete which I had to do one by one. This took almost three hours. It would be useful to enable Shift and Ctrl to be able to select all and delete them in one step.

Here the startup report attached. OOPS the report is too large.
Nathan

 

[yamiyugiatem]

need help right away.

i am also having this problem however i am having this problem on my eee pc mini lap top, that runs windows xp. i can not go into safe mode, and i have tried loading task manger when the error message first appears and nothing. meaning task manger wont load. what do i do now? i need to get back on my lap top ASAP i have college projects saved on there that i need to get at right way and i cant. i need help please.

 

[Chris Harlow]

Similar problem- but not able to follow Yoda instructions

I have a similar problem, I see just my wallpaper and one recusively called c:\windows\system32\cmd.exe command window.

After much ctrl-alt-del I managed to start Task Manager however:

1) there are around 300 copies of cmd.exe running
2) Attempting to stop the explorer process (as requested in your fix) is met with only a "klunk" sound.(so at least my sound driver is working


3) Clicking the "File" (or any other) menu in task manager is met with a different "ping" type sound but no visible effect. Eventually the menus stop appearing altogether!

4) In the open command window, I can DIR directories, CD, and even see a USB flash drive, but attempting to use the START command, XCOPY or run any other kind of program (eg SDMain.exe) results in the Klunk

5) If I boot in Safe mode it hangs at mup.sys.

6) attempting to close the command window creates many ^C characters in the window, it closes and immdiately restarts another one.


However: Having tried the above, I seem to have it cracked by doing the following:

a) Hold down Ctrl-C and Keep it down!
b) With your mouse keep hitting the close box on each cmd-like window that appears.... keep doing that for a few minutes until they ALL go... If you tire early, and don't get the last one, it will instantly fire off another 300 or so! (I didnt have to kill 300, most seemed to go away as I killed the first one)

At this point Spybot suddenly appeared and started checking! I don't know however if this was as a result of my attempting to start it from the command window, or whether it would have done that anyway! It remains to be seen whether this eventually resolves the problem.

 

[Chris Harlow]

Solution to cmd.exe recursion loop

I have discovered that my registry contained the following:
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\AutoRun

and/or

HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun

which pointed to cmd.exe! thus cmd.exe was executing itself whenever it started!

To read up on this functionality, run cmd.exe /? on a good machine and see the use of the /D switch.

It appears that either Spybot accidentally inserted this, or the malware that spybot was removing did so. Anyway... no blame folks.

 

[Fl Larry]

C:\window\system32\comand.com

Hi, I installed Spybot S&D and ran a scan. What came up was various malware, spyware and trojans. (ZANGO,TROJAN C, AND OTHERS) which were removed. After restarting the computer I am having the same problem as the OP. I tried the method that Yodama mentioned and it did not work, what came up was a message: "windows cannot acces the specified device, path or file. You may not have the appropriate permissions to acces the item. Any help would be appreciated. Larry

 

[spybotsandra]

Hello,

This link should help.

Best regards
Sandra
Team Spybot

 

[gcaggie17]

System Restore?

Will just doing a System Restore in safe mode to an earlier date when this problem didn't exist work?

 

[billwest]

Use Regedit to Fix

I just had this problem with a new installation of SpyBot. It seems that SpyBot is generating delete commands using "command.com", but "command.com" does not exist on XP. When you get the first error message about command.com, use Ctl-Alt-Del to bring up the task manager, and use the New Task button to start 'regedit'. Search for 'command.com'. When you find the SpyBotdelete values that include 'command.com' as part of the command, delete them. This will let SpyBot start up, and booting will continue.

Alternatively, use Task Manager to kill the explorer.exe process, and then start explorer.exe using the new task button. This will skip all the things that explorer.exe tries to start automatically on a reboot, and let you use the normal graphical tools to fix things. However, if you don't clean out the bad entries that Spybot is creating in the registry, you will have the same problem on the next reboot.

 

[cshouldi]

spybotsd.system startup report

i followed the Yodama directions (to remove all Spybot entries from the startup list)to get my error off computer and then was able to get to my desktop.
Here is the startup report file. Can you diagnose the cause of this issue?

--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2009-03-05 TeaTimer.exe (1.6.6.32)
2008-11-04 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2009-09-07 advcheck.dll (1.6.4.18)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-09-15 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2008-10-22 Tools.dll (2.1.6.8)
2009-05-19 Includes\Adware.sbi
2009-09-29 Includes\AdwareC.sbi
2009-01-22 Includes\Cookies.sbi
2009-08-10 Includes\Dialer.sbi
2009-09-29 Includes\DialerC.sbi
2009-01-22 Includes\HeavyDuty.sbi
2009-05-26 Includes\Hijackers.sbi
2009-09-29 Includes\HijackersC.sbi
2009-09-29 Includes\Keyloggers.sbi
2009-09-29 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2009-09-29 Includes\Malware.sbi
2009-09-29 Includes\MalwareC.sbi
2009-03-25 Includes\PUPS.sbi
2009-09-29 Includes\PUPSC.sbi
2009-01-22 Includes\Revision.sbi
2009-01-13 Includes\Security.sbi
2009-09-29 Includes\SecurityC.sbi
2008-06-03 Includes\Spybots.sbi
2008-06-03 Includes\SpybotsC.sbi
2009-04-07 Includes\Spyware.sbi
2009-09-29 Includes\SpywareC.sbi
2009-06-08 Includes\Tracks.uti
2009-09-15 Includes\Trojans.sbi
2009-09-30 Includes\TrojansC.sbi
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

Located: HK_LM:Run, avgnt
command: "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
file: C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
size: 266497
MD5: 6E812818306D460D62B4ABEA9FDC6679

Located: HK_LM:Run, Qwest Personal Digital Vault
command: "C:\Program Files\Qwest Personal Digital Vault\QwestPersonalDigitalVault.exe" /m
file: C:\Program Files\Qwest Personal Digital Vault\QwestPersonalDigitalVault.exe
size: 1063952
MD5: 53953624BF33B1FDB248340C7C967677

Located: HK_LM:Run, SelectRebates
command: C:\Program Files\SelectRebates\SelectRebates.exe
file: C:\Program Files\SelectRebates\SelectRebates.exe
size: 702543
MD5: 2270A362B8379B57B49C51D118330645

Located: HK_LM:Run, Windows Defender
command: "C:\Program Files\Windows Defender\MSASCui.exe" -hide
file: C:\Program Files\Windows Defender\MSASCui.exe
size: 866584
MD5: 77C03BF23AE56B0A31AE4D5BB4B3D0AC

Located: HK_LM:RunOnce, SpybotDeletingA3412
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:RunOnce, SpybotDeletingA5010
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:RunOnce, SpybotDeletingA5939
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:RunOnce, SpybotDeletingA5993
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:RunOnce, SpybotDeletingC729
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:RunOnce, SpybotDeletingC7601
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:RunOnce, SpybotDeletingC7897
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:RunOnce, SpybotDeletingC9120
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:RunOnce, SpybotDeletingC977
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:RunOnce, SpybotSnD
command: "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
file: C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4891472
MD5: 3B1B5D09D3C9C4CD39D4DB06ED7A0855

Located: HK_CU:Run, DWQueuedReporting
where: .DEFAULT...
command: "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
file: C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe
size: 437160
MD5: 9435C1C2D2111573111367F92F208C1F

Located: HK_CU:Run, ctfmon.exe
where: PE_C_KKFKFKFKFKFK...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 5F1D5F88303D4A4DBC8E5F97BA967CC3

Located: HK_CU:Run, MSMSGS
where: PE_C_KKFKFKFKFKFK...
command: "C:\Program Files\Messenger\msmsgs.exe" /background
file: C:\Program Files\Messenger\msmsgs.exe
size: 1695232
MD5: 3E930C641079443D4DE036167A69CAA2

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 5F1D5F88303D4A4DBC8E5F97BA967CC3

Located: HK_CU:Run, Google Update
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: "C:\Documents and Settings\Cami\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
file: C:\Documents and Settings\Cami\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
size: 133104
MD5: 626A24ED1228580B9518C01930936DF9

Located: HK_CU:Run, msnmsgr
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
size: 3885408
MD5: 16C3811F3A5CD8EA7030A42A75892136

Located: HK_CU:RunOnce, SpybotDeletingB126
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL_old"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB1894
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB2625
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB2996
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB3133
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB380
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE_old"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB3962
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3MEDINT.EXE"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3MEDINT.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB4109
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB4214
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL_old"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB4357
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S"
file: command /c del "C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB5194
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB536
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB5587
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB5594
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL_old"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB5779
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB5902
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB5992
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB6035
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB6386
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\History\search3_old"
file: command /c del "C:\Program Files\MyWebSearch\bar\History\search3_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB6462
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB6464
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB7109
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3HIGHIN.EXE"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3HIGHIN.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB7365
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB7432
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB7800
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB7829
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB7841
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB8768
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB8896
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REGHK.DLL_old"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REGHK.DLL_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB8914
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingB9712
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE"
file: command /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD1195
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD1353
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD1894
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD2041
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD2121
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL_old"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD2127
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL_old"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD2865
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL_old"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD3254
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD4355
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3MEDINT.EXE"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3MEDINT.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD441
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD4602
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD4839
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD4953
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD5036
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD5349
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD5449
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD6399
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD6968
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REGHK.DLL_old"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3REGHK.DLL_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD6997
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD7015
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE_old"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD7257
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD7301
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\History\search3_old"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\History\search3_old"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD7804
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD7859
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD7923
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD8005
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD8127
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3HIGHIN.EXE"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3HIGHIN.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD8200
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD8639
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD9064
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:RunOnce, SpybotDeletingD9164
where: S-1-5-21-1801674531-1060284298-1957994488-1004...
command: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL"
file: cmd /c del "C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL"
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:Run, DWQueuedReporting
where: S-1-5-18...
command: "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
file: C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe
size: 437160
MD5: 9435C1C2D2111573111367F92F208C1F

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, dimsntfy
command: %SystemRoot%\System32\dimsntfy.dll
file: %SystemRoot%\System32\dimsntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

 

[spybotsandra]

Hello,

You are using a dated version of Spybot-S&D.
Please uninstall Spybot - Search & Destroy according to the following link.
Then download our current version Spybot - Search & Destroy 1.6.2.

Best regards
Sandra
Team Spybot

 

[cant9562]

solution

This is what worked for me..... when the window pops up that says the parameters are incorrect, I hit the ESC key like a kazillion times. I read somewhere online where someone ELSE tried that, so I decided to do the same. It worked for me. I have had no problem since!


I should also add that I deleted the Spybot program. Too many problems with it on my XP computer.

 

[Sadorath]

Log on to the system in safe mode. Start regedit. Navigate to the following registry key and see if there is an entry with "c:\windows\system32\command.com ..." in the data portion of the entry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

If there is, please copy down the entry (or export it) and then delete the entry. Restart your system in normal mode.

If you found the entry described above, please post what you found.

If there was no entry please post what Windows OS you are running and if you can remember what you were fixing, please post that.

For some odd reason my RunOnce wasnt there but there was

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce-

Which had references to Spybot fff never had this issue till I upgraded to the 2.0

 

[spybotsandra]

Hello,

For issues regarding the Spybot 2.0 Beta please post in the existing Beta Thread.

About your problem:
We were able to reproduce the problem and will try to fix it, meaning the command.com window will be removed..

Best regards
Sandra
Team Spybot