SBCyahoo dsl people called our house and threatened to discontinue our service as "a ton" of spam has been sent from our sbcglobal.net account somehow. No one in the family uses that account. We have a four computer network with two labtops and two desktops I think the problem was with our desktops. They are running on Windows 98 and McAffee virus scanner. I went and deleted all the email messages in that account and set the mcaffee virus scan to scan all emails and such now. Is there anything else I can do. I remember hearing of a virus that did such a thing but don't remember any details about it. Thanks
hmm , can't say I recommend anything in particular but has happened to me , my dad and a few others I know sites you go to use the email you signup for stuff with and sell it to spammers (would be my guess) haven't had a ton of email sent from my account though with SWBELL.... although I know they have gotten my account by the fact that I get bounced messages back from my email address from accounts I've never even heard of.
Well, I didn't know which computer thread to put this in and I didn't want to start another one, so here it goes. Sorry for the hijack, stevierebel. When I first boot up, I get this message: "Windows cannot find 'C:\WINDOWS\System32\cmd.exe. Make sure you typed the file name correctly and then try again. To search for a file click the start button then click search" I did some googling and found out that this is an old virus that I got rid of a few months ago, but when I boot up, my computer is searching for this file (ie. the virus I got rid of) in my registry. I've googled this and tried everything and I'm still getting this message when I boot up. Any idea how to delete this from my registry?
Did you see this page ima? http://www.yoshi.us/forums/archive/index.php/t-3944.html The last post may help you. Looks like cmd.exe has something to do with command prompt, not a virus, but I could be wrong. Afterall, it wouldn't be unlike a virus to mimic files that should be there. I wouldn't suggest changing things in your registry unless you understand what you're doing. You could really mess something up.
I have a problem too: I keep getting this message continuosly: Data Execution Prevention - Microsoft Windows To help protect your computer, Windows has close this program. Name: Generic Host Process for Win32 Services Publisher: Microsoft Corp. Somebody help me!!!
For Win98 or WinXP 1. Start->Run 2. In the box type msconfig and press the OK button. 3. A new box will open up with several tabs accross the top. The one furthest to the right will be startup. Click on it. 4. You are confronted with a list of just about every command configured to run at startup. Expand the list labled command and run through them until you find reference to cmd.exe. Uncheck that box. 5. Click OK. It will ask you to restart. Do so. 6. When the computer reboots, a box will appear telling you that you are running with some crap disabled. Check the check box and click OK. You should not see the "cmd.exe" message. If you see the message, or are unable to find the "cmd.exe" reference, or have win2k, the process has become more complex. I can post instructions in these instances, but prefer not to unless it becomes necessary.
If nobody uses the account, make sure it's not configured for with Outlook Express or whatever mail software you have. Then, contact SBC and have them reset the password to something complex and promptly forget it without entering it onto a machine. Instead of being a virus doing the mailing, it could be a case where someone has trojan-horsed their way onto one of your systems and extracted the info, or they could have brute-force hacked the password directly from sbc (I think this is possible.) Anyway, since you don't use the account, changing the password and not entering it in any way on a system should do it.
Here's a link to the MS knowledge base article on the subject. This is difficult to diagnose specifically, because the particular process that's being blocked by windows firewall is a generic intermediary for many other programs. The message is basically saying "The generic interface that software uses to access the internet has done something that it shouldn't have." It doesn't tell you what that program was, so without more work it's difficult to figure out whether it's a normal program that has malfunctioned, a virus being prevented from doing bad things, or simply a case of the MS firewall being too rigid. Follow the steps in the MS knowledgebase article. If your antivirus and your spyware protection are current, run full scans with both. If you come up clean, you can probably feel safe either adding an exception or, if you have some sort of additional firewall, turning the MS firewall off.
OK, I just tried this and I don't see anything referencing "cmd.exe". I might need those instructions... arkoe, I lost my windows disc when I moved.
Yep. I read that system32\cmd.exe is a virus sent through Kazaa. It's supposed to look like a Windows command but it really isn't. At any rate, it's not there anymore, I just need to know how to get my computer to stop looking for it when it boots up.
Ok, the easiest way to fix (I think) is to go to the symantec virus removal tool website, locate the MyDoom removal tool (that is the virus you describe, I think) and run it. This should fix it if it's what you are describing.
