PDA

View Full Version : TGCMD / howto remove remaining entries / Ginh


Ginh
22 Mar 2006, 9:24am
Hi all,

This computer uses Windows ME.


I've encountered a possible problem again, i was just on doing some searches and i have no clue when or how i got infected ( atleast i think i am )

Suddenly my internet connection was acting up, then all Connections dropped, and later it was back up, this went on a few times, so i ran a scan with AD-Aware and Spybot i removed everything that was found.

a note: when i pressed: Ctrl-Alt-Del, i saw this name tgcmd
and in programfiles a folder ( i forgot exactly what it was named ) related to this tgcmd

Things seemed normal and the next day HJT again and saw:
O4 - HKLM\..\Run: [tgcmd] "C:\PROGRA~1\SUPPORT.COM\BIN\TGCMD.EXE" /server /startmonitor /deaf

In program Files: i deleted the "Support.com" folder and its still deleted.

Then i used "RegCleaner" to view anything weird and saw some weird entries.

Could anyone help me that i show logs from programs i currently use:
( Regcleaner / HJT / AD-Aware ) and tell me how to carefully remove every unwanted and unnecessary entries please, i know you all are very busy, but i don't know any person to go to, so someone willing to guide me with a thorough investigation in Register and other stuff ?

thx in advance,

Ginh.