tapicmd.exe

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

My sons computer is running xp pro and has got a file named tapicmd.exe
running in the process window. This file is consuming alot of processing time
and slowing down his computer. The file is located in the windows\repair
folder. I have tried deleting the file but something rewrites the file. It is
also located in the registry run key. If you kill the process it restarts.
Windows has a hard time shutting down because this file is continually tring
to restart. I haven't been able to find any information on the tapicmd.exe
file name anywhere on the internet.
 
oscore said:
My sons computer is running xp pro and has got a file named tapicmd.exe
running in the process window. This file is consuming alot of processing time
and slowing down his computer. The file is located in the windows\repair
folder. I have tried deleting the file but something rewrites the file. It is
also located in the registry run key. If you kill the process it restarts.
Windows has a hard time shutting down because this file is continually tring
to restart. I haven't been able to find any information on the tapicmd.exe
file name anywhere on the internet.
Click to expand...

There are no hits on this file in google. So assuming you spelled it
right this is suspicious and suggests some form of malware. Do a
thorough scan of the computer. Does he have a firewall active at all
times when online?

Run these programs to check for spyware/malware. After installing
update them, then boot into safe mode and run them. You should update
and run them weekly.

Cwshredder
http://www.intermute.com/spysubtract/cwshredder_download.html

Ad-aware SE
http://www.lavasoftusa.com

Spybot Search and Destroy
http://www.safer-networking.org

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

Pest Patrol Free Pest Scanner
http://www.pestscan.com/ScanOrTrial.asp

If you’re still having problems after running these then run HijackThis
and post the log to one of the specialty forums, _NOT_ this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

After your system is clean use these programs to help keep it clean:

Spywareblaster
www.javacoolsoftware.com/sbdownload.html

Spywareguard
http://www.javacoolsoftware.com/sgdownload.html

IE-SPYAD
http://www.staff.uiuc.edu/~ehowes/resource.htm

For viruses, start with Trend Micro’s Sysclean. Download it and the
signature file. Turn off system restore, boot into safe mode and run
sysclean. Boot back into normal mode and run a full AV scan with your
normal AV program. Then turn system restore back on.

Trend Micro Sysclean
http://www.trendmicro.com/download/dcs.asp

Trend Micro Signature File
http://www.trendmicro.com/download/pattern.asp

You should also regularly run at least two of these online scans in
addition to your regular up to date AV program:

Online and Downloadable Virus Scanning:

Panda ActiveScan
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Bit Defender Online Virus Scan:
http://www.bitdefender.com/scan/license.php

Symantec Online Virus and Security Scan:
http://security.symantec.com/ssc/home.asp

TrendMicro:
http://housecall.trendmicro.com/housecall/start_corp.asp

McAfee Online Virus Scan:
http://www.mcafee.com/myapps/mfs/default.asp

RAV AntiVirus - Scan Online
http://www.ravantivirus.com/scan/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml
 
1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt273.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *

Dave




| My sons computer is running xp pro and has got a file named tapicmd.exe
| running in the process window. This file is consuming alot of processing time
| and slowing down his computer. The file is located in the windows\repair
| folder. I have tried deleting the file but something rewrites the file. It is
| also located in the registry run key. If you kill the process it restarts.
| Windows has a hard time shutting down because this file is continually tring
| to restart. I haven't been able to find any information on the tapicmd.exe
| file name anywhere on the internet.
 
Back
Top