The tgcmd.exe spyware won't go away -

[truedelphi]

I was using a security task manager to help me figure out why my computer endlessly spins and whirls, like the HD is being copied endlessly.

I found out that my system has a support folder for an obsolete program I use, that contains the tgcmd.exe spyware. then i was told the best way to get rid of the spyware was to eliminate the whole support folder, by going to COntrol Panel and using the Un-install/Remove feature.

Well, when I do that, at first things in that folder are eliminated, and quickly, but then the program starts endless spinning and whirring about. The arrow on the indicator bar showing how much time is left doesn't move any, either.

Finally I go to get out, and am told that the program "DLL" I was attempting to run as an Ap was not responding.

What does all this mean. Did the tgcmd.exe thing-ee decide to release itself as an Ap while my Remove function attempted to remove it?

I want to get rid of this tgcmd.exe program, but now am at a loss.

As always, any information and help is appreciated.

[discntnt_irny_srcsm]

1. You could try...

...restarting in safe mode and running a virus scan followed by trying the uninstall again.

[Go Vols]

2. Best answer I could find

This is the sort of software we classify as spyware. It is part of Tioga Software's remote support and management tools (Tioga.com, Support.com, and SupportSoft.com are one and the same company) and is installed by the setup CD of the @Home ISP (@Home and MediaOne are now part of Comcast, with the ComcastSupport software being the main culprit for introducing TGCMD on a PC). The Tioga/SupportSoft.com software is also included in the Sony Support software that comes with some Sony Vaio's and HP Pavillion's, and it is also part of the BellSouth DSL HelpCenter. The original intention of TGCMD is to have your @Home service or systems software automatically updated when you are online, to provide a remote support technician with setup information about your PC, and, in some cases, to allow the remote support technician to connect to your PC and see what you are doing - in short, technical support is indeed the original intention; unfortunately, its features are also very useful to advertisers and so, depending on who supplied it, TGCMD will also collect information from your PC, which web pages you have visited, what you have downloaded, and permission based information about your system, its software, its settings, etc… As if that were not enough for us to recommend disabling it, it has additionally also been known to create a WININIT.INI file in the Windows folder, something which straight away prevents Windows ME users from using the extremely valuable System Restore feature of Windows ME. Finally, many users have also reported : being unable to clear the Internet history files when it is running, Eudora startup problems, SDCSchedulerWindow error messages on shutdown of Windows, and inability to delete video, audio, or graphics files. Personally I would disable it but not delete it. Good luck!!

[truedelphi]

3. Actually the post you offer as a citation was the post that got me

Into trying to remove the TGCMD.

I did just as it described doing, and like I stated in my OP, I can't get the damn thing to be removed. All that happens when I attempt to use the Control Panel and then go to the Add/remove function, and then attempt to remove the support.com and related folder. The attempt begins, but cannot be concluded. and then after tying up my system for over an hour, the TGCMD file is still on my computer and I get out of that function with the message that the ' "DLL" file is trying to act like an "AP" file.'

That is what i need help with.

[Earth Bound Misfit]

4. Autoruns for Windows: Disabling an unwanted process is as simple as unchecking the box next to it.

http://technet.microsoft.com/en-us/sysinternals/bb963902

This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more. Autoruns goes way beyond the MSConfig utility bundled with Windows...

[truedelphi]

7. Thank you for that information and the link.

Glad to see someone here actually read what I posted and didn't tell me to do something I told everyone I had already done!

[Earth Bound Misfit]

8. (((Blushes)))

You're welcome, blind squirrel & a nut...something like that

http://www.usingenglish.com/reference/idioms/even+a+blind+squirrel+finds+a+nut+once+in+a+while.html

Did you/are you going to/have you used the prog & have you identified the offending processes? Post back & let me/us know.

Regards
EBM

[truedelphi]

9. Will let you know how it turns out once

I attempt tit.

Was on the road 15 hours yesterday and little sleep yet.

But I am very grateful for help, and my blind squirrel here is a blind cat, who serves as the alarm clock (in order to get her nut, the kibble) and also as a warning device when the coffee water is about to boil away. (Toodles sees well enough to be upset about steam for some reason. The other cats could care less.)

So blind squirrel advice very much appreciated!

[douglas9]

5. Mysteryware - TGCMD.EXE

TGCMD.EXE, sometimes considered spyware, was originally created by Tioga/Support.com. If you're an @Home subscriber, this was probably installed with your Comcast @home software or other broadband provider.
If you own a Sony Vaio system, it was probably factory installed along with the Sony Support software.

This program collects data on the programs that you use and websites you browse. It is unclear if anything is being done with the data.
If you have a need to support in this manner you can safely leave it alone but we don't recommend having it running at all times from your startup list.

This program and the companion file TGKILL.EXE can be safely uninstalled from the
Start menu > Settings > Control Panel > Add/remove programs.
Remove either "Comcast Support Software" or "Sony Vaio Support" depending upon which appears.

This program may also appear with the following switches depending upon how it was installed: /server /nosystray /deaf /startupmonitor


http://www.winpatrol.com/db/freesample/tgcmd.html

[grok]

10. it appears you only partially removed it

This can sometimes happen when

A. when you uninstall, the process in question was not terminated and locked the file so it it could not be removed while the process was still running. viruses commonly do this but so do some applications

AND/OR

B: the uninstall procedure failed to remove the RUN/STARTUP registry entry for it.

You *might* use regedit to remove mention of it in the registry(simple BUT be sure you know what your doing)

When *I* i have to deal with an ornery virus that won;t die, I generally locate the virus file FIRST, boot up a LIVECD copy of ubuntu, make a directory called BAD,move the virus into it, make a directory in the same location of the virus with the exact same filename(and extension) and reboot windows. Then deal with the (file not found popup) consequences.

[truedelphi]

11. This file will NOT move.

I will be trying some of the suggestions above tomorrow, but need sleep before I do any of this.

[jeff47]

12. That's where the live CD part comes in

It's the copy of Windows on the hard disk that's preventing the file from being moved. So booting any operating system from a CD will bypass that.

[truedelphi]

13. Also, I am hoping I don't have to use the reg edit

But may have to go that route. Think I'll have the computer tech herre when we do it.

This tgcmd.exe file is always running, so your explanation One was relevant. I cannot get it to stop running. Will that factor in to my success in using regedit?

[grok]

14. the regedit issue...

the registry governs when and how programs run, when you boot,login, etc. If you delete the entry ....blahblah..../Run/tgcmd.exe should fix it.

The BIG HOWEVER....

sometimes programs notice when their registry entries have been deleted and re-insert themselves. not to mention sometimes the registry entry is not where one (like me) might guess.

To avoid this, its far easier to boot from a LIVECD/ubuntu linux without ever running windows. in this case, the tgcmd.exe command never actually runs so it can't lock itself in place. you can remove it easily then.

this does not mean the Windows system(when you reboot normALLY) won't complain the file is missing. but at least the command you don't want won't run. if it ain't there, it CANT run.

[Go Vols]

15. Revo uninstaller

should kill it,it works well for me.30 day free trial.

http://www.revouninstaller.com/revo_uninstaller_free_download.html

[truedelphi]

16. Thank you, go vols. n/t