Tag Archives: Zango Removal

Zango Spyware

Windows XP

 

Over the weekend Sept. 8 2008 while working on a machine I ran spybot. It found some adware called Zango. Spybot said it had to reboot to remove some of it and that is where the problem starts. When it reboots you will see
“c:\windows\system32\command.com

The parameter is incorrect.” Clicking it keeps reporting error message over and over. The system never really goes beyond that point.

Took a little research but here is how I corrected it

Log on to the system in safe mode. Start regedit. Navigate to the following registry key and see if there is an entry with “c:\windows\system32\command.com …” in the data portion of the entry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
It had several entries to run Spybot and remove things so I deleted those entries and restarted the machine. Ran Spybot again and undid the changes to that section and it seemed to work fine.

I didn’t do it because it wasn’t my machine but they say you can remove it instructions here.