Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

cmd prompt starts a website on startup


  • This topic is locked This topic is locked
2 replies to this topic

#1 White Jester

White Jester

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:09 PM

Posted 30 April 2014 - 02:25 PM

FIXED (go to start => msconfig => startup => and disable Microsoft/Microsoft Corporation/ cmd.exe /c start http://extendedunlimited.org && exit) Message me if you need further help!

 

 

Hello world,

 

I need help removing a file that is embedded in my registry files that make a cmd prompt to open a website page (gameharbor.org) on startup. I found a related post but I did not have the required permission to post a reply to it. So I will link to the post here in hopes of helping solve the problem (http://www.bleepingcomputer.com/forums/t/532750/cmd-lanching-webpage-on-startup/). I ran FRST (Farbar Recovery Scan Tool) in hopes of finding any useful information. 

 

I believe the specific line that is causing this issue is: HKU\S-1-5-21-1833336795-3408564319-929828570-1000\...\Run: [CMD] => cmd.exe /c start http://extendedunlimited.org && exit

 

 

Thank you all in advance for any help,

White Jester


Edited by White Jester, 30 April 2014 - 03:00 PM.


BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:09 PM

Posted 05 May 2014 - 09:16 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please post the complete Farbar log and I will review it.

Wait for further instructions.

#3 nasdaq

nasdaq

  • Malware Response Team
  • 40,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:09 PM

Posted 12 May 2014 - 08:13 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users