Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

cmd prompt opening after i log in


  • Please log in to reply
14 replies to this topic

#1 Who?

Who?

  • Members
  • 116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:46 PM

Posted 08 August 2014 - 12:07 AM

its only for 1 second but why is it happening and what is it doing?

 

(i have windows 8)


Edited by Who?, 08 August 2014 - 12:07 AM.


BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:03:46 PM

Posted 08 August 2014 - 12:35 PM

Go to Search (Apps) and type in msconfig, then right click on it under Apps and choose Run as administrator.

 

When System Configuration opens click on the Startup tab.

 

See if C:\WINDOWS\system32\cmd.exe is there.  If it is remove the check from its box, the click on Apply.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 Who?

Who?
  • Topic Starter

  • Members
  • 116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:46 PM

Posted 08 August 2014 - 04:37 PM

its not there :\

 

it had the word system32 displayed but thats all that i was able to see



#4 Who?

Who?
  • Topic Starter

  • Members
  • 116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:46 PM

Posted 15 August 2014 - 04:46 PM

bump.



#5 Naathim

Naathim

    Bleepin' Minion


  • Members
  • 435 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Poland
  • Local time:12:46 AM

Posted 15 August 2014 - 04:50 PM

Maybe Autoruns report will show why it is there.

autoruns-icon-64.png Scan with Autoruns

Please download Autoruns by Sysinternals and save the file to your desktop.

  • Right-click on autoruns-icon-64.png icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • It is important that you do not use your machine while the tool is running.
  • Wait patiently until the tool finishes its scanning. You will be notified with the Ready message in the lower left corner upon completion.
  • Go to File menu and select Save.
  • Make sure that the Save as type option is set to Text Files (*.txt) and the place to save will be your desktop. Name it somehow that you'll be able to identify it.

Please attach the file to your next post.
To attach it:

  • After typing in your message, click More reply options instead of Post.
  • below the post preview and the post editor, you should be able to see Attach files option - please click Choose file.
  • in the pop-up window navigate to the desktop. Choose the one previously mentioned and attach it.

If the file will be to big to attach it (it may happen), then please host it on a Dropbox account or a site like mediafire.com, providing me the link to the uploaded file.


Radek Naathim Pawelczyk

Malware Removal Specialist

 

staff.png


#6 Who?

Who?
  • Topic Starter

  • Members
  • 116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:46 PM

Posted 15 August 2014 - 10:11 PM

done!

Attached Files



#7 Naathim

Naathim

    Bleepin' Minion


  • Members
  • 435 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Poland
  • Local time:12:46 AM

Posted 16 August 2014 - 03:06 AM

Duplicate post.

Edited by Naathim, 16 August 2014 - 03:10 AM.

Radek Naathim Pawelczyk

Malware Removal Specialist

 

staff.png


#8 Naathim

Naathim

    Bleepin' Minion


  • Members
  • 435 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Poland
  • Local time:12:46 AM

Posted 16 August 2014 - 03:09 AM

It is this entry:

+ "mapdisk" "" "" "c:\users\michael\documents\armawork\mapdisk.bat" "27/07/2014 6:57 p.m."


Do you have any idea what is it?

Navigate to this file and right-click on it, select edit. A notepad window will open. Copy its content and paste here.

Cheers,
Naat :)

Radek Naathim Pawelczyk

Malware Removal Specialist

 

staff.png


#9 Who?

Who?
  • Topic Starter

  • Members
  • 116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:46 PM

Posted 16 August 2014 - 05:23 AM

subst p: "C:\Users\Michael\Documents\ArmAWork"

 

its an artificial drive used by some editing tools 

 

149py3u.png



#10 Naathim

Naathim

    Bleepin' Minion


  • Members
  • 435 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Poland
  • Local time:12:46 AM

Posted 16 August 2014 - 06:10 AM

No, I'm referring to the file that is located at your C:\ drive, not the P:\ one.

If you want to prevent it from autostarting, you may follow the steps below, containing regitry backup (we always recomend to do it prior to any registry modifications) and removing its value from the loading point; however it is your call :) If later you will find that it was necessary to load it during boot-up, just shout and I will import the value again to enable it. The file won't be removed, only its loading point.

 


TweakingRegistryBackup.jpg Backing up Registry with Tweaking.com

Modifying the registry may create unforeseen results, so we always recommend creating a backup prior to doing that.

Please download Registry Backup (portable edition) by Tweaking.com and save the file to the desktop.
It will come as a zipped file, so you will need to unzip it. You may do it by right-clicking on it and choosing Extract All. Extract it to your desktop.

  • Enter the Tweaking.com directory and right-click on TweakingRegistryBackup.jpg icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Once the main console is loaded, press Backup Now at the bottom.
  • Wait patiently until the backup is done - it may take several minutes.
  • Once finished (a message like Successful 12/12 Registry Files Backed Up will appear) - close the app.
  • On your main drive a folder named RegBackup should appear. This is the place where the backup is stored.

This tool won't generate any report.
You may delete it after we're done with the cleaning, but I'd recommend to save it and do a backup once per month. It's better to be safe than sorry.



reg_file_icon.jpg Registry Fix

Modifying the registry may create unforeseen results. Please do not proceed, unless you have created a registry backup prior to doing that!

We need to prepare a fix file first.

  • Press the WindowsKey.png + R on your keyboard at the same time.
  • A Run window should appear in the lower left corner. Type in notepad.exe and press Enter.
  • In the shown window paste in the following script. Make sure that all of the codebox content is pasted!
    Windows Registry Editor Version 5.00
    
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "mapdisk"=-
    
  • Go to File menu and select Save as.
  • Make sure that the Save as type option is set to All Files (*.*) and the place to save will be your desktop.
  • Name the file fix.reg and select Save.

After that, your prepared fix.reg file should be located on your desktop.

Now we need to import the file into the registry.

  • Locate the fix.reg file on your desktop.
  • Right-click the reg_file_icon.jpg icon of your file and select Merge.
  • You'll be prompted about adding the information to the registry. Please agree.

After this please manually reboot your machine. Any report won't be generated.

 

Let me know the results :)

 

Naat


Radek Naathim Pawelczyk

Malware Removal Specialist

 

staff.png


#11 Who?

Who?
  • Topic Starter

  • Members
  • 116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:46 PM

Posted 16 August 2014 - 09:34 PM

i dont want to do anything to my registry i just want to find out whats causing it :\



#12 Naathim

Naathim

    Bleepin' Minion


  • Members
  • 435 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Poland
  • Local time:12:46 AM

Posted 17 August 2014 - 04:01 AM

I told you - this file is set to load itself each time Windows starts. That's why you see it every time after logging in.

Radek Naathim Pawelczyk

Malware Removal Specialist

 

staff.png


#13 scotty_ncc1701

scotty_ncc1701

  • Members
  • 520 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:46 PM

Posted 17 August 2014 - 05:49 AM

A friend actually uses:

http://www.gateway-to-hell.com/downloads.html

File XSUBST.  It's a German site, and the program starts in German (initial install), but you can change the language to English.  You can tell it to start at startup, and it WILL NOT SHOW any command windows.  It's seems better than SUBST!

Have a great day!
:bananas: :bounce:



#14 scotty_ncc1701

scotty_ncc1701

  • Members
  • 520 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:46 PM

Posted 17 August 2014 - 06:17 AM

Naathim is correct, that is what is causing your issue, that is what is causing the display.  Searching shows countless references to it (mapdisk), including, but not limited to:

* Graphical Disk Map
* A game called Arma II.

You need to determine what program is causing it.  It seems to be the second one from my research, but not a guarentee.  If it is in fact the program Arma II, you need to see if you can delete the mapdisk.bat, and use the XSUBST in place of it.  But in any case, you will need to remove the entry from the registry, there's no way around it, or you'll continue to get the cmd windows.  SUBST isn't persistent -- meaning it must be set each time Windows starts.

Have a great day!
:bananas: :bounce:


Edited by scotty_ncc1701, 17 August 2014 - 06:18 AM.


#15 Who?

Who?
  • Topic Starter

  • Members
  • 116 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:46 PM

Posted 17 August 2014 - 11:29 PM

alright thanks :D






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users