Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

CMD is opening and closing automaticly


  • Please log in to reply
9 replies to this topic

#1 FlameOtter

FlameOtter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 10 August 2015 - 11:50 AM

Hi. The cmd window is opening and closing by itself. It says something in the window but closes before I can read it. I honestly don't even know if  malicious software is behind this or not. Regardless, your help is much appreciated.

These are the logs that FRST gave me.

 

Attached Files



BC AdBot (Login to Remove)

 


#2 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,842 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:45 PM

Posted 10 August 2015 - 07:51 PM

:welcome:

 

Have you attempted to uninstall Skydrive or One drive? There is a Runonce entry calling for the CMD command window.


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#3 FlameOtter

FlameOtter
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 10 August 2015 - 08:08 PM

No I haven't tried to uninstall these programs. I'll uninstall them and see if the problem goes away. By the way, thank you for all your help. I know looking through those logs must have taken a while. I'll tell you if this keeps happening.



#4 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,842 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:45 PM

Posted 11 August 2015 - 06:57 AM

Fixed?


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#5 FlameOtter

FlameOtter
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 11 August 2015 - 04:42 PM

I haven't seen the window pop up again. I'm still waiting to see if it opens. Sorry I didn't mention this earlier, but did you find any evidence of things such as hackers or bots?



#6 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,842 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:45 PM

Posted 11 August 2015 - 06:21 PM

I see no malware in those logs. Re-scan with FRST64 and post its reports to see if there has been a change..


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#7 FlameOtter

FlameOtter
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 12 August 2015 - 07:28 PM

Ok. Here are the results of my latest scan.

Attached Files



#8 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,842 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:45 PM

Posted 12 August 2015 - 10:22 PM

The entry still present. lets remove it.

 

Download the attached file and save it in the same directory FRST64 is saved.

  • Start FRST64 with Administrator privileges.
  • Press the Fix button.
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.

 


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#9 FlameOtter

FlameOtter
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 13 August 2015 - 10:40 AM

Thanks for all your help so far. Here is the fixlog

 

Attached Files



#10 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,842 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:45 PM

Posted 13 August 2015 - 10:42 PM

That should do it.

 

Will leave the topic open for a few days in case it returns.


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users