Random DOS prompts popping up

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by makk, May 18, 2012.

  1. makk

    makk Private E-2

    At random moments, a series of Command Prompt windows (often 3) opens up on top of whatever programs I may be running. It occurs regardless of whether I am online and regardless of whether I am actively using any programs on my desktop. The prompt says this: C:\windows\system32\cmd.exe
    The problem began almost a year ago, and I have tried several malware scans to determine the issue with no luck.
    I have followed the READ AND RUN ME FIRST post with the exception of the ComboFix step. Even after I removed AVG, ComboFix still brought up an AVG conflict error message, so I skipped that step.
    I could not recall where the SuperAntispyware Log was saved, so I ran it again, and am posting the second log (the first run was clean).

    Thanks in advance for your help.
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    You need to let ComboFix run anyway even though it mentions AVG. It is just a registry entry that it causing this problem. However based on your logs, you do not have AVG uninstalled, I see AVG 2012 installed. So uninstall it now an leave it uninstalled. The rerun ComboFix and attach the log. Make sure that ComboFix.exe is directly on your Desktop and not in folders like below:

    c:\documents and settings\Matt\Desktop\cleaners\ComboFix.exe


    Also uninstall a-squared Free 3.1

    You are years out of date with your copy of Malwarebytes. At least based on the log you attached. If you attached the wrong log then attach the proper one, otherwise, you need to uninstall it and then download what we asked you to install in the READ & RUN ME. Update it after install too so you get current databases. Then run a new scan and attach the new log.

    Also you are out of date with MGtools. Download and scan with the version in the READ & RUN ME and attach the new log.

    Also note that you have SpywareBlaster 4.2 installed and this is way out of date too. It is on version 4.6. See >> SpywareBlaster
     
    Last edited: May 18, 2012
  3. makk

    makk Private E-2

    Thank you for your quick reply!
    I updated to the latest versions and gave it a go. When I ran combofix, I got a message about AVG being active, even after I thought I had uninstalled AVG. I ran combofix, disregarding the warning. Log is attached.
    Before I ran MGtools, I ran the AVG uninstaller again, and I think the removal worked.
    MGtools and Malwarebytes logs are also attached.
    I also removed a-squared Free 3.1.
    Thanks again for your assistance.
     

    Attached Files:

  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    What issues are you still having?
     
  5. makk

    makk Private E-2

    The same issue is still occurring. For example, when I was attaching the logs on the previous message, three consecutive windows popped up in rapid succession on top of my browser and disappeared just as rapidly. From time to time the windows stay up long enough for me to see that they say C:\windows\system32\cmd.exe.
    -m
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    This is not looking like a malware issue.

    Go to start / run / type in:
    msconfig

    When the panel opens, go to the last tab and uncheck everything. See if you still have the issues. If not, then check two items at a time until the issues comes back.
     
  7. makk

    makk Private E-2

    Thanks again, TimW;
    I just want to clarify: by "last tab" do you mean the "startup" or "tools" tab (or possibly "services")? The reason I ask is the "tools" tab is the last one, and I can't see anything to uncheck.
    Thanks for your help.
    -M
     
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Start up. ;)
     
  9. makk

    makk Private E-2

    Alright. I followed the instructions, and so far have not had the popping windows return, however, I do have procedural questions:
    As I go down the list, checking two boxes at a time, I then click "Apply?" This is what I did.
    How long should I wait to see the "issue" before moving on to the next two startup items? I waited 10-20 seconds each time, but since the "issue" is random, I was unsure how long I should wait before moving on down to the next items on the list. After waiting briefly I followed the described procedure, and ended up with all boxes checked, but no return of the issue.
    I will keep my eyes open in the mean time.
    Thanks again for all of your efforts so far!
    -M
     
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Normally, you would need to reboot between rechecking of the boxes. So enable two, reboot and see if the problem returns. If it is not happening at all, then you are probably good to go.
     
  11. makk

    makk Private E-2

    Thanks TimW,
    I have not yet isolated the culprit startup item, but the good news is, so far after several days, no more issues have arisen. At least now I know where to begin again if the issues return. Thanks for your patience and insight!
     
  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Not a problem. Safe surfing. ;)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds