command prompt flashes by

Hello. I have a windows 7 64 bit operating system. When I first boot up or awake from sleep the command prompt flashes by. I am unable to read what it says because it goes away quickly. It flashes by several times in the first 5 or 10 minutes. I wondered if there is any way to determine what is causing this. I have downloaded the tools that are asked for if you would like me to run them.
I have looked in the event viewer but don't know what to look for so I am hoping you can help me. Thanks so much in advance.

 

Tough call.. Don't like the idea of an uninitiated command(s) running in console.

What tools?
Do you suspect malware?

Cheers..

 

I downloaded the tools because I read the instuctions of before I ask for help and i thought it suggested to do so. I have not run any and they can be deleted from my desktop. The tools were hitman.pro, malwarebytes, tdskiller, mgtools, & roguekiller. But they can be gone and I will follow whatever you tell me to do.

 

Run the scanners a per the instructions. Attach the logs as requested. You are on track.
Cheers.
Attach the logs in a new thread here.

 

farmgirl806...

Sounds like you have a script running during the boot/wake sequence.

If this is new, it could be part of a program you have installed. It could also be part of a hack attempt too (less likely but possible). Good advice to have your PC evaluated.

I have a script that I placed on the machine that runs every couple of minutes to update a file, and I had this happen with that script, until I found a way to run the script as a hidden one. If you have heard of a batch file (.bat), that's what this one I have running is.

They are usually found in a notepad type file and named <filename>.bat. If you really would like to poke around and see what might be causing the pop up, you could take a look here:

http://pcsupport.about.com/od/tipstricks/a/execfileext.htm

This is a list of different types of scripts. You can search your hard drive to see if you come up with anything unusual for, for example, .bat. To do this just enter .bat into the search field and hit enter. You can also try the others in the list.

 

I did the .bat check. But really don't know what to look for. I looked at all the dates and don't see anything that stood out but again I really didn't see anything. So you mentioned having the PC evaluated. Do you mean other than here on this forum?

 

Just follow sikvik's link and post your scans to see if you have malware is what I meant...

 

I did the scans and posted in a new thread in the malware forums. Hope that is the right way. Thanks!

 

I have found there are no viruses from the malware forum. So I am back here is there are any more ideas. Thanks

 

farmgirl806...

Download CCleaner here if you don't have it:

http://www.majorgeeks.com/files/details/ccleaner_standard.html

Click on the Tools button then on Startup. Click on "Save to text file" and save the file to your desktop. Use a zip utility to create a zip version of the file and then attach it to your next post.

I suspect it's one of your startup programs. You could boot into safe mode to check to see if it happens there.

One thing occurred to me that it could be is the flash player updater trying to phone home to check for updates or inform you of updates. Maybe your anti-virus is stopping it from doing so...

 

here is the startup file. I will go to safe mode and check that right now. Thanks!

 

I forgot to add that the command prompt does not flash by when in safe mode.

 

farmgirl806...

Since it's not there in Safe Mode, it's 90% one of your start up programs. The best place to start is there. If you have CCleaner, you can try disabling the startup entry for the most likely candidates first then send the PC into standby. If the command window disappears when the PC reawakens, you know it's one of those. If it's not one of those, then turn off half of the remaining ones that are on and then half again and so on. Once you know it's in a group of only a few of them, you can try them one by one.

If command prompt appears every time you exit standby mode, you could put the PC into standby for the test rather than boot, which will save alot of time.

Here are some possible candidates in order of suspicion:
1. Yes HKLM:Run Memeo Instant Backup Memeo Inc. C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe --silent --no_ui
2. Yes HKLM:Run VDownloader Vitzo C:\Program Files\VDownloader\VDownloader.exe /silent
3. Yes HKLM:Run EKStatusMonitor Eastman Kodak Company C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
4. Yes HKLM:Run NUSB3MON Renesas Electronics Corporation "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
5. Yes HKCU:Run Advanced SystemCare 7 IObit "C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto

My guess is the backup program. My backup program uses command prompt when it starts a backup.

 

It is this one:

Yes HKLM:Run Memeo Instant Backup Memeo Inc. C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe --silent --no_ui
or
Yes HKLM:Run Seagate Dashboard Memeo Inc C:\Program Files (x86)\Seagate\Seagate Dashboard\MemeoLauncher.exe --silent --no_ui


The --no_ui switch is the dead giveaway. I recently dealt with something similar with a client, but it was a Cox backup solution.

 

ok . This backup is a unit that sits behind my computer and runs automatically. If I shut it off from startup then do I manually do the backups? Or could I delete all the backups and start over with the unit? Probably a dumb question to you but I am not sure what to do.
Thanks for your help!!