At Startup a cmd and temp window open...

Discussion in 'Windows 7' started by ThomasMann, May 30, 2019.

Thread Status:
Not open for further replies.
Page 1 of 7
  1. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #1 ThomasMann, May 30, 2019
    Every time one of our computers is started, two windows appear immediately after the start up is finished.

    One is cmd window, and the other is a Win notice... there is not now and has never been avast installed on this computer.

    It is not a real problem, because one simple mouse click will remove it, but especially as it is something from avast, I would like to remove its cause....

    Thanks
     

    Attached Files:

  2. DukiSync

    DukiSync MDL Junior Member

    Joined:
    May 12, 2010
    Messages:
    81
    Likes Received:
    25
    Trophy Points:
    0
    #2 DukiSync, May 30, 2019
    Check startup items with CCleaner. When you see something like "AvastAntivirusWorldwide.exe" disable it with CCleaner...
     
  3. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #3 ThomasMann, May 30, 2019 (OP)

    Thanks, but... No, never appeared there
     
  4. DukiSync

    DukiSync MDL Junior Member

    Joined:
    May 12, 2010
    Messages:
    81
    Likes Received:
    25
    Trophy Points:
    0
    #4 DukiSync, May 30, 2019
    Check startup items with MS "Autoruns". When you see something like "Avast..." disable it with Autoruns...
    Also scan computer for viruses...
     
  5. coleoptere2007

    coleoptere2007 MDL Guru

    Joined:
    Apr 8, 2008
    Messages:
    3,182
    Likes Received:
    1,796
    Trophy Points:
    120
    #5 coleoptere2007, May 30, 2019
    check in registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run :)
     
  6. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #6 ThomasMann, May 31, 2019
    Last edited: May 31, 2019
    (OP)
    negative... no entry... scanned with every available AV program....
    But autoruns shows an entry for cmd:

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\AlternateShell
     
  7. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #7 ThomasMann, May 31, 2019 (OP)
    both negative....
     
  8. DukiSync

    DukiSync MDL Junior Member

    Joined:
    May 12, 2010
    Messages:
    81
    Likes Received:
    25
    Trophy Points:
    0
    #8 DukiSync, May 31, 2019
  9. Joe C

    Joe C MDL Guru

    Joined:
    Jan 12, 2012
    Messages:
    3,534
    Likes Received:
    2,094
    Trophy Points:
    120
    #9 Joe C, May 31, 2019
    Last edited: May 31, 2019
  10. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #10 ThomasMann, May 31, 2019 (OP)
    If there were a substitiute for ccleaner, I would have dumped it long ago. But I prefer the cookie white list it offers, and its otherwise good job. I also use an old version, one from the days before Avast bought it and began abusing it as data supplier. And no, this started at no particular moment, and as it can be stopped with a single mouse click, it is not a real problem, but I like to understand what goes on.
    This particular computer is a fujitsu lifebook, and it has the exact same setup as the other two, same 7Ulti install DVD, same applications, same version of ccleaner... The other two computers had Avast installed back in the good old days, the one with the problem never did.
     
  11. coleoptere2007

    coleoptere2007 MDL Guru

    Joined:
    Apr 8, 2008
    Messages:
    3,182
    Likes Received:
    1,796
    Trophy Points:
    120
    #11 coleoptere2007, Jun 1, 2019
    then it is a virus
     
  12. Carlos Detweiller

    Carlos Detweiller MDL Spinning Tortoise

    Joined:
    Dec 21, 2012
    Messages:
    4,514
    Likes Received:
    4,543
    Trophy Points:
    150
    #12 Carlos Detweiller, Jun 1, 2019
  13. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #13 ThomasMann, Jun 1, 2019 (OP)
    With a little bit of actually thinking, it is very clear that it is NO virus...
     
  14. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #14 ThomasMann, Jun 2, 2019 (OP)
  15. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #15 ThomasMann, Jun 2, 2019 (OP)
    This Fujitsu has then identical set up as my desk top, and there the problem does not exist.
    ALso de-installing ccleaner, also makes no difference...
     
  16. DukiSync

    DukiSync MDL Junior Member

    Joined:
    May 12, 2010
    Messages:
    81
    Likes Received:
    25
    Trophy Points:
    0
    #16 DukiSync, Jun 2, 2019
    Check again startups with MS Autoruns:

    Look for instances with "non existing files" (yellow color)
    Look for instances with suspicious publisher (Avast, or not specified)
    Check startup *.bat files especially in "Scheduled tasks", check in text editor if they contain "AvastAntivirusWorldwide.exe" or something similar...
    ...
     
  17. Michaela Joy

    Michaela Joy MDL Crazy Lady

    Joined:
    Jul 26, 2012
    Messages:
    4,078
    Likes Received:
    4,652
    Trophy Points:
    150
    #17 Michaela Joy, Jun 2, 2019
    Press the "Start" button on the task bar to open the context menu. On the left side, on top of the search edit field there's
    a button (really a link) called "All Programs". Click it until you see the folder list.

    Look for a folder called "Startup". If there's something in there, then delete it and try rebooting again. :)
     
  18. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #18 ThomasMann, Jun 2, 2019
    Last edited: Jun 2, 2019
    (OP)
    Thank you, but I did that, and more than once. No avast, no .bat, no scheduled tasks.
    There is one item cmdm in autoruns, but it is not only white, c:\windows\system32\cmd.exe
     
  19. ThomasMann

    ThomasMann MDL Expert

    Joined:
    Dec 31, 2015
    Messages:
    1,596
    Likes Received:
    270
    Trophy Points:
    60
    #19 ThomasMann, Jun 2, 2019 (OP)
    Thank you, but its empty....
     
  20. Joe C

    Joe C MDL Guru

    Joined:
    Jan 12, 2012
    Messages:
    3,534
    Likes Received:
    2,094
    Trophy Points:
    120
    #20 Joe C, Jun 3, 2019
    Last edited: Jun 3, 2019
    With Auto Runs, look in the "Log On" tab and see if there's Avast, CCleaner or anything related from there. You must have it set to use Admin privileges in order for Auto Runs to work. Uncheck anything you find
     
Page 1 of 7
Thread Status:
Not open for further replies.