cmd.exe query

Viruses and worms
1

I have just installed CIS 4 and have not changed anything else or downloaded any dubious downloads but whenever I boot up Vista (32 bit) I now get a brief cmd.exe (dos like window) which lasts less than a second, the firewall asked me if I wanted to allow it access to the internet but I dont know what to do, Avast doesnt detect anything malicious and I have yet to run any superantispyware or malwarebytes scans but I wondered whether any of you have encountered this before and is there a way to trace what is running this process. Also is it safe to block access to the internet for this process or does the geniune process need to in order for stable computer running

ps it does not appear in task manager unless it closes quickly after executing

any help would be greatly appreciated and I will update this topic with any further info when I get it

2

Hi sanctuaryforever,

Maybe there is registry corruption and you need a registry cleaner to troubleshoot and fix the Cmd Exe problem, make a back-up of your registry first.

polonus

3

when I run a scan with superantispyware should I disable Avast real time shields or can I leave them on while I run it?

ps does cmd.exe need internet access in the first place or is this suspect?

4

it does not need internet access.

5

Hi sanctuaryforever,

Well that is right, re: http://www.articlesnatch.com/Article/Windows-Cmd-exe-Command-Process-Errors/982956
An SAS scan is independent of the avast shields, leave them on, give us the results in an attached txt file,

polonus

6

superantispyware (quick) scan came back clean, will try malwarebytes scan when I have time

ps is malwarebytes hosting their new version on a site other than their own as it takes me to a different site when I go through their site?

7

i would block it, since it’s a rather unusual behavior!! :frowning:

8

More information can be found below :

http://www.what-is-exe.com/filenames/cmd-exe.html

But just in case, also consider this :

http://www.f-secure.com/v-descs/haxdoor.shtml

9

Malwarebytes came up clean on a quick scan, so unless its something incredibly new that Superantispyware, MBAM and Avast have no detection for my system appears clean, any other suggestions or do you think they would have reported something if the computer was infected?

ps would self deleting malware be an issue (or would there still be a trace even if it was?) or is it rare for self deleting malware to be the case?

10

so, have u already cleaned ur registry, like polonus adviced u?

11

what registry cleaners can I use to check for corruption?

ps could someone please give me their thoughts on my last question

12

Go to PROFILE then Modify Profile then Forum Profile Information then Please select your country: then Signature: and put information about your system just like my signature about your system just like my signature so that the helpers can offer pertinent advice.

13

:wink: do you have any software related to dial-up?

like pc suit, lanagent,or usb mobile net.

i think that is the dial-up pop-up ::slight_smile:

14

You can use the free Ccleaner: http://www.piriform.com/ccleaner
asyn

15

The dos window popup has not popped up recently but I will try CCleaner to see if anything comes up. I will also query something over at Comodo forums that I have come across but seeing as I have run Superantispyware and MBAM with both showing a clean system would you say that is a good sign of having no malware?

ps I will update my signature on this forum when I have some free time with my system specs for future reference

edit: @bong2x : no I have no dial up software that I can think of or any super specialist programs for that matter, mostly just your average type software