WTF??

Toaku · 26 Sep 2013 at 20:39

My cmd keeps flashing up randomly every couple of mins, does anyone know what it is and how to solve it?

I managed to get a screen shot;
http://gyazo.com/1bb0296342b7d78d55446a8091625b90

Hyburnate · 26 Sep 2013 at 20:52

Boot into safe mode and run Spy Bot Search and Destroy or something similar

swiftmetal · 26 Sep 2013 at 21:27

Either that or go for a fresh install of windows.

Toaku · 26 Sep 2013 at 23:11

Hyburnate said:
Boot into safe mode and run Spy Bot Search and Destroy or something similar

i tried this and its still flashing up :S

coolsurfer · 27 Sep 2013 at 00:06

Which porn site did you go on? ;-)

MagicBoy · 27 Sep 2013 at 00:12

Nuke it from orbit.

Glanza · 27 Sep 2013 at 07:30

Give combofix and mbam a scan and see if they pick anything up.

InertProtocol · 27 Sep 2013 at 09:19

MSE & CCleaner.

Stop downloading dodgy stuff or visiting dodgy sites

Toaku · 27 Sep 2013 at 09:21

okay i might visit dodgy sites but i dont download dodgy stuff, i only download games from steam.

LizardKing · 27 Sep 2013 at 10:05

looks like something is trying to run the shutdown command with no parameters!

check your scheduled tasks, someone trying to play a prank?

oll3h · 27 Sep 2013 at 10:11

Run this first.

http://www.bleepingcomputer.com/download/rkill/dl/10/

Then run these.

http://www.bleepingcomputer.com/download/tdsskiller/dl/4/
http://www.bleepingcomputer.com/download/combofix/dl/12/
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/dl/7/

arknor · 27 Sep 2013 at 11:32

junkware removal tool
combo fix

I'd try those usually my last ditch attempts or first attempts when it's not my comp.

never had an issue with them yet

Django x2 · 27 Sep 2013 at 12:12

Hyburnate said:
Boot into safe mode and run Spy Bot Search and Destroy or something similar

Is this 1998?

bledd · 27 Sep 2013 at 13:50

check task scheduler to see whats scheduled to run
run hijackthis and post the txt file log in here

KIA · 27 Sep 2013 at 13:52

Toaku said:
okay i might visit dodgy sites but i dont download dodgy stuff, i only download games from steam.

You don't need to do anything bad to become infected.

UKDTweak · 27 Sep 2013 at 13:54

Looking at your screen shot, I just replicated the exact same DOS screen on a Core 2008 server build by running the shutdown command without adding the /s....
Check your task manger for running CMD and also look in event viewer for failed shutdown events.

Hyburnate · 27 Sep 2013 at 13:55

Django x2 said:
Is this 1998?

It still works