Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Black Command Screen Flashes Up Then Disappears

Aug 23, 2016 2:00PM PDT

Hi,

Long story short, I was caught out by a dodgy exe file last night, it wasn't what I thought it was and all hell broke loose. An error called 'Bad image' was repeatedly coming up as well as pop ups all over the place. Anyway, I went into the programmes list and found about six or seven strange new programmes. I deleted them all and things seem more or less back to normal.

Except, every so often, I get a black command screen flashes up for a second before disappearing.

Anyone know what this is or if I should be worried? Or how would I get rid of it.

Thanks

Discussion is locked

- Collapse -
Answer
What scans have you run?
Aug 23, 2016 2:12PM PDT

Dafydd.

- Collapse -
Only Malwarebytes
Aug 23, 2016 2:57PM PDT

I've only ran Malwarebytes and removed a few items marked as Malware. I left the other 'suspicious' items alone for now.

- Collapse -
Answer
Since you only used one scan
Aug 23, 2016 3:18PM PDT

The ugly truth is there is no scanner that gets them all.

Let's say I wanted to check this machine out and not use any other scanners.

1. I'd give the HIJACKTHIS Log file a reading. I use my prior knowledge to sniff out what's to be checked up deeper with google and other searches.
2. If the HJT Log didn't find it, I'd go get AUTORUNS and since it's my PC I'd want to know each line in each category.

- Collapse -
OK I'm not going through all that.
Aug 23, 2016 7:40PM PDT

I did a scan with ADWCleaner and it came up with a long list of stuff that it removed.

Haven't seen the command box flash up since I restarted so fingers crossed.

Something I did forget to mention is that my mainpage and default search engine changed from Google to something called searching.com which looks just like Google at a glance but isn't. I've managed to restore Google as my default search engine but no matter how many times I change my start up page in the menus, searching.com still remains as the start up page.

- Collapse -
That's called a hijack.
Aug 23, 2016 8:12PM PDT
- Collapse -
Ah sorry.
Aug 23, 2016 8:53PM PDT

I was talking about Griff's post which I saw before yours.

I haven't got a clue how to do the things you say but I'll look into it tomorrow when I've more time. Cheers

...And it looks like I spoke too soon as I just saw the command box flash up again.

- Collapse -
If it's persistent
Aug 24, 2016 7:33AM PDT

Then I suggest folk sign up at bleepingcomputer, read the welcomes and then post according to the rules. Help there is swamped but top notch. Following their posting rules gets the fastest responses.

Here, we don't do such deep dives but share the know 99.99% cures such as the list of scans Grif writes up or if a person is so inclined how to dig into it.

While you do have a symptom, it doesn't nail it to say "Inception hijackerz." I wish it did but there are so many hijacks today that you have to use all the tools and if that doesn't clear it up and I MUST PAUSE HERE. Some have come back that their home page is still set wrong. That's under our control and not one scanner I know of changes the home page or search engines. We must do that ourselves.

OK, so moving on, try the list by Grif. Be sure to change your homepage and search engines to your choices.

- Collapse -
I have tried and tried to restore google as my homepage
Aug 24, 2016 8:59AM PDT

but searching.com remains set as the home page. I've followed video tutorials on Youtube and reset to the defaults countless but it absolutely refuses to go away. I've managed to restore Google as the default search engine though.

I'm more concerned about the command box incase it might be spyware.

- Collapse -
Reset to defaults does not change homepage setting.
Aug 24, 2016 9:10AM PDT

I think you'll have to do that on its own.

As to the command box, I suggest you complete any of these steps:
1. Use Grif's list and scan.
2. Use my method to deep dive.
3. Get the bleepingcomputer going.

And of course don't count on "reset to the defaults" to change homepage and search settings. That is something I have to do myself.

Post was last edited on August 24, 2016 10:22 AM PDT

- Collapse -
Fixed maybe
Aug 24, 2016 10:09AM PDT

I have done another scan with Malwarebytes and removed all the threats so hopefully might be OK now.

Google is back as the main page and I guess time will tell if the prompt screen thing happens again.

Cheers for your help.

- Collapse -
Apparantly not fixed
Aug 24, 2016 12:24PM PDT

Hi,

Just saw the black command box flash up again so clearly not gone yet.

Can you explain how to access the HIJACK Log and Autorun that you mention? Please bear in mind, you're speaking to someone who is a complete numpty when it comes to the technical stuff. It's all foreign to me.

- Collapse -
Tutuorials are on the web.
Aug 24, 2016 12:38PM PDT

As you write you're not into this, I think you should go with Bleepingcomputer next.

They guide you on each tool and often create custom fixes for you.

The only downside is so many need such help so join, read how to ask for help and get going.

It appears the usual Grif scans (remember I will assume you ran them all both on a normal and safe boot) does not clear it up.

- Collapse -
Answer
Something new to try.
Aug 24, 2016 7:21PM PDT