2. You'll want to expand on that question. Depending on what the malware's intent is, there could be no sign at all. It could be a rootkit and if it's one of the newest rootkits then they are not going to be detected today.

3. The "shell" (cmd.exe) and the "console" (Windows Console) are separate things. So why are you thinking one depends on the other?

4. See reply 3. You sound confused. Maybe you need to take more classes on Windows, Windows programming and more?