File explorer opens when I try to open CMD

Hi Paul,

EDIT: Disregard the bottom text. After googling a bit I found a stackoverflow page where the guy told me to do the same thing as you asked, checking regedit. turns out i have a current_user entry after all. I have very bad eyes so that's why I missed it. the autorun entry was there and I removed it.

It pointed towards a firewall module that was a part of a virus that was removed automatically when I installed something a few days ago. So it pointed to nothing, that's why it couldn't execute its task. In the end it could've only been a registry entry when I think back. 

Thanks for baring with me and of course I really appreciate the help!

Kind regards,

Rajiv

END EDIT

I have a 64bit system, I already tried opening cmd in the system32 folder but it doesn't do anything. In both system32 and SysWow64 folders the cmd opens and closes real fast. When i run cmd like this though it doesn't open explorer and when I open both cmd's in powershell it doesn't give me the "file or directory find: explorer.exe no such file or directory found" message. usually when i open cmd in powershell with the cmd command it displays this message and opens explorer. when I open cmd with powershell in de specified directories by you it doesn't show any message and no explorer window is opened.

I am really confused, I'm tempted to just reinstall windows to be safe, even though I'm almost 100% sure nothing is compromised. Just to be on the safe side, but it is such a pain to reinstall everything.

Kind regards,

Rajiv

Hi Paul,

Thanks for the response, I ran the first scan already with my antivirus (EST NOD32 Antivirus) and it found nothing. After that I ran the microsoft tool and it found a trojan that was removed but I have had no alerts via any account that i have that I have been hacked. I still have the cmd issue that it opens explorer so I think its somehting else. Also the SFC /scannow command didn't find any integrity issues either.

Here is a screenshot of the cmd shortcut. I already looked at this previously and it looks normal to me. Tried to directly open cmd from the windows/system32 folder and the same thing happend.

Thanks a lot for your help, I really appreciate it.

Kind regards,

Rajiv

Hi Rajiv,

Awesome! We're glad that you're good.

If you need any Windows 10 help, feel free to message us anytime & we'd be more than happy to help.

Thanks for your time & please take care always.

Stay healthy & happy. Cheers!

Sincerely,

Paul A.

Independent Advisor

Hi Paul, 

Sorry I edited my post last night, but apparently I forgot to hit submit. Please read my last post. The problem has been resolved!

Kind regards,

Rajiv

Hi Rajivrocks,

Got it, thanks. What's the name of that trojan virus? Looks like it damaged your CMD.

1. Go to Start > search regedit.msc > open "Registry Editor" > navigate to HKLM\Software\Microsoft\Command Processor > ensure the "AutoRun" settings is either empty. Do the same to HKLU\Software\Microsoft\Command Processor; ignore if you can't find this folder. Reboot your PC & test.
2. If the above "AutoRun" file will not allow you to set an empty value, then reboot your PC to Safe Mode & delete the "AutoRun" file on both locations above.

I hope this helps. Let me know how you go. Thank you!

Sincerely,

Paul A.

Independent Advisor