C:\WINDOWS\system32\cmd.exe pop up randomly

Question

Hi ! I've got this issue for 3 days now, the command prompt randomly pop up and redirects me to what i assume is a phishing page, it's either pop-broker.com or highcpmgate that pops up in my default navigator, i tried many solutions to remove it and i really don't know what to do atm to get rid of it. pls help me

Answer 1

I found a task named "GoogleUpdateDaily" in Task Scheduler that open cmd and go to "www.pop-broker.com" evrey 6 hours.
will disabling the task fix the problem permanently?

Answer 2

go find your task scheduler 

search "GoogleUpdateDaily" in task scheduler library,

disable these **** nuts...
(about these steps above. I suppose you know how to use a pc .)

then

everything done..

problem solved

Answer 3

This works extremely well. I used your Task Schedule template 3 days ago, and I've had no Pop-Broker pop-ups. Thank you!

Answer 4

Hi, good day! I'm Jerico T., I understand that you're having some issues right now, I'll do my best to help you with your concern.

Does the issue happen randomly while browsing the internet or does it happen when the system starts?

Kindly follow the steps below.

Kindly boot your computer into Safemode. Safemode is a windows environment where non-Microsoft services are disabled, and only selected Microsoft services are running to start windows properly.

Click on the link below and follow the steps

https://support.microsoft.com/en-us/windows/sta...

Once booted into safemode, kindly run an anti-malware scan using your anti-malware software or the windows defender to remove any threats on the machine.

You may also run a system file checker on your windows computer to check for any corrupted system files and the scan will attempt to fix the issue.

Perform SFC Scan and Repair Windows Image

-This process will perform scan for any corrupted system files or integrity violation and will attempt to repair it along with the Windows Image.

1. Open command prompt (Run as administrator)
2. Type each command below and press enter, wait until scan is completed.

sfc /scannow

DISM /Online /Cleanup-Image /CheckHealth

DISM /Online /Cleanup-Image /ScanHealth

DISM /Online /Cleanup-Image /RestoreHealth

Quick note: Please be patient, it's expected to see the process stuck at 20 or 40 percent. After a few minutes, the process will complete successfully.

3. Close the command prompt.

While scans are running, kindly perform clean boot on your computer to disable any non-Microsoft services running in the background of your computer.

Perform Clean Boot

• This process will eliminate 3rd party application running in the background of your computer along with services that are not needed to run windows. If there's any conflicting 3rd party application that causes the issue on your computer, this process will stop it.

1. Open the run box by pressing the Windows Key + R and type msconfig
2. System Configuration Utility box will open and by default you are on general tab.
3. On the General tab, click the selective startup and make sure that load system service and load startup items both have checked mark.
4. Click on services tab
5. Put a check mark on Hide All Microsoft Services > This is a very important part as if you miss to click on this, computer might not boot properly or permanently and will end up on clean installation.
6. Once Hide all Microsoft Services have checked mark on it, click on Disable All
7. Click on the Startup Tab and click open task manager. This will open another window which contains all your startup applications on the administrator account.
8. Disable all application that you're not using. You can simply just click on them and select disable.
9. Click OK , Apply and close the configuration utility.

Once scans are done, restart the computer normally and check if the same issue appears

Feel free to reach back if you need any further assistance.

Hope this help. Have a good day.

Thank you,

Jerico T.

Answer 5

Please scan with Farbar Recovery Scan Tool (FRST) and share your logs.

https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

• If your computer language is not English, rename FRST64.exe to FRST64English.exe
• Run FRST and press "Scan"
• Two logs are created in the folder that FRST is run from, FRST.txt and Addition.txt
• Upload the logs to OneDrive, Google Drive or any file sharing service and post the share link

Note: If you are downloading FRST with Edge, smartscreen may initially block it.

Click on the 3 dots next to the warning and select Keep-> Show more-> Keep anyway.

Share OneDrive files and folders - Microsoft Support