Share via

Blank CMD Screen on Startup showing a directory C;\Users\[User Name]\Local\Updates\WindowsService.exe

Anonymous
2023-04-11T08:37:24+00:00

Why I'm getting this empty Command Prompt ( cmd ) showing directory C;\Users\Sony\Local\Updates\WindowsService.exe ? Also, I used to get a Windows script error message like the image below (the image isn't mine ) that I solved via [ https://answers.microsoft.com/en-us/windows/forum/all/windows-script-host-error-in/28057b56-2b88-4d7d-ab5e-c034afa71427?page=1 ] and this says that my pc had a malware but it wasn't successful as it was automatically deleted and even all the google accounts were logged out as google also sensed malware on my PC. Can someone help me out fixing this CMD issue?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
  1. Ramesh Srinivasan 173.9K Reputation points Volunteer Moderator
    2023-04-12T08:35:18+00:00

    The malware has been eliminated. Please run Malwarebytes antimalware and run a full scan.

    Open Windows Security and check the status of your AV and firewall. If they can't be turned On, do an in-place upgrade to repair the Microsoft Defender AV and Firewall services, which may have been tampered with by the Run.vbs virus.

    How to perform an In-place Upgrade with Windows 10 Step-by-Step Guide - Microsoft Community: https://answers.microsoft.com/en-us/windows/forum/all/how-to-perform-an-in-place-upgrade-with-windows-10/7f0b236e-3c6c-4913-9691-c4baa2a6190a

    1 person found this answer helpful.
    0 comments
Answer accepted by question author
  1. Ramesh Srinivasan 173.9K Reputation points Volunteer Moderator
    2023-04-11T08:42:37+00:00

    From admin Command Prompt, run these four commands:

    del "%LocalAppData%\Updates\Run.vbs"

    schtasks /delete /tn "\Window Update" /f

    schtasks /delete /tn "\Windows Service Task" /f

    rd /s /q "%LocalAppData%\Updates"

    Pls post a screenshot of the output window.

    Note: Microsoft Defender needs to be fixed after doing the above. The Run.vbs virus would have deleted Defender in most cases.

    1 person found this answer helpful.
    0 comments

5 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ramesh Srinivasan 173.9K Reputation points Volunteer Moderator
    2023-04-12T09:15:02+00:00

    Great. Thanks for the confirmation. The MB scan results show there were multiple infections, and glad they're eliminated. If you wish to have a more thorough evaluation, do the following:

    Download Farbar Recovery Scan Tool (FRST64.exe) from the following link:

    https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    • Run FRST64.exe and click "Scan".
    • Upload the two logs, namely, FRST.txt and Addition.txt, to your OneDrive and share the link here.

    Or, manually reset your Defender Exclusions. And enable UAC. The malware would have modified both settings.

    0 comments
  2. Anonymous
    2023-04-12T09:40:38+00:00

    Lots of thanks for helping.

    0 comments