?
Solved

command prompt restarts explorer.exe

Posted on 2009-04-07
10
Medium Priority
?
2,919 Views
Last Modified: 2012-05-06
I am unable to open the command prompt using start -> run -> cmd. When i do this, it restarts explorer.exe.  However, when i do start->run->command  the command propt opens up fine.
0
Comment
Question by:bman21
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +2
10 Comments
 
LVL 7

Expert Comment

by:Sappbrosts
ID: 24090532
does it also happen when you  do start > run > regedit ?

you may want to look at this
http://www.bleepingcomputer.com/forums/topic215025.html
0
 
LVL 1

Expert Comment

by:bindnera
ID: 24090576
Your infected; or were infected at some point. The file is corrupted.
 
Run a file check on the O/S.

If you have an XP CD:
Click START, RUN, type in:

sfc /purgecache

(This ensures that system files are copied from your Windows installation media, and files which may be infected with malware or are corrupted are not copied from your drive.)

Then type in:

sfc /scannow

Have your XP CD handy.


If you don't have an XP CD:
Click START, RUN, type in:

sfc /scannow
0
 
LVL 59

Accepted Solution

by:
LeeTutor earned 2000 total points
ID: 24090619
You have a corrupted CMD.EXE file, presumably.  You can put your XP installation CD in the drive, then type this command at the COMMAND.COM prompt:

expand d:\i386\cmd.ex_ c:\windows\system32

(where d: is the drive of your CD-ROM)

This will expand the compressed version of the CMD.EXE file into the system32 directory.  You will probably need to rename the current cmd.exe to something else.  And while you're doing that, take a look and see if you have a file call CMD.COM in the folder.  This invalid version of CMD is put there by malware, and should be deleted.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 7

Expert Comment

by:Sappbrosts
ID: 24090770
those are great answers, but replacing the file, and sfc /scannow wont clean the infection


you may want to look at this
http://www.bleepingcomputer.com/forums/topic215025.html
0
 
LVL 59

Expert Comment

by:LeeTutor
ID: 24090890
I agree that there is most likely an infection and that needs to be done also.
0
 
LVL 2

Author Comment

by:bman21
ID: 24090962
yes, it does restart explorer.exe when i run regedit.  I'm not able to use a cd at the moment, i am working on this computer from a remote location.  as soon as i can get the computer i will give LeeTutor's and bindnera's solution a try.  Thanks for the quick response!
0
 
LVL 2

Author Comment

by:bman21
ID: 24091154
also, on a side note.  i was able to install avg free, but wasn't able to update it's virus database.  I went ahead and ran avg, but all it found were the usual cookies and no infections (more than likely because the database can't be updated...)
0
 
LVL 2

Author Closing Comment

by:bman21
ID: 31567673
i went ahead and reinstalled my OS.
0
 
LVL 1

Expert Comment

by:fcar807
ID: 24613027
sounds like MS anti-virus 2009, malware program

Antivirus2009 (Antivirus 2009) Removal Instructions


Antivirus 2009 Descriptions:


Here we go again! Antivirus2009, also known as Antivirus 2009, is one of the latest counterfeit antispyware that devastates the Internet community. Antivirus 2009 is a clone of the infamous Antivirus 2008 that previously reported by us. Antivirus 2009 usually come up after you installed a video codec that come with Trojan, malware and virus. Antivirus 2009 normally generates fake and misleading system popup error messages so end-users will be tricked into purchase Antivirus 2009.

It is very important to remove all the components of of the Antivirus 2009 and all the malware and trojans that it might have come bundle with (such as zlob.trojan, trojan.vundo and Trojan.Downloader). To effectively remove Antivirus 2009, we have created a manual removal instructions which is easy to understand.



Manual Antivirus 2009 Removal Instructions:

Unregister Antivirus 2009 DLL Files:
(Learn how to do this)
shlwapi.dll
wininet.dll

Stop Antivirus 2009 Processes:
(Learn how to do this)
av2009.exe
Antivirus 2009.lnk
Uninstall Antivirus.lnk
Antivirus2009.exe

Find and Delete these Antivirus 2009:
(Learn how to do this)
av2009.exe
Antivirus2009.exe
shlwapi.dll
wininet.dll
Antivirus 2009.lnk
Uninstall Antivirus 2009.lnk

Remove Antivirus 2009 Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Antivirus = %ProgramFiles%\Antivirus 2009\Antvrs.exe

You can try this article xpantivirus-2009-removal-guide/othersoftware this one remove-antivirus-2009/othersoftware

You can also download Kaspersky antivirus, Kaspersky Anti-Virus Products

You can also download the free version of Avira Antivir to remove the spyware (update) to remove the spyware (update) another option are this one: MaleWareBytes antivirus

0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disclosure: Use this tutorial only when no other options helps to get Windows XP running without any problems and you don't want to format the drive. The back up of the data is the responsible of the user, however there is a description of how t…
Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
Suggested Courses
Course of the Month15 days, 5 hours left to enroll

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question