OreoPotato Posted June 18, 2023 ID:1573114 Share Posted June 18, 2023 Whenever I restart my computer and do anything "Windows Command Processor" keeps asking for permission. It stems back to my temp batch files but I cant do anything about it. I've seen other people get it solved but its a bit more personal. Any help would be greatly appreciated. Ive tried so much and I think the only solution might just be resetting my pc. Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573115 Share Posted June 18, 2023 (edited) Welcome :)Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. Right click FRST(64) and select Run as administrator. Make sure that under Optional Scans, there is a checkmark on Addition.txt. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also produce another log (Addition.txt ). Please attach this to your reply. Edited June 18, 2023 by JSntgRvr Typo Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573116 Share Posted June 18, 2023 Hi! Thanks for helping me. Here are the text files! FRST.txt Addition.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573117 Share Posted June 18, 2023 Let's begin... :) Download the enclosed file .. Save it in the same loacation FRST64 is saved. Start FRST (FRST64) with Administrator privileges Press the Fix button. FRST will process the lines copied above from the clipboard. When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Please attach this file to your next reply.Download AdwCleaner and save it to your desktop. Double click AdwCleaner.exe to run it. Click Scan Now ... When the scan has finished a Scan Results window will open. Click Cancel (at this point do not attempt to Quarantine anything that is found) Now click the Log Files tab ... Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number, the latest scan will have the largest number) A Notepad file will open containing the results of the scan. Please attach this file to your next reply. Fixlist.txt Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573118 Share Posted June 18, 2023 Alright. I think I did everything correctly. Fixlog.txt AdwCleaner[S00].txt Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573119 Share Posted June 18, 2023 Has the Windows Command Processor popup disappeared? Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573120 Share Posted June 18, 2023 Im not sure. Sometimes it stops but will happen again when i restart. Im going to experiment right now and after a bit I will reply. Thank you! Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573121 Share Posted June 18, 2023 Thank you. Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573122 Share Posted June 18, 2023 Alright, I restarted and it seems the issue was not resolved. I launched an app and the pop up appeared. It hasn't appeared again yet. Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573127 Share Posted June 18, 2023 The files seems to be recreated. Open a command prompt. At the prompt type or copy and paste the following and press Enter: Dir /a C:\Users\josep\AppData\Local\Temp\*.bat > %Userprofile%\Desktop\Tempfiles.txt That should create a file on your desktop, Tempfiles.txt. Please attach it to your reply. Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573128 Share Posted June 18, 2023 Here you go. Tempfiles.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573129 Share Posted June 18, 2023 (edited) Download the enclosed file .. Save it in the same loacation FRST64 is saved. Start FRST (FRST64) with Administrator privileges Press the Fix button. FRST will process the lines in the fixlist. When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Attach that file in your reply. Fixlist.txt Edited June 18, 2023 by JSntgRvr Wrong file Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573130 Share Posted June 18, 2023 When you say enclosed file you mean installing the "Fixlist.txt" file you sent right? Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573131 Share Posted June 18, 2023 I edited the post. Selected the wrong Fixlist. Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573132 Share Posted June 18, 2023 Fixlog.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573133 Share Posted June 18, 2023 Download the enclosed file .. Save it in the same loacation FRST64 is saved. Start FRST (FRST64) with Administrator privileges Press the Fix button. FRST will process the lines in the fixlist. When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Attach that file in your reply. Fixlist.txt Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573134 Share Posted June 18, 2023 Fixlog.txt Link to post Share on other sites More sharing options...
Solution JSntgRvr Posted June 18, 2023 Solution ID:1573135 Share Posted June 18, 2023 You have a program "Medal (HKU\S-1-5-21-3178071651-311389094-3782573735-1003\...\Medal) (Version: 4.2046.0 - Medal B.V.)" that seems that is creating these files. Is it a file you need? Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573136 Share Posted June 18, 2023 I use the program time to time but I dont really need it. should I uninstall "Medal"? Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573137 Share Posted June 18, 2023 By all means. Then test if the issue continues. Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573138 Share Posted June 18, 2023 I uninstalled Medal TV and the issue has not occurred after 2 restarts! I think something must have snuck into the program because its very popular. I will message back if this wasn't it but until then the issue has been resolved. Thank you so much! Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573139 Share Posted June 18, 2023 You are welcome and congratulations. Use this application to remove tools used and their quarantined items:Please download KpRm by Kernel-panik and save to your Desktop. Click on KpRm.exe to run the tool. Vista/Windows 7/8/10 users right-click and select Run As Administrator. Put a check mark next to these items: - Delete tools - Create Restore Point - Delete now Click the "Run" button. When the tool has finished, it will create and open a log report and delete itself. A few final recommendations: Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site. Make sure you're backing up your files Keep all software up to date - PatchMyPC - Keep your Operating System up to date and current at all times - Further tips to help protect your computer data and improve your privacy: Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security Malwarebytes Browser Guard Google Chrome: Microsoft Edge: Mozilla Firefox: uBlock Origin Google Chrome: Microsoft Edge: Mozilla Firefox: Further reading if you like to keep up on the malware threat scene:MalwarebytesBleepingcomputerHopefully, we've been able to assist you with correcting your system issues.Thank you for contacting Malwarebytes.. Regards. :) Link to post Share on other sites More sharing options...
JSntgRvr Posted June 18, 2023 ID:1573215 Share Posted June 18, 2023 (edited) Sorry to bother you, but we have identified an issue on the System's Path. Download a new copy of FRST64. It is important that you use an updated copy of FRST64. Download the enclosed file .. Save it in the same loacation FRST64 is saved. Start FRST (FRST64) with Administrator privileges Press the Fix button. FRST will process the lines in the fixlist. When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Attach that file in your reply. Fixlist.txt Edited June 18, 2023 by JSntgRvr More info about FRST64 Link to post Share on other sites More sharing options...
OreoPotato Posted June 18, 2023 Author ID:1573229 Share Posted June 18, 2023 here Fixlog.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted June 19, 2023 ID:1573258 Share Posted June 19, 2023 Perfect. Thank you. 😀 Link to post Share on other sites More sharing options...
Recommended Posts