Windows 10: Blank screen trying to run Command Prompt as Admin or Install Virus So

Hello, i'm getting a Blank, Black screen when i try to run the Command prompt as an Admin, install McAfee Virus software and when trying to update to the latest Java update version. I'm not 100% sure, but this problem seems to have started after de-installing the MalwareBytes software, but not sure.

My account settings also show that i am the Administrator on this machine.

Thanks for any insights or pointers!
bk

:)

 

Unable to Run CMD as Admin or Command Prompt Admin- Command Prompts are Missing from the Start Menu

Right click your Taskbar, choose 'Taskbar Settings'

Scroll down the list of Settings and turn off this option to get Command Prompt back on the Right Click Menu of your Start Button

 

Unable to Run CMD as Admin or Command Prompt Admin- Command Prompts are Missing from the Start Menu

Powershell will accept all the commands that Command Prompt will and a lot more besides . . .

 

bobk544,

Welcome to Ten Forums!

Please bring me up to date. Why do you need to run the Command prompt to install McAfee AntiVirus software?
To my knowledge, it is normally installed from a CD/DVD, or, by downloading its software.

 

Hello, yes i tried to install McAfee using the regular "...exe" file several times and got the blank screen when doing so, so i then thought that maybe it was because i wasn't running as Admin, so i tried running the Command Line as Admin just to see if i could and when i ran as Admin, i also got the blank screen and so then i tried to run the Java update just to check along those lines and i get the blank screen when running the Java updates as well and fyi, i definitely have some kind of virus on my machine as that's why i purchased McAfee and even as i'm typing this response, i'm getting a fading screen, thanks for your interest in this!

 

Where you able to install and run Malwarebytes Anti-malware?

 

bobk544,

Need to know info above, please.

Also, please do the following:

Download RKill to your Desktop. (Courtesy of BleepingComputer.com)
There are 2 different versions. If one of does not run, download and try to run the other one.
You only need to get one of these to run, not both!

RKill.exe:
Downloading RKill

iExplore.exe (This is a re-named RKill.exe):
Downloading RKill

Right-click on the RKill Desktop icon, and select: Run As Administrator

When you run the program, a black DOS box appears on the screen.
This is normal, and indicates the tool is running successfully. Let it run. You will see at the bottom of the black prompt when it is done.

If not, delete the file, then download and use iExplore.exe

Do not reboot until instructed.

If the tool does not run in normal Windows mode, run the tool from Safe Mode.

When the scan is done, a Notepad report opens on the Desktop with the RKill log.

*Arrow Please post the RKill log info in your reply.

 

Hello, yes i was able to install the MalwareBytes software successfully about 1 week ago and when the trial ended, i uninstalled the software and after doing so, this problem arose, so it may be related, thanks again and will do on your second post!

 

Somehow, IMO, the problem may not be a virus. However, we will make sure.

Did Malwarebytes leave a report on the Desktop?
If so, please post it.

 

Screen fading, posting quickly, thanks, had to reboot to get to IE, will check on MW report

Rkill 2.8.4 by Lawrence Abrams (Grinler)Page not found 2008-2016 BleepingComputer.comMore Information about Rkill can be found at this link: RKill - What it does and What it Doesn't - A brief introduction to the program - Anti-Virus, Anti-Malware, and Privacy Software started at: 12/26/2016 11:12:34 PM in x64 mode. (Safe Mode)Windows Version: Windows 10 Home Checking for Windows services to stop: * No malware services found to stop.Checking for processes to terminate: * No malware processes found to kill.Checking Registry for malware related settings: * No issues found in the Registry.Resetting .EXE, .COM, & .BAT associations in the Windows Registry.Performing miscellaneous checks: * ALERT: ZEROACCESS Reparse Point/Junction found! * C:\Program Files\Windows Defender\ConfigSecurityPolicy.exe => <Unknown Target> [File] * Reparse Point/Junctions Found (These may be legitimate)! * C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\MXDWDRV.D LL => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\PCL4RES.D LL => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\PCL5ERES. DLL => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\PCL5URES. DLL => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\PCLXL.DLL => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\PJLMON.DL L => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\PS5UI.DLL => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\PSCRIPT5. DLL => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\UNIDRV.DL L => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\UNIDRVUI. DLL => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_ntprint.inf_31bf3856ad364e35_10.0.14393.0_none_0c566cf919081469\I386\UNIRES.DL L => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_policy.1.0.microsof..op.security.azroles_31bf3856ad364e35_10.0.14393.0_none_6e da7f57c51a08aa\Policy.1.0.Microsoft.Interop.Security.AzRoles.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_policy.1.2.microsof..op.security.azroles_31bf3856ad364e35_10.0.14393.0_none_be 0fd33f89b5fc8c\Policy.1.2.Microsoft.Interop.Security.AzRoles.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_prnms003.inf_31bf3856ad364e35_10.0.14393.0_none_24254896323538cd\I386\PrintCon fig.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_regasm_b03f5f7f11d50a3a_10.0.14393.0_none_ce15258cb5b44b28\RegAsm.exe => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_regasm_b03f5f7f11d50a3a_4.0.14305.0_none_c7140e4409c3742a\RegAsm.exe => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_regsvcs_b03f5f7f11d50a3a_10.0.14393.0_none_a1305033082743d8\RegSvcs.exe => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_regsvcs_b03f5f7f11d50a3a_4.0.14305.0_none_9a2f38ea5c366cda\RegSvcs.exe => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_startupapp-task-data_31bf3856ad364e35_10.0.14393.0_none_15dd750273cdf6b1\Startupscan.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.data.oracleclient_b77a5c561934e089_10.0.14393.0_none_aa36dccd7d57a1ef\S ystem.Data.OracleClient.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.data.oracleclient_b77a5c561934e089_4.0.14305.0_none_a335c584d166caf1\Sy stem.Data.OracleClient.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.enterpriseservices_b03f5f7f11d50a3a_10.0.14393.0_none_8ca7a00d4e46fc57\ System.EnterpriseServices.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.enterpriseservices_b03f5f7f11d50a3a_10.0.14393.0_none_8ca7a00d4e46fc57\ System.EnterpriseServices.Wrapper.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.enterpriseservices_b03f5f7f11d50a3a_4.0.14305.0_none_85a688c4a2562559\S ystem.EnterpriseServices.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.enterpriseservices_b03f5f7f11d50a3a_4.0.14305.0_none_85a688c4a2562559\S ystem.EnterpriseServices.Wrapper.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.printing_31bf3856ad364e35_10.0.14393.0_none_449632b4d47180d8\System.Pri nting.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.printing_31bf3856ad364e35_4.0.14305.0_none_7a4dced68804f53b\System.Prin ting.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.transactions_b77a5c561934e089_10.0.14393.0_none_ca8bb4b608bd7385\System .Transactions.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.transactions_b77a5c561934e089_4.0.14305.0_none_c38a9d6d5ccc9c87\System. Transactions.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.web_b03f5f7f11d50a3a_10.0.14393.0_none_ae28acfcb6b33626\System.Web.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_system.web_b03f5f7f11d50a3a_4.0.14305.0_none_a72795b40ac25f28\System.Web.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationbuildtasks_31bf3856ad364e35_10.0.14393.0_none_21630ed5abd0bb72\PresentationBuildTasks.dl l => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_10.0.14393.0_none_9aeb2f12eca7a467\PresentationCFFR asterizerNative_v0300.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationframework.aero_31bf3856ad364e35_10.0.14393.0_none_03d98f8e66e6810d\PresentationFramework .Aero.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationframework.classic_31bf3856ad364e35_10.0.14393.0_none_c5bf1531881adeea\PresentationFramew ork.Classic.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationframework.luna_31bf3856ad364e35_10.0.14393.0_none_02b4686c67909890\PresentationFramework .Luna.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationframework.royale_31bf3856ad364e35_10.0.14393.0_none_bc0b00f10897b220\PresentationFramewo rk.Royale.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationhostdll_31bf3856ad364e35_10.0.14393.0_none_41613d307e546ef8\PresentationHostDLL.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationhostexe_31bf3856ad364e35_10.0.14393.0_none_414a03487e73116a\PresentationHost.exe => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationhostproxy_31bf3856ad364e35_10.0.14393.0_none_fbe0e6a3d824509c\PresentationHostProxy.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-presentationnative_31bf3856ad364e35_10.0.14393.0_none_281bdbd1a4d57c19\PresentationNative_v0300.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-reachframework_31bf3856ad364e35_10.0.14393.0_none_d17ffb27870eb395\ReachFramework.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-system.speech_31bf3856ad364e35_10.0.14393.0_none_5312c0327ae30337\System.Speech.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-terminalserverwpfwrapperexe_31bf3856ad364e35_10.0.14393.0_none_f5b50f8229f4b6ff\TsWpfWrp.exe => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_10.0.14393.0_none_2611e05cacbb8fa9\UIAutomationClie ntsideProviders.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-uiautomationclient_31bf3856ad364e35_10.0.14393.0_none_abcec8279f9da23a\UIAutomationClient.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-uiautomationprovider_31bf3856ad364e35_10.0.14393.0_none_d5f2a14ce9471648\UIAutomationProvider.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-uiautomationtypes_31bf3856ad364e35_10.0.14393.0_none_2e67f164f945bfa2\UIAutomationTypes.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-windowsformsintegration_31bf3856ad364e35_10.0.14393.0_none_cb71df5ada2544bc\WindowsFormsIntegration. dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wpf-xamlviewer_31bf3856ad364e35_10.0.14393.0_none_27641c78db4215c0\XamlViewer_v0300.exe => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wwf-system.workflow.activities_31bf3856ad364e35_10.0.14393.0_none_03bbc2d9d653e08a\System.Workflow.Activ ities.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_10.0.14393.0_none_5d39e9706c6adbfb\System.Workflow.C omponentModel.dll => <Unknown Target> [File] * C:\WINDOWS\WinSxS\x86_wwf-system.workflow.runtime_31bf3856ad364e35_10.0.14393.0_none_3670ad90fe5c2d0f\System.Workflow.Runtime. dll => <Unknown Target> [File]Checking Windows Service Integrity: * Ancillary Function Driver for Winsock (AFD) is not Running. Startup Type set to: System * Base Filtering Engine (BFE) is not Running. Startup Type set to: Automatic * DHCP Client (Dhcp) is not Running. Startup Type set to: Automatic * Dnscache (Dnscache) is not Running. Startup Type set to: Automatic * COM+ Event System (EventSystem) is not Running. Startup Type set to: Automatic * Windows Firewall Authorization Driver (mpsdrv) is not Running. Startup Type set to: Manual * Windows Firewall (MpsSvc) is not Running. Startup Type set to: Automatic * NetBT (NetBT) is not Running. Startup Type set to: System * Network Store Interface Service (nsi) is not Running. Startup Type set to: Automatic * NSI Proxy Service Driver (nsiproxy) is not Running. Startup Type set to: System * NetIO Legacy TDI Support Driver (tdx) is not Running. Startup Type set to: System * NetIO Legacy TDI Support Driver (WinDefend) is not Running. Startup Type set to: System * Security Center (wscsvc) is not Running. Startup Type set to: Automatic (Delayed Start) * gagp30kx [Missing Service] * IEEtwCollectorService [Missing Service] * IoQos [Missing Service] * nv_agp [Missing Service] * TimeBroker [Missing Service] * tunnel [Missing Service] * uagp35 [Missing Service] * uliagpkx [Missing Service] * WcsPlugInService [Missing Service] * wpcfltr [Missing Service] * WSService [Missing Service] * agp440 [Missing ImagePath] * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath] * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath] * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL] * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]Searching for Missing Digital Signatures: * No issues found.Checking HOSTS File: * HOSTS file entries found: 0.0.0.1 mssplus.mcafee.comProgram finished at: 12/26/2016 11:16:15 PMExecution time: 0 hours(s), 3 minute(s), and 40 seconds(s)

 

Hello again, don't see a MW report, but i forgot to add, i shortened the file and also had to run in SafeMode, ok fading again, so will keep looking for MW report, thanks again!

 

Ok going to call it a night, thanks for you help, planning on dropping the computer off at a repair place this week, have a good one!

 

bobk544,

It seems that at some point you dealt with the removal of a RootKit: ZeroAccess
Perhaps Malwarebytes identified it, and was trying to deal with it.

For now, see if you can do the following from normal Windows 10. If you can't, post back, and we will use an option outside of Windows.

Please use the Farbar Recovery Scan Tool Download
Save FRST to your Desktop.

[Note: You need to run the version compatible with your system: 32 bit or 64 bit]
Double-click FRST to run it.
When the tool opens click Yes to the disclaimer.
Next, press the Scan button.

When done, the tool makes a log (FRST.txt) on the Desktop.
Please provide it in your reply.

The first time the tool is run, it makes another log: (Addition.txt).
Also provide it in your reply.

 

Hi there cornball, I didn't see there were more post pages, but I was getting back to you because I was able to finally access the command line and install McAfee and what I realized was that all of my browser problems were with my Samsung monitor but not my Asus monitor, so I figured that the Samsumg driver must be infected, so I just changed my PC to only use the Asus monitor and I was then able to bring up the command line tool and then install McAfee, oh and before I did that, I did a complete Windows 10 restore thinking that would restore the command line, or the ability to execute ".exe" type files. So now that I've installed McAfee, i'm going to see if it was able to remove the Samsung driver virus, or whatever was only affecting my Samsung monitor. Sorry for not seeing your latest post, but thanks very much for trying to help and I will let you know how it goes in a bit, thanks again for your time and consideration!

 

Ok cb, i ran McAfee and it didn't find any viruses, but i still have a virus or something associated with my Samsung monitor, but not my Asus monitor, so i went to Display Settings and turned off the link to the Samsung and things seem to be ok now just using the Asus monitor. So i guess what i'm going to do now is re-download the Samsung monitor driver and see if that makes a difference, thanks again cb!