Kaspersky
Question

cmd screen popping up for a couple of seconds before disappearing. It seems to be related to %Appdata%.


I experience an issue since a week or 2.

There is a cmd screen popping up at a frequent rate for a couple of seconds before disappearing.

It seems to be related to %Appdata%.

Could you help me address this annoying matter.

 

Thanks and regards.


13 replies

Userlevel 7
Badge +9

I experience an issue since a week or 2. There is a cmd screen popping up at a frequent rate for a couple of seconds before disappearing. It seems to be related to %Appdata%. Could you help me address this annoying matter? 

Hello @Luu VU

Welcome! 

:a:

  1. Which Kaspersky Total Security (KTS) version & patch(x) is installed → on the Windows Taskbar or hidden icons, rightclick the Kaspersky icon, select About 
  2. Is the  “%Appdata% cmd screen popup” a Kaspersky alert → open KTS, select More tools, select Reports → are there any events in the timeframe that match the alert → save the Report as a text file (*.txt) & attach:paperclip: to your reply? 
  3. Post a full screen, screen print of the  “%Appdata% cmd screen popup” please? 
  4. Check - do all Windows updates have a “Successfully applied” status? 

:b:

  1. Press Win + R → type: cmd  → click "OK" to bring up Command Prompt;
  2. Type: sfc /scannow →  press Enter; allow scannow to complete & do not run any other apps while it’s running. 
  3. Copy & paste the scannow result to a text document & attach:paperclip: to your reply? 
  4. Shutdown PC using Shutdown, not Restart, power on, login, check if   “%Appdata% cmd screen popup” continues? 

Please let us know?

Thank you:pray_tone3:

Flood:whale: +:whale2:

Additional resource: 

Tutorial by @Danila T. Read before you create a new topic!

Userlevel 7
Badge +8

@Luu VU 

Additionally :
Can you please run AdwCleaner as ADMIN and provide the TXT Log in your next Post.
:warning: Please don’t clean eventual detections :warning:

 

Thank you for your feedback.

Attached are the files you requested. However, I cannot catch the popup screen as it was quickly close. It seems to be related to Adobe/ Roaming/ ctbg… (not sure this is the right file name).

Regards.

Userlevel 7
Badge +8

@Luu VU
Please submit file “C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
here https://opentip.kaspersky.com/  and click the “Submit to reanalyze” button.

Did you clean the MalwareBytes [Menaces détectées: 3]  ?

Application has been submitted.

Moreover, the 2 threats have been treated by Malewarebytes.

Regards.

Userlevel 7
Badge +8

@Luu VU OK , please let us know the verdict from Kaspersky Virus Lab. Thank you.

Will revert to you once diagnosis received from KVL.

Regards.

Hi Bernie,

I have identified where the popup screen comes from:

Actually, it’s related to the file (or app?) “btgbchf” 

Unfortunately, I cannot copy and send it to you.

I still waiting for the KVL feedback!

Userlevel 7
Badge +8

@Luu VU Could you try this https://support.kaspersky.com/common/diagnostics/492 ?

Additional element. See attached.

I am waiting for your instruction before addressing these alerts.

Regards.

Userlevel 7
Badge +8

@Luu VU

From your Post above i understood you already cleaned up the MBAM detections ?
Your quote : “Moreover, the 2 threats have been treated by Malewarebytes.”

Only FYI, if you run MBAM in Real-Time  please disable the Ransomeware protection.

 

 

 

Hi Berny,

 

I did de activate the ransomware protection in MBAM but the issue persists.

Moreover, KVL never replies to my request. Do they really receive my request?

Userlevel 7
Badge +8

@Luu VU Please submit a ticket to Kaspersky Technical Support :

https://my.kaspersky.com/techsupport#/requests/new

Reply