How can I remove malware that briefly opens Command Prompt and blacks out my screen?
Asked by
MellowCedar42
About a minute after I start my Windows PC, a Command Prompt window flashes on-screen for less than a second, and then the display goes black. I suspect malware, but I don't see anything unusual in the Startup Apps list. Windows Defender's quick scan is also taking a long time. What steps should I follow to diagnose and remove it?
Answers
Check Task Scheduler as well as Startup Apps. Search for Task Scheduler, review tasks that run at logon or system startup, and look for entries launching cmd.exe, PowerShell, scripts, or files from suspicious folders such as temporary user directories. Donโt delete system tasks blindlyโcheck the action, file path, publisher, and creation date first.
Reply to this answer
Start Windows in Safe Mode, where most third-party programs and malware wonโt load. From there, run a full scan with Microsoft Defender, not just a quick scan. You can also run an offline scan from Windows Security so the scan happens before normal Windows processes start. Disconnect from the internet first if youโre worried about the infection communicating or downloading anything.
Reply to this answer
If the screen still goes black in Safe Mode or scans canโt complete, use a clean Windows installation USB to access recovery tools and scan the drive offline. Back up only essential personal documents, then consider reinstalling Windows from trusted installation media if the infection canโt be removed. A full clean reinstall is safer than a factory reset that might preserve compromised files, and you should change important passwords from a different, clean device afterward.
StoneWillow29: If you use a USB installer, make sure it was created on a clean computer and double-check that youโre selecting the correct drive before deleting partitions.
Reply to this answer
Add your answer
Answers are reviewed before publication.
MellowCedar42: Once Iโm in Safe Mode, should I check Task Scheduler before running the scan, or just scan first?