CMD error message after deleting virus [sound mixer virus]

[aliauska500]

I've delted the soungmixer virus from my computer which means that now whenever i launch cmd i get a message that the file has been deleted because the virus made it so whenever i ran cmd it would work as a shortcut to launching the virus.

How can i restore CMD?


edit 1: tried loading in all safe modes, cmd still didn't start.

edit 2: so turns out i had a virus called "sound mixer utility". Installed a better anitivirus, delted the thing. CMD still doesn't work because every time i would open CMD it would serve as a sort of shortcut to run the virus (It mines the cryptocurrency ripple on pc's and is effective since ripple is one of the few cryptos that can only be mined with cpu power, which is much cheaper to obtain). As suggested by a member here, im running a scannow function on the powershell to see if it can restore my CMD file.

edit 3: scannow hasnt helped

 

[pnork]

I did a search on this site, and found quite a few posts about this very problem - try this: http://www.tomshardware.com/forum/id-3168445/command-prompt-open-stay-open.html (for which, obviously, I can't take credit.)

 

[aliauska500]

I did a search on this site, and found quite a few posts about this very problem - try this: http://www.tomshardware.com/forum/id-3168445/command-prompt-open-stay-open.html (for which, obviously, I can't take credit.)

Scannow hasnt helped...

 

[pnork]

Did a quick search and found this regarding SFC (which is the program you run with the /scannow switch.) before running it, I'd be tempted to try Malwarebytes and then following the advice in the link: https://support.microsoft.com/en-au/help/929833/use-the-system-file-checker-tool-to-repair-missing-or-corrupted-system

Good luck!

Edit: I mention Malwarebyes, as it's possible the malware you had/have on your system was not completely removed.

 

[derekullo]

You can't mine Ripple.

Most likely it was mining Monero.

MalwareBytes would be a good program to run to hopefully fix the issue.

If that fails I would do an sfc /scannow

https://technet.microsoft.com/en-us/library/bb491008.aspx

Run them in that order due to the virus may be recorrupting cmd if it isn't removed by MalewareBytes first.

Worst case you could backup what you want to keep reformat and add it back.