I bought a new notebook with Windows 10 Home edition installed on it. The notebook also had tons of other software pre-installed: all kinds of drivers, keyboard back-lighting managers and so on.
I've also downloaded the necessary software for development: Java, Adobe programs, FTP clients etc. I didn't install any free-ware software, so I don't think I have some malware that came as a bundle with a freeware app.
Recently I've noticed that time to time the Command line application would open for just a split-second.
This is definitely non-expected behavior as none of my applications are supposed to do that. Using Windows defender didn't show any malware, but I'm afraid it's too limited of a search.
I'd like to know if there's a way to see what cmd executable was launched. Is there a log file somewhere that would tell me what was opened or maybe start tracking the activity. Or, at least, disable cmd's ability to auto-close the window after execution?
My steps so far:
- Checking the activity manager for suspicious tasks/opened applications.
- Using Windows Defender scanning
- Set Windows firewall to highest security setting in hopes to prevent malware to upload info from my PC.