It seems that in Europe this old topic: https://www.techspot.com/community/...cmd-exe-box-pops-up-on-start-up.194349/page-2 is valid/up to date again. My wifi rooter was in block. Solving this I got today (04-06-2015) message box in Win7 do I allow to make changes: "C:\Windows\SysWOW64\cmd.exe" /c ........ C:\ProgramData\msmtzryge.exe Unfortunately printscreen won't work for this message box, but I got it 3...4 times with same question. I answered no. And also got "www.istartsurf.com/...." or "SensePlus" advertise/browser hijack worm/virus. Be carefull - Windows Defender...or what ever this is called don't recognise this SensePlus thing and tells that everithing is clean. Also added screenshot of hijacked english google.com (suddenly russian). And some log file.