UAC not Showing Up

[Exsujez]

So my UAC doesn't show up on my non-admin account when it should show up. Like when I run CMD as administrator, no UAC shows up. CMD just immediately opens up but it doesn't have admin privileges.

But a few hours ago I received a notification from Security and Maintenance saying something like: Reset your computer to disable UAC.
Don't know if they are related.

And sorry if this is the wrong place to get help, I'm new.

[manikyath]

is this by any chance a domain joined / AAD joined machine? there's an option in AAD to do exactly what you described.

[Exsujez]

4 minutes ago, manikyath said:

is this by any chance a domain joined / AAD joined machine? there's an option in AAD to do exactly what you described.

Nope, it's my laptop.

[Cafuddled]

Sounds like UAC is disabled, have you checked in the control panel users section to see if this is the case, login with the admin account.

[Exsujez]

I reenabled it, but now every time I log into my account UAC automatically pops out and the app is CMD and when I press no, it immediately just pops up again until I type my password. Then 10 minutes later I receive a notification asking to restart my computer to disable UAC. I scanned with Windows Security and it flagged nothing. I did download a sus file a few days ago but deleted it already. Any ideas?

[Cafuddled]

That sounds super sus!! A lot of exploits can use cmd, and the fact that it's frequently popping up and then asking you to disable UAC... one of the most suspicious activities I could think of... I may be coming off as alarmist here... but I've seen some nasty things in my career, but this is more obvious than most.

 

Normally I would say start with a system restore.... but unless you have anything important to lose, wipe everything... in my opinion... for what that's worth...

[av1ty]

You can try installing Hijack Hunter, this is an anti-malware software with which you can check what applications and other stuff is set to be started every time you log in to your system. Or you can see it manually using Task Scheduler, google how to use those they will probably help you. If not, try creating and logging in to another Windows local user.

[Exsujez]

I ran a scan with Hijack Hunter but have no idea what is it saying.dwasdwa.txt