FWIW you can check it with

reg query "HKCU\Software\Microsoft\Command Processor"

But that "feature" has got to be one of the dumbest malware/jokes msdn played