Cmd flashes a couple times a day

JAM83 · Jul 28, 2024

So a few times a day, I notice that "cmd" will flash. I have scanned for viruses and there's really nothing there. I don't know what it could be that is trying to install, or update, etc. Anyone have an idea of what I can look at to see what it is?

FreeBooter · Jul 28, 2024

Use AutoRuns to see if there is cmd.exe process starting at boot time or schedule to run.

Autoruns - Sysinternals

See what programs are configured to startup automatically when your system boots and you login.

learn.microsoft.com

glasskuter · Jul 28, 2024

Check for Malware using Malwarebytes Free. Free Antivirus 2024 | Download Free Antivirus & Virus Scan | 100% Free & Easy Install
Do a full scan. Quarantine (or remove) anything that Malwarebytes detects. Restart the computer.
Note: If you plan on removing Malwarebytes, anything it quarantines will be back on your computer. It's best to use MWB settings to delete anything it has in quarantine before removing the MWB app. It's my practice to remove anything MWB finds rather than keeping it in quarantine.

If MWB doesn't find anything, try to develop some timeline and pattern of when you see the popup. Is it at a certain time of day or interval or when you open a certain app. If you have time to read the command it would be helpful. If the popup follows a certain pattern it can make finding its cause easier.

Check Task Scheduler to see what time and interval a task is scheduled to run and compare that to when you see the popups.. Check your startup apps (task manager>startup apps and disable any 3rd party apps you do not want running in the background at startup)
If Autoruns (as was suggested)or task scheduler doesn't get to the bottom of it, the only other thing I have to suggest is using clean boot which uses the process of elimination . This can be slow and arduous since the issue is happening so infrequently.

Perform a Clean Boot in Windows 11 to Troubleshoot Software Conflicts

This tutorial will show you how to perform a clean boot to start Windows 10 or Windows 11 using a minimal set of drivers and startup programs for troubleshooting application conflicts. Troubleshooting Windows can be a complex process due to the many different drivers, settings, and programs...

www.elevenforum.com

JAM83 · Jul 28, 2024

glasskuter said:
Check for Malware using Malwarebytes Free. Free Antivirus 2024 | Download Free Antivirus & Virus Scan | 100% Free & Easy Install
Do a full scan. Quarantine (or remove) anything that Malwarebytes detects. Restart the computer.
Note: If you plan on removing Malwarebytes, anything it quarantines will be back on your computer. It's best to use MWB settings to delete anything it has in quarantine before removing the MWB app. It's my practice to remove anything MWB finds rather than keeping it in quarantine.

If MWB doesn't find anything, try to develop some timeline and pattern of when you see the popup. Is it at a certain time of day or interval or when you open a certain app. If you have time to read the command it would be helpful. If the popup follows a certain pattern it can make finding its cause easier.

Check Task Scheduler to see what time and interval a task is scheduled to run and compare that to when you see the popups.. Check your startup apps (task manager>startup apps and disable any 3rd party apps you do not want running in the background at startup)
If Autoruns (as was suggested)or task scheduler doesn't get to the bottom of it, the only other thing I have to suggest is using clean boot which uses the process of elimination . This can be slow and arduous since the issue is happening so infrequently.

Perform a Clean Boot in Windows 11 to Troubleshoot Software Conflicts

This tutorial will show you how to perform a clean boot to start Windows 10 or Windows 11 using a minimal set of drivers and startup programs for troubleshooting application conflicts. Troubleshooting Windows can be a complex process due to the many different drivers, settings, and programs...

www.elevenforum.com

I checked with MWB. . Nothing unusual. I also disabled some things in the task scheduler. So we will see

Steve C · Jul 29, 2024

OneDrive does this when it updates

LesFerch · Jul 29, 2024

It may be a Microsoft check/update. I see this once in a while, especially after I just build a new VM and login for the first time. As @Steve C mentioned, it could be a OneDrive update. Also see this discussion.

neemobeer · Jul 29, 2024

There are a lot of legitimate and non-legitimate reasons for a cmd process spawning. You can identify what is calling it with procmon. Download procmon from Microsoft's site and run it. Add a filter for 'Process Name' = 'cmd.exe' and just let it run. Once you capture some events, double click one of the events and look at the parent PID. Now open task manager and match up the PID. That should tell you where it's originating from. This may not work if the calling process is itself a child process of another process.

LesFerch · Jul 29, 2024

The console flashes could be PowerShell scripts. It's hard to tell when they come and go so quick.

neemobeer · Jul 29, 2024

You can add multiple process name filters
'cmd.exe'
'pwsh.exe'
'powershell.exe'

cereberus · Jul 29, 2024

Look in Task Scheduler as @glasskuter suggests - it is probably some app just checking for an update. In my experience many can be tracked down here.

pseymour · Jul 29, 2024

There’s a handy process start and stop filter for ProcMon on my post here:

Unknown event occurs at exactly 10 minute intervals

An unknown event occurs at exactly the 10 minute interval (i.e 7:00, 7:10, 7:20 etc). It is expressed as a black pop-up in the left corner of my primary screen - about the size of a CMD window. It occurs for only a brief portion of a second, way too quick to even tell if there is anything in the...

www.elevenforum.com

JAM83 · Jul 29, 2024

Thanks guys.. I'll give ProcMon a shot. . . So far, I haven't had any flashes today. I know it's not OneDrive. I don't have it on my PC.

cereberus · Jul 29, 2024

JAM83 said:
Thanks guys.. I'll give ProcMon a shot. . . So far, I haven't had any flashes today. I know it's not OneDrive. I don't have it on my PC.

And even if you did, I have never known it to flash up cmd screens lol.

JAM83 · Jul 30, 2024

cereberus said:
And even if you did, I have never known it to flash up cmd screens lol.

Whatever it was, i think it's gone now. I disabled and deleted a few things in the Task Scheduler. Would it be safe to delete and disable everything in the Task Scheduler? lol

pseymour · Jul 30, 2024

JAM83 said:
Would it be safe to delete and disable everything in the Task Scheduler? lol

If you like re-installing Windows, yes.

flhthemi · Aug 1, 2024

I'm sure it's PowerShell. It happens to me on EVERY W11 install I have. It's a window with a blue backdrop and it's so fast I can't click in it to see what it is. I've done most of the stuff, not all of it, mentioned above but to no resolve. The thing that annoys me most is it takes focus off whatever you're doing at that moment. i.e. If you were typing in Word it would stop you from finishing the current word you're typing until you click back in Word to regain focus.

Cmd flashes a couple times a day

iRacing Broadcaster for MaxspeedTV

My Computers

Well-known member

My Computer

aka Mama Glass

My Computers

iRacing Broadcaster for MaxspeedTV

My Computers

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Windows developer and admіn

My Computers

iRacing Broadcaster for MaxspeedTV

My Computers

Well-known member

My Computer

iRacing Broadcaster for MaxspeedTV

My Computers

Windows developer and admіn

My Computers

Well-known member

My Computer

Similar threads