1

Topic: Appears cmd and disappears

Hello;
On one PC under Windows 10 periodically jumps out and the window of type CMD, 1-2 in day disappears, it is literally for a second pojavilos-chtotosdelalo-was disappeared. At this office of counterfeit programs like it is not used, antiviruses work (WindowsDefender, Avast, Avira, Kaspersky), in the list of operating applications of anything explicit it is not visible. How to find what program both what for and whence creates this window?

2

Re: Appears cmd and disappears

TalkingTolkin
Procmon.exe from sysinternals
Adding from 12/17/2016 15:38:
In sense - to look with the help procmon

3

Re: Appears cmd and disappears

So it does not hang permanently!
Something whence vkljuchaetsja once-pojavljaetsja-is disappeared!
On broad gulls to see nothing!
Can eat any separate "a command line broad gull-monitor" or it is possible to adjust somehow interception of start CMD in system with ?

4

Re: Appears cmd and disappears

TalkingTolkin
To begin with glance in sheduler aka the scheduler of jobs. There there is a list of the last jobs with start time - can it is not necessary to be engaged in adjustment of means of monitoring.

5

Re: Appears cmd and disappears

abc.
In "the Scheduler of jobs" anything precisely approaching on sense and time - it is not found.
Dzhamal
In "Events Windows - Safety" very much everyone, is literally for 30 about the moment of appearance-ischezanija of a window of the order of 25 objects!! sad
Name of new process: C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
Name of new process: C:\Windows\System32\backgroundTaskHost.exe
Name of new process: C:\Windows\System32\taskhostw.exe
Name of new process: C:\Windows\System32\SettingSyncHost.exe
Name of new process: C:\Windows\System32\UsoClient.exe (only this program from all at start "blinks window CMD")
Name of new process: C:\Windows\System32\conhost.exe
Name of new process: C:\Windows\System32\InstallAgent.exe
Name of new process: C:\Windows\System32\wuapihost.exe
Name of new process: C:\Windows\System32\InstallAgentUserBroker.exe
Name of new process: C:\Windows\System32\SearchProtocolHost.exe
Name of new process: C:\Windows\System32\SearchFilterHost.exe
Name of new process: C:\Windows\System32\wermgr.exe (many times)
Name of new process: C:\Windows\System32\dllhost.exe (many times)
What it is necessary to all of them - it is possible to learn somehow?!
Similar on here it, :
http://www.white-windows.ru/vsplyvayush … hto-delat/

6

Re: Appears cmd and disappears

TalkingTolkin
If it really cmd.exe it is possible to use registry key [pre] HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun [/pre] a Command registered there, it will be fulfilled at start cmd, to all remaining. For example it is possible to register there a command pause and to clarify, who it launches.
If it is simple any console program this council, certainly, does not help. Then, I think, it is necessary to study output Autoruns attentively.

7

Re: Appears cmd and disappears

TalkingTolkin
In "the Scheduler of jobs" anything precisely approaching on sense and time - it is not found.
And it here it:
The Name of new process: C:\Windows\System32\taskhostw.exe
Also that is characteristic, after it appears
The Name of new process: C:\Windows\System32\conhost.exe
Accompanying discovery of a console window.
Time of events is not present, so events can be not connected, but their sequence guards.
Time of flashing of a window same? Then most likely any job. Otherwise try to mark, what actions precede.
Time decided to dig more deeply, download procmon with Sysinternals, and look a broad gull of events of processes.