Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cmd window pops up intermittantly


  • Please log in to reply
5 replies to this topic

#1 dswluthier

dswluthier

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 03 February 2016 - 01:13 PM

Roughly every hour I get a Cmd window popup that lasts a couple tenths of a second. Some text appears line after line in the window and, as I said, it vanishes. I checked the event log right after the last one and found a appropriately time stamped event in the Security log. Here is the data from the log.

 

A security-enabled local group membership was enumerated.
 
Subject:
Security ID: SYSTEM
Account Name: DESKTOP-SLH3OU9$
Account Domain: WORKGROUP
Logon ID: 0x3E7
 
Group:
Security ID: BUILTIN\Administrators
Group Name: Administrators
Group Domain: Builtin
 
Process Information:
Process ID: 0x21c
Process Name: C:\Windows\System32\svchost.exe
 
It seems to me that this is an innocuous event, but the Cmd window can disrupt activity, like typing or other work, occurring in another window. This has been going on for about three weeks and I installed Windows 10 three months ago.
 
Question: Is there anyway to stop this event popping up the Cmd window or is there some other solution?
 
I'm running a home built PC with Gigabyte GA-Z87X-UD3H, CLC i7-4770K at 4.8 GHz, 16GB DDR3, Windows 10 Home 64 bit booted from a Crucial BX100 250 GB, data drive is WD Raptor 1TB, also have a Samsung 840 Evo 250GB to boot Windows 7 Home Premium (system is setup for dual boot but, I haven't used 7 in three months), Creative Labs SB Recon3D PCIe, and AMD Radeon R9 390.

Edited by Queen-Evie, 05 February 2016 - 06:48 PM.
moved from Windows 10 Discussion to Windows 10 Support


BC AdBot (Login to Remove)

 


#2 Niweg

Niweg

  • Members
  • 802 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US of A
  • Local time:11:43 AM

Posted 05 February 2016 - 04:02 PM

 I'd run sfc /scannow from an administrator command prompt and also run Malwarebytes.  What you describe is definitely not normal.

If you think you're infected with something, I'd create a post in the Am I Infected forum. 

 

 Good luck.


Make regular full system backups or you'll be sorry sooner or later.


#3 dswluthier

dswluthier
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 05 February 2016 - 04:17 PM

Thanks, Niweg! I ran the scan and there were no problems detected. 

 

I have determined that the cmd popup occurs every hour at exactly xx:37:20 by my computer clock.

 

I run both Malwarebytes and SuperAntiSpyware twice a week (been doing that for years) and have run deep scans with no problems detected. 

 

Still no idea what this is. If I could just get a look at what goes on in the cmd window when it pops up, I'd have much better information. Is there anyway to get it to dump to a file or should I setup a screen recorder right before it occurs and then review it?



#4 Niweg

Niweg

  • Members
  • 802 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US of A
  • Local time:11:43 AM

Posted 06 February 2016 - 04:46 PM

 You didn't say how long this problem has been occurring, but if recently you could try System Restore to before the problem started if you have that enabled.  Also did the problem start shortly after you installed something?  That's something to check.

 

 I recently experienced little popups in the lower right corner of my screen regarding Facebook.  I don't use Facebook and had no idea where the popup was coming from.  Finally I noticed a little gear in the corner of the popup, and clicked on it.  Turns out that popup was coming from the CHROME browser; something I would've never suspected.  Fortunately there's a place there to turn this annoyance off.  So, if you're using Chrome, that's a possibility, although my popups came at irregular intervals, not exactly every hour like yours so YMMV.

 

 Good luck.


Make regular full system backups or you'll be sorry sooner or later.


#5 dswluthier

dswluthier
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 06 February 2016 - 08:58 PM

Good news! I videoed the screen and caught the popup. It was some sort of updater failing to find files.

 

I used Autoruns to locate a suspect program and stopped it being loaded. After a reboot I haven't seen the popup again!

 

Thanks for your help!



#6 MadmanRB

MadmanRB

    Spoon!!!!


  • Members
  • 2,605 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:No time for that when there is evil afoot!
  • Local time:12:43 PM

Posted 06 February 2016 - 10:19 PM

You know I had this issue not long ago, it was related to a driver in my case.

Of course when i reinstalled windows 10 after having so many issues with the November update it didnt happen again.It may be related to a config file too, after all windows 10 is more like windows 8 then it is windows 7.

There is one way to test that out, set up a second account and use that as your main account for a little bit, just transfer what you need to it and see what that does.


Edited by MadmanRB, 06 February 2016 - 10:20 PM.

You know you want me baby!

Proud Linux user and dual booter.

Proud Vivaldi user.

 

ljxaqg-6.png





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users