Solved task manager shows extra cmd.exe/conhost/explorer - why?

ddd990

New member
Member
Local time
7:25 AM
Messages
31
Location
UK/Germany/NYC
I leave my Win7 pro machine running from 8am to about midnight every day and when it's off, it was done so by Start->Sleep (for quick boot time). Sometimes I'll have cause to go into the task manager and despite having no visible CMD windows or explorer windows (or perhaps just one), I'll see anything from 2 to 10 explorers, maybe 5 cmd.exe instances and a similar number of conhost.exe instances.

I've done a full restart this morning and gone through most of the programs I use during the day and seen that none of them open such a weird bunch of mystery unknown processes.

When it does happen, I don't go into the task manager because I've noticed any performance hit or anything, I just wanted to kill a specific task (or just check it's not there) and that's when I spot the extras. Killing each explorer instance with "end process" causes none of my programs to complain, so I don't know how they got there. Also, they are active, they've got some CPU Time racked up. Same deal when closing the cmd/conhosts, nothing complains "hey you closed my cmd!".

If I right-click on any of the cmd/conhost/windows processes and choose "open file location", it always takes me to C:\Windows so that's no help at all.

I'm trying to find out (a) who's opening them, and (2) what they're doing and where they're doing it.

In case anyone thinks I might be bot-infested, I'm behind two firewalls, have avast and spybot running, and have run malware bytes scan also. As far as I can tell, all is clean.
 

My Computer

Computer Manufacturer/Model Number
Custom build
OS
Windows 7 Pro x64
CPU
i7-2600K @ 3.5GHz
Motherboard
Gigabyte GA-P67A-UD5
Memory
16GB DDR3-1600
Graphics Card(s)
Gigabyte HD5850 "OC" 1GB
Sound Card
basic motherboard onboard, with Logitech Z4 speakers
Monitor(s) Displays
1.LG 27" E2750V, 2.Samsung 19" 913N
Screen Resolution
1920x1080, 1280x1024
Hard Drives
Intel X25-M G2 160GB SSD, 2TB SATA 600 internal, 2TB SATA 600 USB3.0 external
PSU
Seasonic X-460FL 80+ Gold
Case
Fractal "Define R3"
Cooling
Scythe BIG Shuriken
Keyboard
Logitech Illuminated 920-000914 (Super super quiet)
Mouse
Microsoft Optical
Internet Speed
DSL
Lets see what is running on your pc

Click here DDS

:ar: Click on Download Now button

:ar: When the download is complete . Drag the DDS program from the Downloads folder to your Desktop

:ar: Double click the DDS icon on the Desktop then click the Run button to run the tool.

:ar: Place a check next to attact.txt and click Start . When done, DDS will open two logs
  • DDS.txt
  • Attach.txt

:ar: Save two logs onto your desktop and upload them with your reply
 

My Computer

Computer Manufacturer/Model Number
Custom Built
OS
Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
CPU
Intel Core i7 CPU 950 @ 3.07GHz
Motherboard
ASUS P6T DELUXE V2
Memory
OCZ 6GB (3 x 2GB) 240-Pin DDR3 SDRAM DDR3 1600 OCZ3X1600R2
Graphics Card(s)
ATI Radeon HD 5700 Series
Sound Card
OnBoard
Hard Drives
WD6400AACS-00M3B0 (640GB SATA )
PSU
CORSAIR 850w
Case
NZXT LEXA
Cooling
Intel Stock Heatsink Fan
Keyboard
Microsoft Wireless Laser Keyboard 7000
Mouse
Microsoft Wireless Laser Mouse 7000
I installed Process Explorer now, which shows which programs are responsible for opening any particular process.

That allowed me to discover what was opening these cmd/conhost processes.

In case it helps anyone in future, it was when I launched the FC.exe file from gotomeeting. If I use a web shortcut to the meeting, I get in without a cmd/conhost. If I use their program to get in, it does so via a cmd/conhost which does not die when you leave the meeting.
 
Last edited:

My Computer

Computer Manufacturer/Model Number
Custom build
OS
Windows 7 Pro x64
CPU
i7-2600K @ 3.5GHz
Motherboard
Gigabyte GA-P67A-UD5
Memory
16GB DDR3-1600
Graphics Card(s)
Gigabyte HD5850 "OC" 1GB
Sound Card
basic motherboard onboard, with Logitech Z4 speakers
Monitor(s) Displays
1.LG 27" E2750V, 2.Samsung 19" 913N
Screen Resolution
1920x1080, 1280x1024
Hard Drives
Intel X25-M G2 160GB SSD, 2TB SATA 600 internal, 2TB SATA 600 USB3.0 external
PSU
Seasonic X-460FL 80+ Gold
Case
Fractal "Define R3"
Cooling
Scythe BIG Shuriken
Keyboard
Logitech Illuminated 920-000914 (Super super quiet)
Mouse
Microsoft Optical
Internet Speed
DSL
I don't see any attachments .
 

My Computer

Computer Manufacturer/Model Number
Custom Built
OS
Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
CPU
Intel Core i7 CPU 950 @ 3.07GHz
Motherboard
ASUS P6T DELUXE V2
Memory
OCZ 6GB (3 x 2GB) 240-Pin DDR3 SDRAM DDR3 1600 OCZ3X1600R2
Graphics Card(s)
ATI Radeon HD 5700 Series
Sound Card
OnBoard
Hard Drives
WD6400AACS-00M3B0 (640GB SATA )
PSU
CORSAIR 850w
Case
NZXT LEXA
Cooling
Intel Stock Heatsink Fan
Keyboard
Microsoft Wireless Laser Keyboard 7000
Mouse
Microsoft Wireless Laser Mouse 7000
I don't see any attachments .
Sorry, you must have looked just as I was editing my response. I believe I found the culprit now (and it wasn't anything that would be in those attachments so I deleted them).
 

My Computer

Computer Manufacturer/Model Number
Custom build
OS
Windows 7 Pro x64
CPU
i7-2600K @ 3.5GHz
Motherboard
Gigabyte GA-P67A-UD5
Memory
16GB DDR3-1600
Graphics Card(s)
Gigabyte HD5850 "OC" 1GB
Sound Card
basic motherboard onboard, with Logitech Z4 speakers
Monitor(s) Displays
1.LG 27" E2750V, 2.Samsung 19" 913N
Screen Resolution
1920x1080, 1280x1024
Hard Drives
Intel X25-M G2 160GB SSD, 2TB SATA 600 internal, 2TB SATA 600 USB3.0 external
PSU
Seasonic X-460FL 80+ Gold
Case
Fractal "Define R3"
Cooling
Scythe BIG Shuriken
Keyboard
Logitech Illuminated 920-000914 (Super super quiet)
Mouse
Microsoft Optical
Internet Speed
DSL
I think he is saying there isn't a problem anymore......he has discovered the issue.
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Golden Mk. I.4
OS
Windows 10 Pro x64 ; Xubuntu x64
CPU
Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz
Motherboard
Gigabyte P55A-UD3R Rev.1. Award BIOS F13
Memory
16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24)
Graphics Card(s)
EVGA NVidia GTX 560 1024MB
Sound Card
Realtek Integrated
Monitor(s) Displays
Dual Samsung SyncMaster 2494HS
Screen Resolution
1920*1080 and 1920*1080
Hard Drives
1*Samsung 840 EVO 120GB SSD;
1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
1*Samsung F1 SpinPoint 1TB;
2*Western Digital 1TB External USB 3.0
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0
PSU
Thermaltake ToughPower QFan 750W
Case
Thermaltake Element S VK60001W2Z
Cooling
Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans
Keyboard
Logitech G110
Mouse
Logitech MX518
Glad you solved your issue .
 

My Computer

Computer Manufacturer/Model Number
Custom Built
OS
Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
CPU
Intel Core i7 CPU 950 @ 3.07GHz
Motherboard
ASUS P6T DELUXE V2
Memory
OCZ 6GB (3 x 2GB) 240-Pin DDR3 SDRAM DDR3 1600 OCZ3X1600R2
Graphics Card(s)
ATI Radeon HD 5700 Series
Sound Card
OnBoard
Hard Drives
WD6400AACS-00M3B0 (640GB SATA )
PSU
CORSAIR 850w
Case
NZXT LEXA
Cooling
Intel Stock Heatsink Fan
Keyboard
Microsoft Wireless Laser Keyboard 7000
Mouse
Microsoft Wireless Laser Mouse 7000
Back
Top