I leave my Win7 pro machine running from 8am to about midnight every day and when it's off, it was done so by Start->Sleep (for quick boot time). Sometimes I'll have cause to go into the task manager and despite having no visible CMD windows or explorer windows (or perhaps just one), I'll see anything from 2 to 10 explorers, maybe 5 cmd.exe instances and a similar number of conhost.exe instances.
I've done a full restart this morning and gone through most of the programs I use during the day and seen that none of them open such a weird bunch of mystery unknown processes.
When it does happen, I don't go into the task manager because I've noticed any performance hit or anything, I just wanted to kill a specific task (or just check it's not there) and that's when I spot the extras. Killing each explorer instance with "end process" causes none of my programs to complain, so I don't know how they got there. Also, they are active, they've got some CPU Time racked up. Same deal when closing the cmd/conhosts, nothing complains "hey you closed my cmd!".
If I right-click on any of the cmd/conhost/windows processes and choose "open file location", it always takes me to C:\Windows so that's no help at all.
I'm trying to find out (a) who's opening them, and (2) what they're doing and where they're doing it.
In case anyone thinks I might be bot-infested, I'm behind two firewalls, have avast and spybot running, and have run malware bytes scan also. As far as I can tell, all is clean.
I've done a full restart this morning and gone through most of the programs I use during the day and seen that none of them open such a weird bunch of mystery unknown processes.
When it does happen, I don't go into the task manager because I've noticed any performance hit or anything, I just wanted to kill a specific task (or just check it's not there) and that's when I spot the extras. Killing each explorer instance with "end process" causes none of my programs to complain, so I don't know how they got there. Also, they are active, they've got some CPU Time racked up. Same deal when closing the cmd/conhosts, nothing complains "hey you closed my cmd!".
If I right-click on any of the cmd/conhost/windows processes and choose "open file location", it always takes me to C:\Windows so that's no help at all.
I'm trying to find out (a) who's opening them, and (2) what they're doing and where they're doing it.
In case anyone thinks I might be bot-infested, I'm behind two firewalls, have avast and spybot running, and have run malware bytes scan also. As far as I can tell, all is clean.
My Computer
- Computer Manufacturer/Model Number
- Custom build
- OS
- Windows 7 Pro x64
- CPU
- i7-2600K @ 3.5GHz
- Motherboard
- Gigabyte GA-P67A-UD5
- Memory
- 16GB DDR3-1600
- Graphics Card(s)
- Gigabyte HD5850 "OC" 1GB
- Sound Card
- basic motherboard onboard, with Logitech Z4 speakers
- Monitor(s) Displays
- 1.LG 27" E2750V, 2.Samsung 19" 913N
- Screen Resolution
- 1920x1080, 1280x1024
- Hard Drives
- Intel X25-M G2 160GB SSD, 2TB SATA 600 internal, 2TB SATA 600 USB3.0 external
- PSU
- Seasonic X-460FL 80+ Gold
- Case
- Fractal "Define R3"
- Cooling
- Scythe BIG Shuriken
- Keyboard
- Logitech Illuminated 920-000914 (Super super quiet)
- Mouse
- Microsoft Optical
- Internet Speed
- DSL