cmd.exe is getting being launched+closing itself automatically __4-5 times every Hour & also minimize full-screen game while this happens

PratikUnleashed · Nov 7, 2025

cmd.exe is getting being launched+also_closing itself automatically __4-5 times in every Hour___
1--cmd.exe launch remain open for less than a second and unable to read
2--also it minimizes full-screen game whenever this happens like ( RainbowSixSiege ,etc)

tried-
1--Norton 360 Deluxe full scan and reboots
2--also scanned with Malwarebytes and clean bitorentUpdate malware and reboots
3--keep only important and verified apps in taskbar startup

still facing the same issue

Try3 · Nov 7, 2025

Use your phone to video your computer screen then read the mystery window in slow time from there.

Perhaps the times match something in Task scheduler.

TS task ocurrences are also listed in Event viewer
Log - Microsoft-Windows-TaskScheduler/Operational
Source - TaskScheduler
EventID - several

Denis

PratikUnleashed · Nov 7, 2025

using phone recording is hard bz the cmd.exe scene happens every fast and went off very fast too
and its not guaranteed when the CMD-Flash screen will apear-and go away

in Pic-
Log - Microsoft-Windows-TaskScheduler/Operational______________Its empty (pic attached)
Event viewer pic attached

Try3 · Nov 7, 2025

I know phone recording is awkward. If you can find a way of propping up your phone so it can see the computer screen then it is likely to be a good way of finding out what is going on even if you have to leave it running for half an hour waiting for the next ocurrence.

Click on Enable all tasks history on the right-hand side of Task scheduler.

Your first diagram is of Task scheduler not Event viewer.

I have no idea why you are focussing on Powershell records. It might just as easily be a batch script running.

And posting whole-screen screenshots is awkward because they cannot easilly be read. When you want to post a diagram, adjust the column widths so relevant text is shown & adjust the window size so the smallest possible area is being captured.
And the only entries in TS / Event viewer of interest are ones that you have matched to the times the cmd windows appear.

Denis

PratikUnleashed · Nov 7, 2025

STARTED -- Enable all tasks history on the right-hand side of Task scheduler.
and now directly screen recording via Bandicam now ON

will update as soon as mystery object found

sure

PratikUnleashed · Nov 7, 2025

I catch it Finally __ Thanks alot Try3

c:\windows\system32\cmd___________________
[process exited with code 1 (0x000000010]
You can now close this terminal with ctrl+D, or press Enter to resart.

thats the fish

Try3 · Nov 7, 2025

Good.

When you have some time records and can read the window contents you will be much better placed to solve the mystery.

Now that you have enabled Task scheduler, All task history here is one further place worth looking for task records in once you have some time records.
Task scheduler (Local), Task status section

Task scheduler (Local), Task status section.webp

You will always have to adjust its column widths to read the entries [and they reset once you close TS so you have to set them up again the next time you want to look at them].

Denis

Try3 · Nov 7, 2025

PratikUnleashed said:
I catch it Finally

Does the time it happened match anything in that Event viewer log or the Task scheduler Task status section?

Denis

PratikUnleashed · Nov 7, 2025

no activity in Event viewer nor Task schedular

again, same cmd pop-up with same msg in it

Try3 · Nov 7, 2025

I assume you refreshed the view in both of them to make sure they were not simply being slow to display the new item.

I think you'll need to get Task mgr, Processes tab, Apps section up on screen to see if it shows a new process being launched when that window happens.

Denis

Tester · Nov 7, 2025

Use "Last Activity View" to see what is triggering it. From nirsoft.net

LastActivityView - View the latest computer activity in Windows operating system

Displays the latest computer activity in Windows operating system

www.nirsoft.net

Download button at bottom of the page.

PratikUnleashed · Nov 7, 2025

GOT IT using LastActivityView from Nirsoft
pic below

Action Time Description Filename Full Path More Information File Extension Data Source
07-Nov-25 5:15:02 PM Run .EXE file WINDOWSTERMINAL.EXE C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.23.12811.0_X64__8WEKYB3D8BBWE\WINDOWSTERMINAL.EXE Microsoft Corporation, Windows Terminal, Windows Terminal Host, 1.23.2510.08001 EXE C:\WINDOWS\Prefetch\WINDOWSTERMINAL.EXE-AD4B9CC6.pf

Action Time Description Filename Full Path More Information File Extension Data Source
07-Nov-25 5:15:02 PM Run .EXE file OPENCONSOLE.EXE C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.23.12811.0_X64__8WEKYB3D8BBWE\OPENCONSOLE.EXE Microsoft Corporation, Windows Terminal, Console Window and PTY Host (Open Source), 1.23.2510.08001 EXE C:\WINDOWS\Prefetch\OPENCONSOLE.EXE-79840C9C.pf

FreeBooter · Nov 7, 2025

See any script or cmd.exe runs on startup or scheduled to run using Autoruns utility.

In this video, i will show you how to use a powerful application like Autoruns to manage your Windows start up programs, processes and other entries.

Tester · Nov 7, 2025

Ok. That shows indeed the window, but not wat is triggering it.

I will upload a program i wrote myself in that records all exe's that are launced and from what parents.
It even records exes that are launching so fast, that taskmanager or other taskmanger programs won't even show that that have run.
But first i have to go to dr appoinment now.

Try3 · Nov 7, 2025

PratikUnleashed said:
GOT IT using LastActivityView

So I suggest that you look at entries a few seconds either side of that time [because logs can take different times to add entries] for anything that might be the launching act.
Event viewer & Task scheduler records might also help you.

I assume you know your Comet browser well enough to know if comet.exe is anything to do with these cmd windows. If they have a support desk or user forums then try asking there.

Best of luck,
Denis

PratikUnleashed · Nov 7, 2025

comet browser uninstalled

issue still there

Tester · Nov 7, 2025

Here is the Process Logger i made. (Early Beta Version)
Extract it, run the exe.
Application will run in TaskTray, icon shows WoodLogs.
When you see the cmd screen.
Right click on icon in tasktray, and "Open Processes Log"
That will open the log file in the folder with all recorded processes that where started + with there parents.
If it happens PM me the log file
--
No installation needed.
Logrotation max 72 hours.
Will also show exe files that are run so fast, taskmanger won't see them running. (As some exe closes so fast between refreshes, for example: CompPkgSrv.exe that runs when firefox/chrome video's are played for example on youtube )

dacrone · Nov 7, 2025

is there a String Value named "Autorun" under

HKEY_CURRENT_USER\Software\Microsoft\Command Processor

? if so, delete it and reboot

PratikUnleashed · Nov 7, 2025

dacrone said:
is there a String Value named "Autorun" under

HKEY_CURRENT_USER\Software\Microsoft\Command Processor

? if so, delete it and reboot

it is not present in the system

dacrone · Nov 7, 2025

msconfig >Services > Hide all Microsoft services > Disable all > Apply

The Services tab in System Configuration in Windows 11.

Startup tab > Open Task Manager

The Startup tab in System Configuration in Windows 11.

Task Manager > Disable all Enabled startup programs/apps

Reboot

this clean boot will narrow down if it is a running program/service that is causing this. you can then (if you really want to track it down), enable them one by one and see when it starts again.

cmd.exe is getting being launched+closing itself automatically __4-5 times every Hour & also minimize full-screen game while this happens

Gaming 365

My Computer

Well-known member

My Computer

Gaming 365

My Computer

Well-known member

My Computer

Gaming 365

My Computer

Gaming 365

My Computer

Well-known member

My Computer

Well-known member

My Computer

Gaming 365

My Computer

Well-known member

My Computer

Well-known member

My Computer

Gaming 365

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Gaming 365

My Computer

Well-known member

Attachments

My Computer

Well-known member

My Computer

Gaming 365

My Computer

Well-known member

My Computer