Computer Help

Question

System32\cmd.exe Runs on Startup

by caseycoughlin / April 24, 2011 12:35 AM PDT

Hello all. I have an HP Mini laptop with Windows XP that when every time I start it, it runs c:\WINDOWS\system32\cmd.exe. How can I stop this from running on startup?

Theres nothing in the startup folder.

Thanks!
Casey

Discussion is locked
You are posting a reply to: System32\cmd.exe Runs on Startup
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: System32\cmd.exe Runs on Startup
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Clarification Request
Go beyond the startup folder.
by R. Proffitt Forum moderator / April 24, 2011 12:43 AM PDT

My favorite tools for looking for the causes are HIJACKTHIS and AUTORUNS. (use google to find them and discussions about use.)
Bob

All Answers

Collapse -
Answer
Checked Here Yet?
by Grif Thomas Forum moderator / April 25, 2011 5:05 AM PDT

Click on Start-Run, type: msconfig, then click on OK. When the System Configuration Tool loads, click on the "Startup" tab, then see if " c:\WINDOWS\system32\cmd.exe" is listed there.. If so, UNCHECK the box next to it, click on "Apply", then restart the machine. Upon restart place a CHECK mark in the box to NOT run System Configuration Tool at startup..

Or you could simply open the registry editor and check for the listing at either the locations below. If so, delete the line indicating such:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

or

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Hope this helps.

Grif

Collapse -
thank you
by floop379 / May 23, 2012 5:33 AM PDT
In reply to: Checked Here Yet?

Your answer was a big help. It saved me a reformat job.

As one can imagine, Google searching this turned up many different thoughts, ideas and mostly scares entertaining this command being a virus or a keylogger. No matter how dedicated we are to our diligence of browsing habits, pc protection and maintenance, we do, at times, wonder if something got 'slid past the goalie'.

For the last two weeks, I've been seeing this flash screen at startup for the c:\WINDOWS\system32\cmd.exe and was starting to wonder if this was an infection of some sort. Picking your advice spots on the internet can be as troublesome as the alleged trouble source you're seeking to fix. Thank goodness for Grif's post.

Alas, your directions were correct. It further completed the piece of the puzzle I was missing. I can only speak for myself but this startup screen was generated from an AMD Vision Driver Download update. I had recently upgraded to a larger video graphic card and ran the initial CD whereas two weeks ago (consistent with this flash startup problem) my first update was installed. It all made sense once you pointed me in the right direction. If you actually mouse over the full command line name in the UNCHECK window, you can see its full name and that AMD generated it. I unticked the startup box for c:\WINDOWS\system32\cmd.exe and no longer see it at startup.


Thank you, Grif.

Collapse -
Almost saved me, too.
by JamesBulvas / July 28, 2012 6:32 PM PDT
In reply to: Checked Here Yet?

I have the same problem he had. However when I go to msconfig, I see two c:\windows\system... I did attempt to update my video card, too. I'm working on my knowledge-base on computers. However I did not choose unclick either of the two boxes. They are: NeroCheck, and cftmon. I have an emachines P.C., I run XP, and updated my AMD 64 Athlon Video Card. Location for both are HKCU\SOFTWARE\Microsoft/Currentver...

Collapse -
Correction
by JamesBulvas / July 28, 2012 6:37 PM PDT
In reply to: Almost saved me, too.

NeroCheck has a location of HKLM\SOFTWARE\Microsoft\Windows\CurrentVer..., and cftmon has a location of HKCU\SOFTWARE\Microsoft\Windows\CurrentVer...

Collapse -
If There are Two, Uncheck Them Both...
by Grif Thomas Forum moderator / July 30, 2012 8:20 AM PDT
In reply to: Correction

If there are two listings of "c:\WINDOWS\system32\cmd.exe" in "msconfig", then UNCHECK them both... Nero Check (part of Nero burning software) and "cftmon" which is part of MS Office probably aren't causing the issue you mention.. Still, it is possible you have spyware or viruses on the machine.. Be sure to run scans with a good anitivirus (a number are available and you haven't indicated which you are running) and spyware removal tool such as Malwarebytes or SuperAntispyware.

You may also need to check the registry at the two "run" locations to see if any inconsistencies are seen.

Hope this helps.

Grif

Collapse -
cmd exe appearing
by jraju / March 12, 2013 11:18 PM PDT

Hi, It is a kind of script writing by a third party.

Just do this to get rid of this

Start menu -Run-cmd and in the command prompt that opens type netsh winsock reset and it will reset the winsock. Just reboot to see that cmd.exe box appearing has gone. Hope this helps

Collapse -
Reset The Winsocks??
by Grif Thomas Forum moderator / March 13, 2013 2:55 AM PDT
In reply to: cmd exe appearing

Although this particular thread is quite old, your advice will NOT fix the issue that was originally posted.. Resetting winsocks tends to correct a faulty internet connection and allow a computer to join the net (such was NOT a problem stated by the posters above) but it won't fix a problem where a command window is loading at startup caused by the faulty program installations mentioned in their posts.

You might want to re-think your incorrect answer.

Hope this helps.

Grif

Collapse -
cmd exe appearing and vanishing in seconds
by jraju / March 13, 2013 1:18 PM PDT
In reply to: Reset The Winsocks??
Collapse -
Yep, Different Issue...
by Grif Thomas Forum moderator / March 14, 2013 10:30 AM PDT

Difficulty connecting to the internet was NOT mentioned by the original poster and is not a normal consequence of seeing a command prompt at startup. Glad it solve your situation but logging on to the internet was not the original poster's, or any of the other's, issue. I'm glad it solved yours.

Unfortunately, that's the problem with jumping into an old thread which doesn't entirely fit your problem.

Hope this helps.

Grif

Collapse -
Please see this
by jraju / March 14, 2013 9:12 PM PDT

System32\cmd.exe Runs on Startup

by caseycoughlin - 4/24/11 7:35 AM

Hello all. I have an HP Mini laptop with Windows XP that when every time I start it, it runs c:\WINDOWS\system32\cmd.exe. How can I stop this from running on startup?

Theres nothing in the startup folder.

Thanks!
Casey
This is the thread to which i gave ananswer.Thank you

Collapse -
Yep, No Mention Of Logon Difficulties
by Grif Thomas Forum moderator / March 15, 2013 3:49 AM PDT
In reply to: Please see this

...in the original thread starter.....and no mention of internet connection problems which YOU had along with the command prompt popping up at startup.. The original poster had no such logon problems.... And there was also no mention of a malware issue by the original poster which is the underlying cause in the link you provided earlier.

By the way, you DID NOT reply to the original poster. You replied to ME, Grif Thomas, in your original response after I had answered questions by members in 2012 ... Your first post at the link below was approximately TWO YEARS after the thread started.

http://forums.cnet.com/7726-6122_102-5436170.html

So again, thanks for posting the information as it may help someone else, but as I said before, "Glad it solved your situation but logging on to the internet was not the original poster's, or any of the other's, issue. I'm glad it solved yours."

'Nuff said...

Grif

Collapse -
Additional help requested
by avorkink / March 19, 2013 2:01 AM PDT
In reply to: Checked Here Yet?

I have the same issue as caseycoughlin, namely c:\WINDOWS\system32\cmd.exe runs on startup. I am using Windows 7, 64 bit. I tried the solutions you suggested but in none of the places you mentioned, namely the startup tab under System Configuration or two HKey folders in the registry editor under ...\CurrentVersion\Run is there a c:\WINDOWS\system32\cmd.exe file which I can uncheck. Is there another way to find where the cmd.exe is kicking in? Thanks.

Collapse -
Wait a minute.
by R. Proffitt Forum moderator / March 19, 2013 2:26 AM PDT

You said you can uncheck but never wrote you did. In fact, there is no reason for that entry at all so why didn't you remove it?
Bob

Collapse -
No box to uncheck
by avorkink / March 19, 2013 4:32 AM PDT
In reply to: Wait a minute.

To clarify, there is no box to uncheck in any of the places mentioned by Grif, because the c:\WINDOWS\system32\cmd.exe file is not in any of those locations.

Collapse -
This is someone else's discussion.
by R. Proffitt Forum moderator / March 19, 2013 4:43 AM PDT
In reply to: No box to uncheck

I'd start your own to avoid any confusion and if you can, click on my name and email the HIJACKTHIS log file for me to take a look.
Bob

Collapse -
One or Two Other Startup Locations to Check Easily
by Grif Thomas Forum moderator / March 19, 2013 4:58 AM PDT

Although there are lots of possibilities here, (Bob requested a Hijackthis log to verify), in the meantime, did you try the regular startup folder by clicking on the Start button, choose "All Programs", then click on the "Startup" folder listing.. Some of the programs that run at startup are listed there.. If you don't need them to run at startup, delete them and if the "...system32\cmd.exe" is listed there, remove it as well.

Checking for it at the locations below might help as well:

Your personal startup folder should be C:\Users\<user name>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup.

The All Users startup folder should be C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup.

Hope this helps.

Grif

Collapse -
Have you tried my solution
by jraju / March 20, 2013 12:28 PM PDT

Hi, Avorkink

Did you try my solution. It will work perfectly. Give it a try and then write to me. You have mentioned that you have the problem still. Try the solution first. I have given this reply as i had the problem and solved thro this command. How to know the kind of entries in the default winsock is not the concern. I am concerning only about the flashing of cmd exe.

Popular Forums
icon
Computer Help 47,885 discussions
icon
Computer Newbies 10,322 discussions
icon
iPhones, iPods, & iPads 3,188 discussions
icon
Security 30,333 discussions
icon
TVs & Home Theaters 20,177 discussions
icon
HDTV Picture Setting 1,932 discussions
icon
Phones 15,713 discussions
icon
Windows 7 6,210 discussions
icon
Networking & Wireless 14,510 discussions

Tech Tip

Tired of your tricky Wi-Fi password?

Stop trying to memorize a complicated sequence of numbers and letters. Learn how to change the default password.