Weird cmd prompt issue

[BigCake]

I am getting this kind of cmd pop up randomly.  What is the reason behind it? How can I rectify it?

[Mira Yurizaki]

It almost looks like malware or some crapware, considering it's trying to find data related to system builders.

[BigCake]

Just now, M.Yurizaki said:

It almost looks like malware or some crapware, considering it's trying to find data related to system builders.

I have started experiencing this issue after freshly installing a copy of windows and letting it update. Malwarebytes and adwarecleaner show nothing.

[Tabs]

6 minutes ago, Atalia Chez said:

I have started experiencing this issue after freshly installing a copy of windows and letting it update. Malwarebytes and adwarecleaner show nothing.

What do you have running at startup? I did a quick google and found a superuser post relating to some funky drivers that added startup entries. The only commonality is that all of these driver packages seem to use updatre2.xml as some kind of configuration file.

 

Remember to check your tasks as well, in task scheduler.

[BigCake]

1 minute ago, Tabs said:

What do you have running at startup? I did a quick google and found a superuser post relating to some funky drivers that added startup entries. The only commonality is that all of these driver packages seem to use updatre2.xml as some kind of configuration file.

 

[Mira Yurizaki]

What's your PC specs? Or model if you bought a pre-built thing.

[BigCake]

1 minute ago, M.Yurizaki said:

What's your PC specs? Or model if you bought a pre-built thing.

It is a laptop.

 

Acer E5 575G- 5622

[Tabs]

2 minutes ago, Atalia Chez said:

 

What about your tasks through Task Scheduler? It might be easier to find everything that runs with your system using a utility called "autoruns" from Microsoft Sysinternals. Be careful with it though, as it is very powerful and can disable needed drivers etc if you aren't careful. 

 

It would be useful if you could take a screenshot of that too, as it'll show everything running through task scheduler and any third party services.

[Mira Yurizaki]

3 minutes ago, Atalia Chez said:

It is a laptop.

 

Acer E5 575G- 5622

See if there's a "Driver Setup Utility" in Control Panel\All Control Panel Items\Programs and Features. If so, uninstall it, then remove C:\ProgramData\Acer\Updater2. Also make sure C:\Program Files\DriverSetupUtility is removed too.

[GoodBytes]

Look under Task Scheduler for startup programs. Updater uses this as it allows the updater to run the setup to update itself under administrator privileges, else it would be limited to the current user level.

[BigCake]

8 hours ago, GoodBytes said:

Look under Task Scheduler for startup programs. Updater uses this as it allows the updater to run the setup to update itself under administrator privileges, else it would be limited to the current user level.

I think I may have found the source from Task Scheduler. The CMD is set to pop up every 30 mins. 

[GoodBytes]

38 minutes ago, Atalia Chez said:

I think I may have found the source from Task Scheduler. The CMD is set to pop up every 30 mins. 

 

No that is not it.

If you look at the command prompt, it wants to open  "update2.xml" in various folders, such as "Pakard Bell", and "Gateways", both are PC manufacture computers that no longer exists since ages. It seem it tries to find it from pre-defined (in its code) locations it expect to, but can't find it, mixed with an error in one of the calls that it is repeatedly doing.

 

You can find out what program is executing this by checking the Task Manager when it occurs. Look under the Process and Details tab, for the column "Command line". If you don't have this column, you can show it, by right-clicking on the columns headers, and select "Command line".

 

Usually, programs that puts stuff in the Task Scheduler, unless the devs are an ass and hide it under Windows folders, they put it in the root. So under "Task Scheduler Library"

[BigCake]

2 hours ago, GoodBytes said:

No that is not it.

If you look at the command prompt, it wants to open  "update2.xml" in various folders, such as "Pakard Bell", and "Gateways", both are PC manufacture computers that no longer exists since ages. It seem it tries to find it from pre-defined (in its code) locations it expect to, but can't find it, mixed with an error in one of the calls that it is repeatedly doing.

 

You can find out what program is executing this by checking the Task Manager when it occurs. Look under the Process and Details tab, for the column "Command line". If you don't have this column, you can show it, by right-clicking on the columns headers, and select "Command line".

 

Usually, programs that puts stuff in the Task Scheduler, unless the devs are an ass and hide it under Windows folders, they put it in the root. So under "Task Scheduler Library"

I have just checked what the cmd is doing in task manager command line column. It shows blank.