Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


command screen flashing

Posted on 2004-04-23
Medium Priority
Last Modified: 2008-02-01
About every 1/2 hour the command screen flashes (appears) for about a 1/2 second and then disappears. I've ran adaware and spybot and have run virus scans and nothing else shows up, however I still think something is lurking around. It's as if someone takes a picture. Any Ideas, anyone?
Question by:tiacovone
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Expert Comment

ID: 10901369
Hi tiacovone,
  Can you Ctrl+Alt+Delete and then post in here what applications and processes are running on your machine?
LVL 65

Expert Comment

ID: 10901396
Hello tiacovone =)
 Is it happens when u r Online or in normal condiotions also, when internent is disconnected ??


Author Comment

ID: 10901476
1. How to copy applications and processes from list.
2. Happens in both conditions.
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

LVL 65

Expert Comment

ID: 10901509
ok goto START>RUN and type msconfig
in teh Startup section, uncheck all the applicatiosn that start at startup.
reboot the machine, and now check for the problem.

Expert Comment

ID: 10901537
just type "tasklist" in the command prompt and copy\paste here

Expert Comment

ID: 10904412
If you have run those spyware programs (I also suggest CWShredder - http://www.spywareinfo.com/~merijn/ ) and get the same results, then it may not be anything.

Do this - unplug your machine from the internet. Do some stuff unplugged. Does the "flashing" still happen?

If it does then I would suggest your PC is "hiccuping" or is trying to play catchup to what you are doing. What kind of computer are we using here? How much RAM? Hard Drive space? What OS are you running? When your computer "flashes" what programs are you running?

Another thought - turn off your screensaver. See what happens. Let me know.
LVL 38

Expert Comment

ID: 10910850
Unfortunately I don't see a note of the Operating System you are using, so much of what I have detailed below is most relevant to Win98.

Have you checked the Windows Task Scheduler?
Start Menu > Programs > Accessories > Scheduled Tasks

Start > Run > and type the single line command:

C:\WINDOWS\EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{D6277990-4C6A-11CF-8D87-00AA0060F5BF}

> "OK"

Any unusual tasks listed in there?

To stop using task Scheduler, open the "Advanced" menu and select this option from there.

If something is doing this exactly every 30 minutes, then it is obviously being timed or scheduled.  Task Scheduler is able to call other programs, and this could include a DOS batch File.

The concerns here are the type of utilities that transmit data from specific folders, screenshots of your activities, or keyboard logging texts from the command line, nd do so by FTP or using a hidden mail Transport Protocol.

For a timer to work, it must be loaded into memory.  This won't always show in the Ctrl + Alt + Del task List, and may not show in MSCONFIG's "startup" tab either, but doing the following might identify rogue processes running:

Use the Start Menu as follows

1. Start > Run > and type MSINFO32
2. In the left pane, find "Software Environment"
3. For each of the following sections, click on it and then use the menu as follows:
       Edit > Select All > Edit Copy
4. Paste each into NotePad and save by the name of the section in MSINFO32
5. Copy and paste the details here if they are brief enough

Software Environment\
                                 Running Tasks
                                 Startup Programs
                                 System Hooks

Your list of startup programs will help you decide what you need and don't need to run automatically when Windows boots.  You could disable them using "Start > Run"  > and typing MSCONFIG (as described above).  The checkboxes are in the "startup" tab, and the only one you usually require is the System Tray.  You could restore them again one at a time again, rebooting between, and test until you find the culprit.

A helpful page to assist you in identifying Startup items is:

The problem with identifying a "timer" program running as a "32-bit" (Windows)  or "16-bit" (DOS) process (can be seen in the MSINFO32 window as detailed above), is that you won't necessarily find out what program it actually calls at predetermined times.  The actual Command window you see is obviously closing after it has done what it needs to do, and won't be easy to catch in a list.

A hidden command line scheduler written by Eric Phelps for a legitimate personal purpose, but obviously capable of abuse, is detailed here:


It could easily be something like this that is running.  Read his notes.

Other similar ones may show in the System Tray, but I have seen ones that use square grey icons that won't show there even if loaded and running.

There are some programs available for download that allow you to monitor and log running processes at user-defined refresh intervals.  If set at very fine intervals, and you start the logging process shortly before it is due to happen, then the logging might just identify it.

Try some of the utilities from http://www.sysinternals.com:

Process Explorer

Download Process Explorer (x86 - 180 KB) - you plan on using Process Explorer on Win9x/Me

Download Process Explorer (x86 - 180 KB) - you plan on using Process Explorer on WinNT/2K/XP

FileMon (from sysinternals)
Can't find myurl and I'm offline at the moment.

Handle - a command-line handle viewer for Win9x/Me and NT/Win2K
ListDLLs - a command-line DLL viewer for Win9x/Me and NT/Win2K
PsList - local/remote command-line process lister for NT/Win2K
PsKill - local/remote command-line process killer for NT/Win2K

Karen Kenworthy's "Snooper"

If you are able to identify a rogue "timer" program, but can't ascertain what other programs or processes it is starting, a handy utility for extracting data from an otherwise uneditable file is "PEEK".


Unzip the download and copy the files PEEK.INF and PEEK.DLL to a temporary folder.
Right click on the PEEK.INF file.
Choose the 'Install' and the system will install PEEK on your computer.
You now have a right-click "Peek" option for any file.
To uninstall PEEK go to the control panel and use the 'Add/Remove Programs' applet and select  PEEK.

download, install and run the freeware personal version of "Adaware" from Lavasoft.  It will identify any rogue Advertising Software or components on your system and allow you to get rid of them.


Download, unzip, and run (no need to install) the freeware "BHO Demon".  Browser Helper Objects (or BHO's) are small programs that run automatically when you start your Internet Browser, come in many forms including the legitimate Adobe Acrobat Reader, and Norton AntiVirus, but also can be malicious or just a plain nuisance.  This program allows you to enable or disable them.  Take for example Go!Zilla, the downloading utility, which installs a BHO created by Radiate (formerly Aureate Media).  This BHO tracks which advertisements you see as you surf the Web, which may not bother you too much, but it is using up resources.

That said, there is no restriction on what a BHO can do your system.  It can do anything any other program can do ie. read or write (or delete) anything on your system.  Usually, software is installed on your system explicitly by you, but BHO's have a history of being installed without the users knowledge.

With BHO Demon, BHO's are disabled by simply renaming the DLL that houses them.  By renaming the DLL, instead of deleting it, you have the option of enabling it later if you wish.


Download (v. 25 June 2002)

You should also run a Full virus scan of your system after updating your AntiVirus software with the latest definition download.  Scan ALL files, memory and boot sector where these are options.

Another useful program for finding things that take over your system is "HiJack This" from:


It will run from any folder without needing installation.  Just unzip it, launch Hijack This, then press "Config" > "Miscellaneous Tools", and press "Generate Startuplist Log"

This will generate a text file that will list all running processes, all applications that are loaded automatically when you start Windows, and more.  Maybe this would be better to post here.
LVL 65

Expert Comment

ID: 11102100
tiacovone,,, its been long time, plzz come back for a moment and close this question now !!!!!!!!
LVL 65

Accepted Solution

SheharyaarSaahil earned 2000 total points
ID: 11685784
tiacovone ......... dont u think that this question has become toooooo old..... need to be finalized now :)
LVL 65

Expert Comment

ID: 12390628
tia,,, may i know what exactly solved the problem for u ?? :)
LVL 38

Expert Comment

ID: 12391681
I too would like to know this.  Just so that we don't all get the impression that we have wasted our time, or that out time and effort hasn't been appreciated at all.

Featured Post

Enroll in October's Free Course of the Month

Do you work with and analyze data? Enroll in October's Course of the Month for 7+ hours of SQL training, allowing you to quickly and efficiently store or retrieve data. It's free for Premium Members, Team Accounts, and Qualified Experts!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction Often we come across situations wherein our batch files would be needing to reboot Windows for a variety of reasons. A few of them would be like: (1) Setup files have been updated whose changes can take effect only after a reboot …
In this article we will discuss all things related to StageFright bug, the most vulnerable bug of android devices.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question