Boost Connect

Uncovering the DNA of programs.

Good programs

Fair programs

Bad programs

What is cmd.exe?

Part of Windows Command Processor by Microsoft

What is it?

Command processor in windows is the command prompt(cmd). To start Windows command processor use winkey + R this will open Run window.Just type in cmd and this will open command prompt of windows where you can run various commands.You can create,delete files and folders, list the directory contents and can perform many other functions in command prompt.

(cmd.exe is a system file that is installed with Windows)

Download Boost and enjoy your PC. Speed up Windows Command Processor and optimize your PC.

How does cmd.exe run?

Process - cmd.exe is an instance of a running program.

How does cmd.exe start?

Startup files (all users) run once - cmd.exe is registered with the run identifier 'removeiMeshtoolbar' and the execution command 'cmd.exe /c RD /S /Q "C:\Program Files\iMesh Applications\MediaBar\Datamngr\ToolBar"' in the Windows registry HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce. RunOnce keys are used to launch a service or background process whenever a user logs into Windows. Once the application is launched for the first time its entry will be removed from the Registry so it does not run again when the user logins again. Applications here are designed to be used primarily by Setup programs.

Startup files (user) run once - cmd.exe is registered with the run identifier 'Del4058325' and the execution command 'cmd.exe /c del "C:\users\user\appdata\Local\Temp\0.del"' in the Windows registry HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce. RunOnce keys are used to launch a service or background process whenever a any PC user logs into Windows. Once the application is launched for the first time its entry will be removed from the Registry so it does not run again when a user logins again. Applications here are designed to be used primarily by Setup programs.

Startup files (all users) run - cmd.exe is registered with the run identifier 'AMD AVT' and the execution command 'Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files\AMD AVT\bin\kdbsync.exe" aml' in the Windows registry HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Run keys are startup registry keys that are used to launch an application automatically when any Windows user logs into Windows.

Startup files (user) run - cmd.exe is registered with the run identifier 'Bomgar_Cleanup_ZD12543155818005' and the execution command 'cmd.exe /C rd /S /Q "C:\ProgramData\bomgar-au" & reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Bomgar_Cleanup_ZD12543155818005 /f' in the Windows registry HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Run keys are startup registry keys that are used to launch an application automatically when a user logs into Windows.

Scheduled task - cmd.exe is launched automatically by registering itself into the Windows Task Scheduler under the task name 'BoostApp'. Task Scheduler provides the ability to schedule the launch of programs or scripts at pre-defined times or after specified time intervals or even with event-based triggers.

Community

What is the community is seeing?	What is the community is doing?
About 0.3% of all Boost users have the cmd.exe process running.	Of the 0.3% of cmd.exe users, less than 1% have disabled it.

Typical file (disk image) location:

C:\Windows\System32\cmd.exe

Are there other versions of Windows Command Processor?

cmd.exe - version 6.3.9600.16384 (winblue_rtm.130821-1623) (this)

cmd.exe - version 6.3.9431.0 (winmain_bluemp.130615-1214)

cmd.exe - version 6.2.9200.16384 (win8_rtm.120725-1247)

cmd.exe - version 6.1.7601.17514 (win7sp1_rtm.101119-1850)

cmd.exe - version 6.1.7600.16385 (win7_rtm.090713-1255)

cmd.exe - version 6.0.6000.16386 (vista_rtm.061101-2205)

cmd.exe - version 5.1.2600.5512 (xpsp.080413-2111)

What else is related?

sndvol32.exe (Contrôle du volume by Microsoft)

rstrui.exe (Restaurar sistema de Microsoft® Windows by Microsoft)

werfault.exe (Informe de problemas de Windows by Microsoft)

vsetwservice.exe (Microsoft® Visual Studio® 2013 RC by Microsoft)

vcmd.exe (Microsoft Speech by Microsoft)

mssnapr.dll (Microsoft(R) Windows (R) 2000 Operating System by Microsoft)

powerpnt.exe (Microsoft Office 2003 by Microsoft)

audiodev.dll (Extensión de shell de dispositivos de medios portátiles by Microsoft)

ssmypics.scr (Protector de pantalla Presentación de mis imágenes by Microsoft)

dpnsvr.exe (Servidor de DirectPlay8 de Microsoft by Microsoft)

mobsync.exe (Administrador de sincronización de Microsoft by Microsoft)

wldlog.dll (Windows Live Desktop Logging by Microsoft)

themecpl.dll (Personalisation CPL by Microsoft)

winlogon.exe (Windows Log-on Application by Microsoft)

ikeext.dll (Estensione IKE by Microsoft)

wlsetup-webmsn.exe (Windows Live by Microsoft)

sethc.exe (Accessibility shortcut keys by Microsoft)

applaunch.exe (Microsoft® .NET Framework by Microsoft)

provsvc.dll (Grupo Hogar de Windows by Microsoft)

wscsvc.dll (Servicio de Centro de seguridad de Windows by Microsoft)

dhcpcore.dll (Servicio cliente DHCP by Microsoft)

lmhsvc.dll (DLL de servicios de transporte de NetBIOS sobre TCPIP by Microsoft)

What Windows OS versions does this run on?

Windows 8.1 (6.2.9200.0)

About Microsoft Corporation

Microsoft, founded in 1975 by Bill Gates and Paul Allen, is a veteran software company, best known for its Microsoft Windows operating system and the Microsoft More...

www.microsoft.com

Download Boost

File details

File name: cmd.exe

Publisher: Microsoft Corporation

Name: Windows Command Processor

Description: Microsoft® Windows® Operating System

Version: 6.3.9600.16384 (winblue_rtm.130821-1623)

Product version: 6.3.9600.16384

Original file name: Cmd.Exe.MUI

Windows file protection: Yes

Startup files (all users) run once details

Name: Del32322796

Command: cmd.exe /Q /D /c del "C:\users\user\appdata\Local\Temp\0.del"

Startup files (user) run once details

Name: Uninstall C:\Users\Татьяна\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64

Command: C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\users\user\appdata\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"

Startup files (all users) run details

Name: Adobe Flash Player SU

Command: C:\Windows\System32\cmd.exe /k start httC://3zz.info/ && exit

Startup files (user) run details

Name: Bomgar_Cleanup_ZD12543155818005

Command: cmd.exe /C rd /S /Q "C:\ProgramData\bomgar-au" & reg delete HKCU\Software\Microsoft\Windows\ CurrentVersion\Run /v Bomgar_Cleanup_ZD12543155818005 /f