These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
12Next page
 

conhost.exe cmd.exe

Author
Drake Arson
Phoenix Naval Operations
Phoenix Naval Systems
#1 - 2012-04-18 06:04:05 UTC
Is anyone else noticing that each time you start EVE, one of both of those programs will start up as well, And stay running in the background?

Bug or Feature?
Ch3244
Native Freshfood
Minmatar Republic
#2 - 2012-04-18 06:10:30 UTC
SkyNET
Kehro Urgus
Dark Nebula Academy
O X I D E
#3 - 2012-04-18 06:13:20 UTC
I'm putting on my tin-foil hat just in case.

Yeeee! 

Tarn Kugisa
Kugisa Dynamics
#4 - 2012-04-18 06:35:05 UTC
Kehro Urgus wrote:
I'm putting on my tin-foil hat just in case.


I need one too.
Preferably with 4x EM Hardeners.

Be polite. Be efficient. Have a plan to troll everyone you meet - KuroVolt

Gantz Tleilax
Divided Unity
The Night Crew Alliance
#5 - 2012-04-18 07:02:30 UTC
Dont be alarmed. It's just scanning your computer for photos of young boys.

You did delete them, right?
non judgement
Without Fear
Flying Burning Ships Alliance
#6 - 2012-04-18 07:26:26 UTC  |  Edited by: non judgement
Drake Arson wrote:
Is anyone else noticing that each time you start EVE, one of both of those programs will start up as well, And stay running in the background?

Bug or Feature?

Sometimes I go in and end those processes before I play Eve.

cmd.exe is just the dos command prompt. It's completely safe stopping that once Eve has started.
conhost is the thing that scans your computer for illegal files. If you haven't done anything wrong you should be okay. You did buy all your software right? ...Or is it the thing that sends scams to Jita local? I keep forgetting. It probably isn't important.
Joran Dravius
Doomheim
#7 - 2012-04-18 08:16:22 UTC
Gantz Tleilax wrote:
Dont be alarmed. It's just scanning your computer for photos of young boys.

You did delete them, right?

****! BRB
Chribba
Otherworld Enterprises
Otherworld Empire
#8 - 2012-04-18 08:26:08 UTC
bc launcher dun know how to execute the bin on its own.

★★★ Secure 3rd party service ★★★

Visit my in-game channel 'Holy Veldspar'

Twitter @ChribbaVeldspar

Avila Cracko
#9 - 2012-04-18 10:46:39 UTC
Google is your best friend:
"This conhost.exe program is part of the cmd.exe file, when you run cmd.exe on windows, you will also see conhost.exe in your tasklist. Closing the cmd.exe dos window will also terminate conhost.exe."

And cmd is dos command prompt - write cmd.exe in win7 start search box and you will see what that is, if you don't know.

truth, the whole truth and nothing but the truth.

scooter Kondur
Doomheim
#10 - 2012-04-18 10:48:39 UTC
Avila Cracko wrote:
Google is your best friend:
"This conhost.exe program is part of the cmd.exe file, when you run cmd.exe on windows, you will also see conhost.exe in your tasklist. Closing the cmd.exe dos window will also terminate conhost.exe."

And cmd is dos command prompt - write cmd.exe in win7 start search box and you will see what that is, if you don't know.


wrong con host is somethign totally different jeez
bornaa
GRiD.
#11 - 2012-04-18 10:54:56 UTC
The conhost.exe process fixes a fundamental problem in the way previous versions of Windows handled console windows, which broke drag & drop in Vista.

It’s a completely legitimate executable—as long as it’s running from the system32 folder, and is signed by Microsoft.
[Yes, I'm an Amateur](http://www.youtube.com/watch?v=hRa-69uBmIw&feature=relmfu)
Tanya Powers
Doomheim
#12 - 2012-04-18 11:23:02 UTC
Ch3244 wrote:
SkyNET


Bigbrother is watching you Twisted
Josef Djugashvilis
#13 - 2012-04-18 11:27:07 UTC
Tanya Powers wrote:
Ch3244 wrote:
SkyNET


Bigbrother is watching you Twisted


No I am not.

This is not a signature.

Drake Arson
Phoenix Naval Operations
Phoenix Naval Systems
#14 - 2012-04-18 20:49:16 UTC
The biggest thing I meant about this post is, Why are they staying open? You can close them with no impact to EVE at all. Is the launcher just bugged and not closing themselvs?
Corina Jarr
en Welle Shipping Inc.
#15 - 2012-04-18 20:54:15 UTC
Drake Arson wrote:
The biggest thing I meant about this post is, Why are they staying open? You can close them with no impact to EVE at all. Is the launcher just bugged and not closing themselvs?

Yes.
Vera Algaert
Republic University
Minmatar Republic
#16 - 2012-04-18 21:06:51 UTC
non judgement wrote:

Sometimes I go in and end those processes before I play Eve.

cmd.exe is just the dos command prompt.

Avila Cracko wrote:
And cmd is dos command prompt - write cmd.exe in win7 start search box and you will see what that is, if you don't know.

no.

.

Tarsus Zateki
Viziam
Amarr Empire
#17 - 2012-04-18 22:39:10 UTC
Vera Algaert wrote:
non judgement wrote:

Sometimes I go in and end those processes before I play Eve.

cmd.exe is just the dos command prompt.

Avila Cracko wrote:
And cmd is dos command prompt - write cmd.exe in win7 start search box and you will see what that is, if you don't know.

no.


For the computer illiterate its perfectly okay for them to refer to it as a DOS prompt. Black and white text display with c:\ is DOS to them. Now excuse me while I go run Powershell.

Both of those processes are harmless. I would like to know why the Launcher or the Client would need a command prompt instance opened as there's nothing you can do in a command prompt that can't be done with the Windows API which they could just call from the launcher or client.

I'll just chalk it up to CPP being CCP and go back up my boot.ini.

You asked me once, what was in Room 101. I told you that you knew the answer already. Everyone knows it. The thing that is in Room 101 is the worst thing in the world.

Ris Dnalor
Tribal Liberation Force
Minmatar Republic
#18 - 2012-04-19 03:50:01 UTC
Ch3244 wrote:
SkyNET



amazing what you can find on the intarwebs...

http://www.facebook.com/CyberdyneSystems101

https://forums.eveonline.com/default.aspx?g=posts&t=118961

EvE = Everybody Vs. Everybody

  • Qolde
Dr Silkworth
#19 - 2012-04-19 05:01:24 UTC  |  Edited by: Dr Silkworth
I guess its hard to sort through the opinions already but I'll add another

I do not have conhost, I run XP still. Conhost is specific to windows 7 as already mentioned and should be running out of the system32 directory to be valid. Supposedly its a MS fix to a problem with drag and drop that was found to occur on Windows Vista that is related to the cmd box being themed whereas it was not themed before Vista.

Some questions were raised as to using a cmd line box. A hint as to why CCP might use a cmd in the first place can be gleaned from looking at EXEfile, EXEfile is called from the cmd line with the noconsole switch

..\bin\ExeFile.exe /noconsol


Quote:

-noconsole (Windows Only)
Start DOSBox without showing the console window, output will be redirected to stdout.txt and stderr.txt. This is useful if DOSBox crashes, since the error messages stored in stdout.txt and stderr.txt may help the developers fixing the problem.


I guess thy are writing a log for crashes during startup that couldn't be captured with ingame mechanics.

Sometimes it is interesting to look at all the libraries called, especially when looking for malware

This is an old standby too

[url=http://technet.microsoft.com/en-us/sysinternals/bb896653]Process explorer[/url

Written before Microsoft knew how their OS operated so they bought it and its author. If you click on a running file in the upper window, the bottom window shows all the DLL's that process is calling on to do its task. A rightclick give a properties box of nine tabs

Of particular interest in regards to this question is an implied question: is this process communicating with the outside in some manner that may indicate that its a threat worth looking at in deeper detail

Lets say I look at exefile and eve as expected has two connections to the outside world. One for voice and another for data. Its also got 4 internal paths working

I go to cmd and r-click and the properties show me no external connections at all and its drawing no resources other than 2.7 megs of memory holding it open. Peanuts

If YOU did the same for conhost, you could verify whether or not it has an outside connection. It probably has internal connections for drag and drop data, just guessing, wouldn't surprise or alarm me, if it has an external connection on external ports, click the resolve host box and see if they are going to CCP, If they are not google them, they may still be related to other eve services. It looks like they have a chat server I have not spotted before loading a dll into my eve exefile that I had not spotted before this host.

So there's a generic tool that won't get you into trouble but will give you enough info that you can relax or act as the case may be.
Raiz Nhell
Tactically Challenged
The Initiative.
#20 - 2012-04-19 05:18:49 UTC
I don't get either running...

Might be cause I'm running on a MAC... :)

All I get is high blood pressure at seeing my desktop instead of a star field at random (but short and inconvenient) intervals...


There is no such thing as a fair fight...

If your fighting fair you have automatically put yourself at a disadvantage.

12Next page