Main Forum > General Computer Support

track the process that's calling shutdown.exe

<< < (3/4) > >>

Shane:
First thing I would do, if you havent yet is to check the task scheduler for anything. But normally in order to find what is calling or touching what is I use sysinternals process monitor. This allows me to see every file and registry key a program touches. Then you can filter out all the successful results and look for the failed ones instead that failed on trying to find or call shutdown.exe

Shane

garegin:
the .PML log file was created by process monitor. So it definitely shows shutdown.exe being called by I don't know by what.

Shane:
Can you send me the whole log of when it happens?

I found that what ever is calling it is sending the command "shutdown  -r -t 00"

No .exe at the end of it, which I then see cmd.exe searching for which one to use. So since something is calling shutdown.exe directly it is causing cmd.exe to do the work, so i need to see what is calling the cmd.exe

Shane

garegin:
ok
this is the new link to the log file. It's 800MB, so will take some time to download.

https://drive.google.com/file/d/0B1lqZhpyr-KQcWdtRDRDUkJRcU0/view?usp=sharing

Julian:

--- Quote from: garegin on June 29, 2015, 11:07:08 pm ---ok
this is the new link to the log file. It's 800MB, so will take some time to download.

https://drive.google.com/file/d/0B1lqZhpyr-KQcWdtRDRDUkJRcU0/view?usp=sharing

--- End quote ---
takes me a couple seconds to download i have 100mbs per second ha lol and dang why so big?

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version