I sometimes get a file called tmp#####.tmp.bat in my user/appdata/local/temp folder I am suspecting its created by some Cannon printter utilities I thought I would put a FileSystemWatcher on the folder and catch the creator in the act I can catch the creation of the file, but how do I identify the process creating it? Any ideas? I would like to log the creation and the process name creating it.
Identify process that is creating a file
119 Views Asked by Bill At
1
There are 1 best solutions below
Related Questions in FILE
- Helpt with reading files
- Why can't I use the file pointer after the first read attempt fails?
- Can't read the file using std::wifstream C++
- How can the scanner reread the entire file after it has already executed hasNextLine once?
- What is 'Invalid Load Key, '\x00'
- php $_FILE variable undefined index
- Data loaded from the file is not returned in the correct order
- File splitting and encryption
- Optimizing an s5cmd command that uses awk to generate a text file
- segmentation fault while reading in text file ( c++ )
- File.OpenText is adding C:\ to the front which is an error
- UTF-8 issue with excel
- How to upload files to MediaWiki APIs in Rust?
- No such file or directory: '/tmp/tmp_ejr26m6.upload.mp3' in Django
- Problems accessing zip files on the react front end from express backend
Related Questions in PROCESS
- How to get Java running parameters from Spring Boot running inside container in pod where no ps exist
- Module not found: Error: Can't resolve 'child_process' in 'react-cerbos-demo/node_modules/cerbos'
- Launch URL from C# and detect when browser is closed
- Communicating Java and Python processes freeze after a while when using readline() but not input()
- Can someone tell me what's wrong with mi Task.await?
- Initial Fastapi request is not being processed and stays on hold
- running the ld command through rust only works 50% of the time
- Dropping duplicated rows
- Which child will execute first when you call fork() and wait() multiple times?
- How to kill number of processes in cpanel
- How is Unix signal propagated to PGID in namespaces and what is the impact of NSpgid on process signal handling?
- Why does sudo kill -15 on sh and docker-compose PIDs not stop Docker containers?
- Can Process.Exited event get fired but the process hang in the system?
- Powershell script can not run when invoke in .NET process
- How to quickly terminate child processes in Go and proceed only when killed
Related Questions in FILESYSTEMWATCHER
- FileSystemWatcher works reliably, unless I write to a log file
- Powershell - Nested loops seeming to ignore if statement
- FileSystemWatcher - buffer overrun on empty directory - do changes "cache" somewhere?
- FileSystemWatcher - reasons for InternalBufferOverflow
- How to properly handle a list of IDisposable items in my Dispose()?
- How to offload SQL code to another task / thread - FileSystemWatcher
- FileSystemWatcher does not trigger on Azure
- Comparing 2 text files while actively looking for changes
- How to make FileSystemWatcher events run in an STA Thread in a console application?
- Stream file, file in use, FileSystemWatcher and question about threads
- High cpu usage Windows forms
- FileSystemWatcher/File.ReadAllLines causing IO Exception: Could not access file because it is being used by another process
- FileSystemWatcher doesn't work on FTP file drop
- Textbox value not updating in asp.net
- Is there a "folder fingerprint" to detect if a folder's contents have changed between two points in time? I cannot use FileSystemWatcher
Related Questions in IDENTIFY
- How to Identify Long or Hex Colour for Selected Cells with VBA? Use Font.TextColor or Hex(cell.Font.color), or?
- Troubleshooting labeling points on a residuals vs. fitted plot
- IIS - Assign a custom count to an application pool : Windows user password "invalid"
- Compare two data sets from different periods
- Identify sequences in alphanumeric strings in R
- SAS code to Identify records from the input having a difference of >31 days and delete
- Script using PyQgis is doing error, probably access memory
- How to identify points on a pca residual qqplot in R?
- Identify text pattern in R dataframe
- Keep only the hours for which the value have not changed within the hour R
- how to train a neural network in python to identify pattern of generating a number from a list
- Google script web app running as me - identify actual user
- Split pdf pages in two based on the content
- How to uniquely identify devices connected to the GW in Thingsboard
- MS-Word VBA How to Identify click object
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Ive found the .tmp.bat is part of a package called ITSupport247 I dont know how it got onto my box, but I suspect it was silently installed along with other software updates.
I found it by running ProcessMonitor, filtering for path contains .tmp.bat, and just letting it run until I started getting some events.
Should have thought of ProcessMonitor right away.