I sometimes get a file called tmp#####.tmp.bat in my user/appdata/local/temp folder I am suspecting its created by some Cannon printter utilities I thought I would put a FileSystemWatcher on the folder and catch the creator in the act I can catch the creation of the file, but how do I identify the process creating it? Any ideas? I would like to log the creation and the process name creating it.
Identify process that is creating a file
113 Views Asked by Bill At
1
There are 1 best solutions below
Related Questions in FILE
- Saving FileSystemInfo Array to File
- C programming: Create and write 2D array of files as function
- How can I change a specific line in a file with node js?
- Grabbing Edits from two strings
- In Android, would it be possible to open a file in the 'values' folder and to read its content?
- Using paths bonded to a XCode project to be shared
- Why am i getting these invalid characters before my file data?
- Optimum directory structure for large number of files to display on a page
- C Reading binary file with fread()
- Renaming a File() object in JavaScript
- How to write the current time to a new line of a .txt file on php execution
- introduce c++ into html
- How can I create a simple text file on a windows phone (8.1) that can be accessed trough USB cable?
- Pop-up and download zip file in ASP.NET
- Using access() in C
Related Questions in PROCESS
- I run an EXE program from a Windows Service but I can't see form C#?
- How can launch an external process from java and still be able to interact with this process?
- Unable to start program outside Windows folder
- Check if app is already running, and if kill it C#
- How to process A direct send message to a thread of process B?
- Batch script ignores %ERRORLEVEL% or using previously set one
- How do I know the last sched time of a process
- How to close a file handle which came from a parent process C#
- Execute 'ksetup.exe' commandline command programmatically
- Process ran as different user - web service call
- Starting process from .NET app and Attachment Execution Service
- Share info between two processes - what's the safest way?
- Independent process in php
- Managing a Process inside a Thread
- erlang processes and message passing architecture
Related Questions in FILESYSTEMWATCHER
- FileSystemWatcher no longer has old filename in some Windows 7 machines
- Remote path watcher/lookup with time interval
- Using a FileSystemWatcher with Windows Service
- Directory.Exists and FileSystemWatcher
- How to use FileSystemWatcher to refresh text being returned from converter
- How to make FileSystemWatcher wait to raise the Created Event until the Directory is named?
- FileSystemWatcher - Changed Event for ReadOnly Attribute
- Identify process that is creating a file
- powershell filewatcher 2012 r2 needs Admin Credentials
- How to monitor a logfile that seems to be open all the time (much like notepad++ does)?
- Make an event when a file as not arrived after a certain time
- C# FileSystemWatcher high cpu load when no change happen to directory
- How to override an event handler that is not marked as virtual?
- filesystemwatcher check last detection
- WPF DependencyObject calling thread exception
Related Questions in IDENTIFY
- Identifying a pdf file and upload it to folder
- How to identify if Google Adsense code is submitted?
- r remove outliers from a list of data.frames and make a new list of data.frames?
- Identify process that is creating a file
- Determine the sender from a received DatagramPacket in a Multicast group
- android: Identify individual items in row of ListView?
- Rails 3 & Devise: Keeping track of who-owns-profile for user posts
- Usage of value returned by 'identify' utility of ImageMagick in CMD
- Problems with the identify function in the lme residuals
- BASH - math image size
- What is this O(N*k) sorting algorithm?
- Identification of Dynamic List items
- Identify dynamically added views for OnclickListener
- Identifying date in text file
- SQL: Correctly identify and correct(if possible) names in database
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Ive found the .tmp.bat is part of a package called ITSupport247 I dont know how it got onto my box, but I suspect it was silently installed along with other software updates.
I found it by running ProcessMonitor, filtering for path contains .tmp.bat, and just letting it run until I started getting some events.
Should have thought of ProcessMonitor right away.