9

I've started to notice a strange program that just flashes about every minute in my taskbar. I've uninstalled any strange software trough Windows Add or Remove Programs. It's quite annoying.

And my question is if it's there a software that can log or record processes that start and quit. I've tried to do this with Microsoft Process Monitor - procmon.exe, but there is no hope finding what I want.

Screen shot of the taskbar icon:

icon

Heptite
  • 19,383
  • 5
  • 58
  • 71
VladC
  • 133
  • 7
  • 1
    ProcMon will help with this.. Exactly what did you try with ProcMon? – Ƭᴇcʜιᴇ007 Feb 15 '14 at 20:27
  • Captured processes until software flashed again, then searching stop the capturing and search for any suspicious process. But I didn't find nothing. Is there an alternative to ProcMon? – VladC Feb 15 '14 at 20:34
  • The icons resembles a small printer. It reminds me of the [Interactive Services Detection](http://blogs.msdn.com/b/patricka/archive/2010/04/27/what-is-interactive-services-detection-and-why-is-it-blinking-at-me.aspx) program, `UI0Detect.exe`, which has [this icon](http://i.stack.imgur.com/DvCiH.png). – and31415 Feb 15 '14 at 22:40
  • @and31415 , Yes the icon was from the Interactive Services Detecion. I'll describe the problem I have in my answer in a minute. – VladC Feb 16 '14 at 14:01

2 Answers2

11

Process Monitor can achieve this:

Set the filter to "Operation is 'Process Create'" and "Operation is 'Process Start'" and watch events coming in:
Instructions for using Process Monitor

A more complicated way to do this is to use the Group Policy editor and then activate "process auditing", but that's a bit more complicated than just using Process Monitor.

akira
  • 61,009
  • 17
  • 135
  • 165
4

The problem was caused by a software by Huawei Mobile Partner (DiGi Net Mobile - my version), controller for my internet stick from my ISP. First of all RunLiveUpd.exe is the cause, I think triggering Interactive Services Detecion - UI0Detect.exe showing the icon in taskbar for a short amount of time.

Here is the screen shot of Process Monitor showing the processes that started: Screenshot of Process Monitor Finally I've chosen to reinstall DiGi Net Mobile, and the problem disappeared. Certainly this is some sort of a bug.

VladC
  • 133
  • 7