Author: TorstenKarusseit
Subject: ShellRunas
Posted: 28 June 2013 at 1:20pm
for Win7 I found the following way:
- save the pid of ShellRunas,
- wait for completion of ShellRunas,
- look for process with parentPid equals to pid of ShellRunas.
Unfortunately for WinXP this doesn't work,
here ShellRunas uses some services to launch the wanted app,
so it's parent process is svrhost.exe,
and there the trace is lost.
What may I do ?
Subject: ShellRunas
Posted: 28 June 2013 at 1:20pm
for Win7 I found the following way:
- save the pid of ShellRunas,
- wait for completion of ShellRunas,
- look for process with parentPid equals to pid of ShellRunas.
Unfortunately for WinXP this doesn't work,
here ShellRunas uses some services to launch the wanted app,
so it's parent process is svrhost.exe,
and there the trace is lost.
What may I do ?