Say I have process explorer showing me that I have an app called
I kill it, but it just starts up again. I have checked to make sure it does not have a service (by right clicking->Properties on it in Process Explorer).
So, I am fairly sure there is another process out there (maybe called something benign like
DisplayDriver.exe) that is starting (and restarting)
How can I find out what the name of the process that is restarting the evil process is?