Re: simple Q for advanced: how to find out what rundll32.exe is executing?



You may use the following script. Lists all the processes running in the
currently logged on user account.

- - -

strComputer = "."
Dim strUserName
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * From Win32_ComputerSystem")

For Each objItem in colItems
strUserName = objItem.UserName
Next

Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colProcessList = objWMIService.ExecQuery _
("SELECT * FROM Win32_Process")
For Each objProcess in colProcessList
colProperties = objProcess.GetOwner(strNameOfUser,strUserDomain)

If strUserDomain & "\" & strNameOfUser = strUserName Then
WScript.Echo "Process " & objProcess.Name & " is owned by " _
& strUserDomain & "\" & strNameOfUser & "."
End If
Next

- - -

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows XP Shell/User]
Windows® XP Troubleshooting http://www.winhelponline.com


"cap77" <capostolo@xxxxxxxxx> wrote in message
news:1140418408.866966.198750@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
hi, sorry for the confusion (blame this on my lack of experience with
this stuff and the fact that ive been trying to fix my computer for
hours!)

when i link to the sites you posted, i cant see how exactly i would run
those scripts myself... do you just copy and paste the commands into my
cmd file? or do i need to launch some other wmi program (the articles
reference logging onto a wmi service?

as you can see, i need some help translating to plain english.

finally, do you have a suggestion to see all users (local or networked)
and what programs they are running?

i have a vpn connection to a closed-end server (thru work) and need to
know what i am sending over to that server on an ongoing basis. i' ve
only ever had a traditional LAN DSL connection from one independent
home computer, and am having a difficult time tracking processes and
programs running off of my home computer when i am logged on via VPN
and also my regular internet connection. does this make sense?
thx, appreciate your patience


.



Relevant Pages

  • Re: Im new to scripting a I working on a project that I need some help with.
    ... After that the script ... >> that the user account is not valid. ... > it to the Administrators group: ... If the user does not have it, maybe a RunAs solution ...
    (microsoft.public.scripting.vbscript)
  • Re: Memory consumption PowerShell
    ... The mechanism of the Identity Management system (it is Novell Identity ... And we could initiate to run a script oout side the IDN 3.0. ... is the case we want to do, if a new user account was created. ... memory. ...
    (microsoft.public.windows.server.scripting)
  • Re: Im new to scripting a I working on a project that I need some help with.
    ... > on the local network taken care of, I can run a batch file that can do a run ... > that the user account is not valid. ... In the link below is a script that creates a new user account and adds ... Different RunAs products listed here, ...
    (microsoft.public.scripting.vbscript)
  • Re: Local account creation
    ... What I want to do is to use the script in a startup GPO so that there a generic local admin account on all computers for the helpdesk staff to logon to and perform troubleshooting/etc. ... Dim objNetwork, strComputer, strUser ... ' Specify name of local user account to be created. ...
    (microsoft.public.windows.server.scripting)
  • Re: Calling a function from a function
    ... I am having other problems making data available on a global basis within ... the script I am working on. ... on a global basis so that I can call the objOU variable from other functions ... So sinply Dim strusername on top of the code. ...
    (microsoft.public.scripting.vbscript)