1.    25 Feb 2016 #1
    Join Date : Aug 2015
    Posts : 60
    Windows 9 (aka Windows 10)

    Processes with elevation terminated randomly?


    Lately, I've been experiencing a weird and new problem: Programs I run with elevation (i.e. as Administrator) have been randomly terminated. I'm not sure why this is happening. Is this a new Windows 10 security feature?

    Examples: I run Process Hacker with elevation to access all its features and allow for services to be stopped, processes to be killed, etc. But Process Hacker is one of the applications that is itself being terminated somehow at seemingly random intervals. It will be running, tray icons and all, then suddenly be terminated. I won't know it has been killed until I move the mouse cursor over its tray icons, which disappear as soon as I do.

    There are several other examples of programs I always run with elevation. They are all being terminated at the same time, but I'm not doing it. It's pissing me off.

    Nothing jumps out at me in the event logs.

    Any ideas?
      My ComputerSystem Spec
  2.    26 Feb 2016 #2
    Join Date : Sep 2014
    Posts : 93
    Windows

    Is this a new Windows 10 security feature?
    No.

    Process Hacker is one of the applications that is itself being terminated
    Do you have the same problem with Task Manager or Regedit?
      My ComputerSystem Spec
  3.    26 Feb 2016 #3
    Join Date : Aug 2015
    Posts : 60
    Windows 9 (aka Windows 10)
    Thread Starter

    I can run task manager and regedit just fine. But, my antivirus has suddenly started having issues as well. Too many malware red flags. I'm going to restore from a backup from about a week ago.
      My ComputerSystem Spec
  4.    26 Feb 2016 #4
    Join Date : Sep 2014
    Posts : 93
    Windows

    Quote Originally Posted by meh View Post
    I can run task manager and regedit just fine. But, my antivirus has suddenly started having issues as well. Too many malware red flags. I'm going to restore from a backup from about a week ago.
    Yeah, it's likely malware terminating these processes and it's strange that they targeted Process Hacker but not built-in tools.

    If you still have issues with Process Hacker being terminated, just send me a PM and I'll link you a custom build that bypasses the detection used by the malware (I'm one of project maintainers: About - Process Hacker).

    -dmex
      My ComputerSystem Spec
  5.    26 Feb 2016 #5
    Join Date : Aug 2015
    Posts : 60
    Windows 9 (aka Windows 10)
    Thread Starter

    I recognized your nick, couldn't remember where. Well I appreciate your work; PH is one of a very few applications I refuse to do without. I work for a huge company and was on a call with a guy from China, sharing my screen, and he saw that I was running PH. He recognized it, and said "That's a really nice utility." Not far from home I realize. /End of boring story.

    Anyway, I restored from a full image backup. Scanned with F-Secure online scanner, came back clean. Scanning with Eset online scanner and HouseCall now (taking forever). Scanned with MBAM, which (as always) found nothing. Anything else I should do? I'm not seeing the find-hidden-process function in PH anymore.

    PS wtf is that avatar
    Last edited by meh; 26 Feb 2016 at 22:49.
      My ComputerSystem Spec
  6.    26 Feb 2016 #6
    Join Date : Nov 2015
    Posts : 299
    Win-10 Pro x64

    Anything else I should do?
    Hi meh,

    I see that you and dmex are working on a solution, but I was wondering about the Reliability History? That should show the red warnings, with an option to find a solution. I saw that you already looked over the Event Log, so perhaps this won't show anything additional, but just a thought.

    b1rd

    PS- Article is for Win-8, but it's the same.
      My ComputerSystem Spec
  7.    26 Feb 2016 #7
    Join Date : Aug 2015
    Posts : 60
    Windows 9 (aka Windows 10)
    Thread Starter

    Before I restored, the event log wasn't really showing anything, but that's the weird bit... It did have a bunch of unusual entries about the logs being full or something, but none of the usual stuff I'm used to seeing. At least some of the logs wouldn't seem to open at all. At the time, I thought the scumbag malware may have been doing that to prevent the use of event logs as a diagnostic measure, but I'm not sure.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Solved The requested elevation requires elevation
I have seen this question asked before and attempted a few solutions. Fixing computer problems is not my forte and I would really like an easy to followed solution. I have downloaded the program Apache OpenOffice 4.1.2. It has converted most of my...
Software and Apps
The Windows Image Acquisition (WIA) service terminated unexpectedly.
The Windows Image Acquisition (WIA) service terminated unexpectedly. It has done this 1 time(s). That's the Event Viewer error message at every reboot (appears to occur during the shutdown phase). There is a concurrent fault listed for the...
Performance & Maintenance
Solved Admin elevation
I hate appearing stupid, but it is the only way I learn... I have two user accounts on this computer, one as Administrator and the other as, well, let's call it "me". Both are Administrator accounts. So why is it that I regularly am either...
General Support
Live Mail 2012 server has unexpedtedly terminated
Since moving to 10 I receive the following every time I open up Live Mail. "Your serer has unexpectedly terminated the connection." Additionally up comes, "Windows Live Mail moving messages." This goes on for a long time. It eventually says, "the...
Browsers and Email
Solved Elevation error when trying to enter admin password
whenever i try to enter my account info to run a file as an admin, it gives me the error that "this operation requires elevation." any ideas?
User Accounts and Family Safety
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 11:09.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums