Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 3 subscribers
  • Views 2880 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Users getting Access Denied CMD window

freebird317

I am not sure how many and it is totally at random but users getting a Access Denied CMD window that loops lots and lots of CMD windows that say Access Denied.  Procmon showing SAVService.exe firing the cmd running c:\programdatac:\windows\cmd.exe \c rd \s \q "C:\programdata".  There is more to the running cmd but I am unable to see it all.  This will go on for awhile and eventually stop.



This thread was automatically locked due to age.
Parents
  • 0

    Can you post a screenshot of the process tree in Process Monitor which shows the cmd.exe process being a child process of SAVService.exe. 

    Can you also show/paste the command line being executed? Or show it in the screenshot?

    This sounds very odd.


Reply
  • 0

    Can you post a screenshot of the process tree in Process Monitor which shows the cmd.exe process being a child process of SAVService.exe. 

    Can you also show/paste the command line being executed? Or show it in the screenshot?

    This sounds very odd.


Children
No Data
Unfiltered HTML