Force Close of Explorer Opened w/ RUN

[anon23294430]

@anon77170705 mentions Clarion’s RUN uses the createprocess api.

Here is some code which shows some of the differences createprocess can do, like inherited access tokens aka bInheritHandles.

Clarion Run vs CreateProcessA

So there is a a BOOL parameter called bInheritHandles in the CreateProcessA api, the first image shows it Off/0/false the second image shows it On/1/true, the main point being when its Off/0/false, you dont have a clue what program started it, at least I cant find anything from ProcessExplorer! Although the images dont show it in the tooltip, when you only have notepad.exe ie no path in the applicationname or commandline, the tooltip will only show CommandLine as “notepad.exe” Inher…

There is a lot of info on this thread to call a process or run a program.

I havent looked at calling Explorer so I dont know if its different but SysInternals ProcessExplorer should give you the necessary insight. You can see partial screenshots of ProcessExplorer in that link to the thread posted just above which shows the difference between the bInheritHandles.

As there is code there, you could trying using it to call Explorer and then see if Oddjob can kill it.

Dont know if its something OddJob should be able to do or not though.