Solve the problem of automatically cutting out to the desktop in full screen game (ii)

about full-screen games, like League of Legends, games, automatic cutting to the desktop problem, previously released a resolved issue. Today comes a similar question, of course, using the front-end process tool to find out what process is causing the game to be cut out. After observation for Update.exe this process is caused. Then you need to find the source of the file. By finding the path, it is found that the file is particularly random, transforms the directory arbitrarily, and does not see its parent process through the software.
    650) this.width=650; "alt=" Picture "src=" http://r.photo.store.qq.com/psb?/cae19df4-fcab-4e2b-bd16-4727d60e281d/ zq5v7e6qiojeitmdyyoxryssrwyp7msslt2nx5t.3ew!/o/df0baaaaaaaa&bo=. aezafgbgqedacu! "style=" Vertical-align:top;font-family:arial;font-size:14px;line-height:22.4px;white-space: normal;width:504px;height:281px; "/>
650) this.width=650; "alt=" Picture "src=" http://b347.photo.store.qq.com/psb?/cae19df4-fcab-4e2b-bd16-4727d60e281d/ uhxlryv2g9o*4ajwvn1fojim0s3yayt7kimjnoffvxq!/b/dfsbaaaaaaaa&bo=zapsaqaaaaafajc! "style=" vertical-align:top; font-family:arial;font-size:14px;line-height:22.4px;white-space:normal;width:868px;height:466px; "/>
then only with other software. Open Processexplorer, observe all processes, discover that there is an update, but also cannot observe the parent process. Then end this process and use the monitoring tools of windowsmonitor to monitor. Later, the update process is discovered to start automatically. Well, look at the logs of the surveillance .
650) this.width=650; "alt=" Picture "src=" http://b148.photo.store.qq.com/psb?/cae19df4-fcab-4e2b-bd16-4727d60e281d/ E5maybvyewddmglvyvetk5o2xy7. irzn0esvwqx6di!/b/djqaaaaaaaaa&bo=6alyaqaaaaafaba! "style=" VERTICAL-ALIGN:TOP;WIDTH:744PX;HEIGHT:472PX; >
fromIt is not difficult to see in the log that the file path, and the name of the parent process being executed, is a random process named "Uzilzy.exe", and if you press c:\windows\syswow64\ Uzilyzy.exe path to find this parent process program is not found, the proof that the program has been automatically deleted after execution. and generate a random directory of Update.exe. Of course the program directory that executes the command is C:\Program Files (X86) \client\updage.exe, so open to see what this file is:
650) this.width=650; "alt=" Picture "src=" http://r.photo.store.qq.com/psb?/cae19df4-fcab-4e2b-bd16-4727d60e281d/* sekw7wdpydg4qa54f9dnfpgwrchgmwrnmwob5zwuva!/o/df0baaaaaaaa&bo=ewoaasiddgmfah0! "style=" vertical-align:top; width:870px;height:707px; "/>


650) this.width=650; "alt=" Picture "src=" http://b349.photo.store.qq.com/psb?/cae19df4-fcab-4e2b-bd16-4727d60e281d/ 2zxcq6npa4ubs5lujeclnn0ck0om6nnz6acxjgaei.g!/b/df0baaaaaaaa&bo=yam8agaaaaafany! "style=" vertical-align:top; width:870px;height:514px; "/>


after learning that this directory is the billing software Ike bar file directory. Then the cause of the problem is found.

(This article is organized by WALKALONE100, respecting the fruits of others ' work.) Please indicate the source of the article reproduced elsewhere. Thank you! ) 

This article is from the "WALKALONE100 blog" blog, please be sure to keep this source http://walkalone100.blog.51cto.com/6159025/1836819

Solve the problem of automatically cutting out to the desktop in full screen game (ii)