New
#11
Download and run Process Explorer. Configure it per this tutorial:
Process Explorer + VirusTotal (to check all processes with 50+ AV's)
In case there is an app starting and stopping real fast, set these options:
Options > Difference Highlight Duration... = 9 seconds.
View > Update Speed = 0.5 seconds
See if the refresh events correlate with something shown in Process Explorer.
If need be, we can move on to Process Monitor.