Sometime ago I came across this situation:
Windows 7 machine infected with adware, ads tabs opening up in chrome out of nowhere. Pretty invasive stuff. In the end i got rid of it with some malware removal tool (adaware), but that's like the "i'm feeling lucky" approach.
Say it didn't work, there's no suspect browser plugin / extension in sight, so it's some kind of program getting spawned from time to time that opens up stuff in chrome. Let's say we've looked in the usual places (scheduler, startup registry entries, services ...) but found nothing or it's just too messy.
How do you go about tracing something like that ?
Any way to catch the process red-handed, as in some kind of system-wide debugger we can tell to attach itself to any process that tries to exec
chrome (or whatever call it is windows uses) so we can look at it before it goes away ?
Any dev / system / RE tool out there that can do that ?
Similar question came up a while back with no good answer.