Temporary event consumer that terminates any new instances of Notepad.exe as soon as those new instances are created.
strComputer = "."Set objWMIService = GetObject("winmgmts:" _& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")Set colMonitoredProcesses = objWMIService. _ExecNotificationQuery("select * from __instancecreationevent " _& " within 1 where TargetInstance isa 'Win32_Process'")i = 0Do While i = 0Set objLatestProcess = colMonitoredProcesses.NextEventIf objLatestProcess.TargetInstance.Name = "notepad.exe" ThenobjLatestProcess.TargetInstance.TerminateEnd IfLoop
This is a VB Script, this can be used by saving the file in .vbs file