"Unlock computer" feature

[Gintaras]

Function log_processes
Trigger $p 0x3 ""     

Code:

Copy      Help

function event pid pidparent $name
;event: 1 started, 2 ended, 4 running
out "%i %i %s %i" event pid name timeGetTime

Create this function. Paste the trigger ($p 0x3 "") in the Trigger field on the toolbar.
It shows started and ended processes.
Does it show qmtul (in QM output pane) when you run it (press How, or from Explorer)?
Post here everything that is in QM output pane.