Find xp_cmdshell in procs/jobs