Otherwise, it adds a VirusTotal column to Process Explorer. (The same path’s also available via the right-click menu.) If this is the very first time you’ve scanned a process, it will take you to the VirusTotal Terms of Service.
Process Explorer uses VirusTotal, a Google project that checks questionable processes against the databases of all the major antivirus companies.įirst, click the suspicious process, then go to Options > Check. But you don’t need to be a malware-busting pro like Russinovich to figure out whether a suspicious-looking process is a virus. For some really in-depth examples, you can always check out Mark Russinovich’s world-class “The Case Of…” series of blog posts and videos. Process Explorer is especially useful if you’re hunting malware. Just type your filename, and it’ll tell you which process is locking that file. There’s a lot more information here-the scrolling line charts at the top of the window, the color codes, the lower pane showing DLLs and handles-but for now let’s focus on the process list.īut what if you don’t know which process is holding your file hostage? Are you supposed to go through every process in the list hunting for your file? You could, but there’s a much easier way: Click Find > Find Handle or DLL, or use the Ctrl+F keyboard shortcut.
This list is constantly updating, but if you want to freeze it in time-say, to examine a process that appears and disappears quicker than you can click on it-you can hit the space bar to pause the updates. If you’d prefer an alphabetical listing instead, just click the “process name” column heading. The processes are presented hierarchically, which means if a process spawns another process, the child process will be listed nested underneath the parent. (Pro tip: Micronsoft is not a legitimate software manufacturer.) You can customize your columns to include more or less information by right-clicking on the column heading, just like any other program with sortable columns. It lists the process name, the process description, CPU and memory usage, and the company name of the software’s creator-something that’s very useful when you’re malware hunting. This shouldn’t be completely unfamiliar if you’ve used the Details tab in Task Manager (aka the Processes tab in Windows XP and earlier). In the top half of the main window, you’ll see a list of processes.
0 kommentar(er)
