Wednesday, 16 November 2011

More Windows tasks

Most people know of the Windows Task-manager GUI application. There are many times when it is better to use a CLI (command line interface). One such example would be where a script tests what is running.

The command “tasklist” is a Windows command that allows just this.

image

Just like its GUI cousin, you can also list services using this tool. The “/svc” option for instance displays the services hosted in each process.

image

More, you can filter such as in the example below where we have selected processes that do not respond to task-monitoring requests.image

Knowing what you are running is the first part of stopping malware.

No comments: