You can download and install Process Monitor on your machine (it’s a 1.26 MB download) or you can fun it from. With the information that you collect, you can analyze the malware you find and determine what it does and how to get rid of it. Its filtering is non-destructive so you don’t have to worry about losing information when you set filters. This tool is used to capture all sorts of real-time data about the processes on a machine, including image path, command line, user and session ID, and the relationships of processes. The current version of Process Monitor is v2.95 and you can download it from the Microsoft TechNet web site. Process Monitor replaces the old FileMon and RegMon tools and combines and updates the functionality of both. The new version uses less memory, and it now displays GPU usage and gives you the ability to restart services. Since the publication of the first article, a new version of Process Explorer (v15.01) was released this month, so be sure to get the latest version here. In parts 1 and 2 of this three-part series, we looked at how you can use Process Explorer and Autoruns to identify malicious software on a Windows system.

Hunt Down and Kill Malware with Sysinternals Tools (Part 2).

Hunt Down and Kill Malware with Sysinternals Tools (Part 1).

If you would like to read the other parts in this article series please go to:

Sysinternals process monitor download