[dba-Tech] Latest update of MS SysInternal's Process Explorer adds interaction with VirusTotal.com

John Bartow jbartow at winhaven.net
Sat Feb 1 12:42:31 CST 2014


Microsoft's Windows Sysinternal Suite has released the latest version of
Process Explorer v16.0 that has an awesome feature which allows a user to
scan any running program files with a web-based multi-antivirus scanner
VirusTotal.

Process Explorer sends the hashes of images and files shown in the process
and DLL views to VirusTotal, and if they have been previously scanned, it
reports how many antivirus engines identified them as possibly malicious.

This new version of 'Process Explorer' is better than ever before, and is
quite fast that allows you to find unwanted malware immediately and
respective hyper-linked result takes you to VirusTotal.com's detailed report
page and there you can even submit more files for scanning.

Whenever your system starts doing sluggish behavior, you try to find out
what all the processes are running and what their state is, or any deadlock
has occurred? 

Process Explorer shows information about handles and DLLs of running
processes. This tool has a powerful search capability that quickly shows you
which processes have particular handles opened or DLLs loaded.

The unique capabilities of Process Explorer make it useful for tracking down
DLL-version problems or handle leaks, and provide insight into the way
Windows and applications work.

Now you can use VirusTotal to scan the file of a running process on your
computer, and to do that you can right-click on the file and select 'Check
VirusTotal'.



More information about the dba-Tech mailing list