Scan for Malware Using Process Explorer and Virus Total

The file could be a potential threat specially if it is not located in this path: c:-windows-system32 or c:-winnt-system32

Hi everyone, I recently discovered that Sysinternals' Process Explorer allows users to upload all active processes to VirusTotal in one go.

啟用方式非常簡單，只需要勾選「Options」選單中「VirusTotal.com」選單下的「Check VirusTotal.com」即可。在啟動該選項後，Process Explorer 就會針對每個執行中的程式顯示 ...

We can do this by right clicking on the process and navigating to the Check VirusTotal section. You will then be presented with the VirusTotal terms of service.

Options > VirusTotal.com > Check VirusTotal.com, will allow Process Explorer to check hashes of all processes running. But, this can only detect ...

Hello, Appears to be a false positive, but you should check with the engine's developer (Lionic) to be sure.

□ Virus Total. 勾選. 這3項. 6. Page 6. □Options→Color Selection. □ 紫色Packed Images: 表示這個process 有. 特別的被加密處理過。 □ 通常正常的process 很少會這樣做 ...

In order to use VirusTotal to scan the file of a process running on your computer, you must right-click the file and select 'Check VirusTotal'.

啟用方式非常簡單，只需要勾選「Options」選單中「VirusTotal.com」選單下的「Check VirusTotal.com」即可。在啟動該選項後，Process Explorer 就會針對每個執行中的程式顯示 ...

In this video, Mark Scott shows you how to use Sysinternals' Process Explorer ...