5 replies to this topic

[DaChew]

Are there any simple safe programs for getting a list of running processes on a computer

I would prefer not to use HJT as it's hard to access just that and Smitfraudfix wants to wipe out the Hosts file and reset the clock to military time

[JeanInMontana]

WinPatrol

[DaChew]

DaChew, on Sep 17 2008, 10:12 AM, said:

Are there any simple safe programs for getting a list of running processes on a computer

I would prefer not to use HJT as it's hard to access just that and Smitfraudfix wants to wipe out the Hosts file and reset the clock to military time

if it was a snake it would have bitten me

start

run

cmd

tasklist

rightclick/select all

enter

paste into a reply


Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\bob>tasklist

Image Name PID Session Name Session# Mem Usage
========================= ====== ================ ======== ============
System Idle Process 0 Console 0 28 K
System 4 Console 0 236 K
smss.exe 376 Console 0 212 K
csrss.exe 468 Console 0 1,872 K
winlogon.exe 636 Console 0 5,432 K
services.exe 684 Console 0 1,832 K
lsass.exe 696 Console 0 1,376 K
svchost.exe 876 Console 0 2,548 K
svchost.exe 940 Console 0 2,160 K
svchost.exe 1048 Console 0 11,456 K
svchost.exe 1124 Console 0 1,544 K
explorer.exe 1364 Console 0 15,752 K
spoolsv.exe 1636 Console 0 1,664 K
svchost.exe 1804 Console 0 2,356 K
jusched.exe 184 Console 0 444 K
alg.exe 396 Console 0 1,188 K
dvdflick.exe 440 Console 0 15,928 K
iexplore.exe 484 Console 0 25,272 K
cmd.exe 592 Console 0 2,552 K
tasklist.exe 424 Console 0 4,056 K
wmiprvse.exe 1660 Console 0 5,540 K

C:\Documents and Settings\bob>

[AdvancedSetup]

[indent]

TASKLIST [/S system [/U username [/P [password]]]]
		 [/M [module] | /SVC | /V] [/FI filter] [/FO format] [/NH]

Description:
	This tool displays a list of currently running processes on
	either a local or remote machine.

Parameter List:
   /S	 system		   Specifies the remote system to connect to.

   /U	 [domain\]user	Specifies the user context under which
						   the command should execute.

   /P	 [password]	   Specifies the password for the given
						   user context. Prompts for input if omitted.

   /M	 [module]		 Lists all tasks currently using the given
						   exe/dll name. If the module name is not
						   specified all loaded modules are displayed.

   /SVC					Displays services hosted in each process.

   /V					  Displays verbose task information.

   /FI	filter		   Displays a set of tasks that match a
						   given criteria specified by the filter.

   /FO	format		   Specifies the output format.
						   Valid values: "TABLE", "LIST", "CSV".

   /NH					 Specifies that the "Column Header" should
						   not be displayed in the output.
						   Valid only for "TABLE" and "CSV" formats.

   /?					  Displays this help message.

Filters:
	Filter Name	 Valid Operators		   Valid Value(s)
	-----------	 ---------------		   --------------------------
	STATUS		  eq, ne					RUNNING |
											  NOT RESPONDING | UNKNOWN
	IMAGENAME	   eq, ne					Image name
	PID			 eq, ne, gt, lt, ge, le	PID value
	SESSION		 eq, ne, gt, lt, ge, le	Session number
	SESSIONNAME	 eq, ne					Session name
	CPUTIME		 eq, ne, gt, lt, ge, le	CPU time in the format
											  of hh:mm:ss.
											  hh - hours,
											  mm - minutes, ss - seconds
	MEMUSAGE		eq, ne, gt, lt, ge, le	Memory usage in KB
	USERNAME		eq, ne					User name in [domain\]user
											  format
	SERVICES		eq, ne					Service name
	WINDOWTITLE	 eq, ne					Window title
	MODULES		 eq, ne					DLL name

NOTE: "WINDOWTITLE" and "STATUS" filters are not supported when querying
	  a remote machine.

Examples:
	TASKLIST
	TASKLIST /M
	TASKLIST /V /FO CSV
	TASKLIST /SVC /FO LIST
	TASKLIST /M wbem*
	TASKLIST /S system /FO LIST
	TASKLIST /S system /U domain\username /FO CSV /NH
	TASKLIST /S system /U username /P password /FO TABLE /NH
	TASKLIST /FI "USERNAME ne NT AUTHORITY\SYSTEM" /FI "STATUS eq running"

[/indent]

[Merijn]

Try this app, it integrats into Task Manager and provides information on each one:

http://lifehacker.com/399277/processquickl...-a-process-does

[DaChew]

Quote

for getting a list of running processes on a computer

let me repeat, this is not for my ultra power user setup but for support options in a triage malware security forum

thanks guys