You may now notice that there is a new heading at the top of this tool called Virus Total. Simply accept the terms and this window will close. You will then be presented with the VirusTotal terms of service. We can do this by right clicking on the process and navigating to the Check VirusTotal section. If you have identified a process which looks suspicious, we can scan Virus Total for this process to determine if it is in fact malicious. This will open your default browser and search for the name of the process. We can search for the name of a particular process by right clicking on the process and navigating to the Search Online section at the bottom. Be careful when doing this, as setting a process to be considered as a low priority when it should be a high priority process could cause performance issues in your machine. You can set the level of priority your system places on a particular process by right clicking on the process and navigating to the Set Priority section. When you first open the tool, you will see every process currently running on your system. I will then demonstrate how you would scan a suspicious process using VirusTotal to determine if it is malicious. We will use this tool to analyse the process running on our Windows machines. This can be done from the following link: The first step for this lab is to download the Process Explorer tool. You can use a Windows machine for this lab. Process explorer is used as a free advanced task manager and system monitor. This is a set of more than 70 free tools used to monitor, manage, and troubleshoot the Windows operating system. Process Explorer is a tool which is part of the Microsoft Windows Sysinternals suite. Learn how to use Process Explorer to find and scan suspicious processes for malware in Windows.

Process monitor sysinternals download