Sunday, May 29, 2011

TaskManager.xls Alternative Application to Windows Task Manager

There are instances when windows task manager/ Process Explorer is disabled by malware infections and the malware doesn't allow you to enable it. In such a case there is an alternative to windows task manager or process explorer named TaskManager.xls.
           As the name suggests it is a Excel/VBA and can be run on any windows operating system.  It can list the running processes; and terminate, suspend or resume selected processes.
           It will also come in handy when fixing an infected machine, where the malware prevents one from launching Task Manager or Process Explorer.

          Push  button “List processes” to list all processes:
Here’s how you would use it to disable malware. List processes, identify malicious processes, type command s (suspend) in column Command for the malicious processes you want to disable. Push button “Execute commands”, this will suspend the selected processes.
Now terminate them with the t command:

 Doing this in 2 steps (suspend and terminate) in stead of just terminating, is more suited for multi-process malware that monitors itself.

Download TaskManager.xls

Thanks to Didier Stevens
  

No comments:

Post a Comment