Post by drcard on Jun 18, 2021 8:35:06 GMT -5
Create a List of Running Processes
Overview:
Knowing which processes are currently running is necessary information when troubleshooting a problem or change in the performance of a PC. This can help determine which file(s) is causing the problem/change by finding those few processes that are running out of the hundreds of processes installed on the PC. It would best to have a list of running processes before any problems/change occurred and then compare that to a current list since the problem/change began. It would be very easy to see what added process caused the problem/change. You can view the list of “running” processes in Task Manager, but you can’t export the list of “running” processes to a text file for keeping and Task Manager Processes displays any process that has ran since the system was last booted even if that process is no longer running. The Task Manager doesn’t really show a list of processes that are currently running. To get a list of currently running process requires third party applications or a Windows command in the Windows Command Processor (Command Prompt). The following instructions explain how to create a list of running processes and save as a text file using a Windows command.
Note: This works for all versions of Windows since XP.
Create a List of Running Processes
• Open a Windows Command prompt as administrator – WinKey + R to open Run box. Type in cmd. Press Ctrl + Shift + Enter keys at the same time. Press OK to UAC query.
• At the prompt (>), enter the following command as noted. The first command below has underscores (_) to show where a space must go and must be replaced with a space in the actual command. The second command is the same command with spaces replacing the underscores so you can copy and paste the command into the Command Window on your PC.
tasklist_/fi_“STATUS_eq_running”_>_”%USERPROFILE%\My_Documents\Processes.txt”
tasklist /fi “STATUS eq running” > ”%USERPROFILE%\My Documents\Processes.txt”
• If you entered the command correctly, the prompt will return to the prompt like it was before you entered the command. It will appear that nothing happened, but in that logged on user’s My Documents folder will be the Processes.txt file which you can open and view the list of running processes when that command was entered.
• Each time you run that command it will replace the current Processes.txt file with the new one. If you wish to save a copy of running processes when all was OK, then change the name of the current Processes.txt file (I add the date it was made to the name, such as Processes06152021.txt).
You can find the purpose of any process by copying the image name from the list and paste into Google or any other search engine. Be sure to copy and paste because the difference between a necessary file’s name and a malware file’s name may be only one letter or a period.
Overview:
Knowing which processes are currently running is necessary information when troubleshooting a problem or change in the performance of a PC. This can help determine which file(s) is causing the problem/change by finding those few processes that are running out of the hundreds of processes installed on the PC. It would best to have a list of running processes before any problems/change occurred and then compare that to a current list since the problem/change began. It would be very easy to see what added process caused the problem/change. You can view the list of “running” processes in Task Manager, but you can’t export the list of “running” processes to a text file for keeping and Task Manager Processes displays any process that has ran since the system was last booted even if that process is no longer running. The Task Manager doesn’t really show a list of processes that are currently running. To get a list of currently running process requires third party applications or a Windows command in the Windows Command Processor (Command Prompt). The following instructions explain how to create a list of running processes and save as a text file using a Windows command.
Note: This works for all versions of Windows since XP.
Create a List of Running Processes
• Open a Windows Command prompt as administrator – WinKey + R to open Run box. Type in cmd. Press Ctrl + Shift + Enter keys at the same time. Press OK to UAC query.
• At the prompt (>), enter the following command as noted. The first command below has underscores (_) to show where a space must go and must be replaced with a space in the actual command. The second command is the same command with spaces replacing the underscores so you can copy and paste the command into the Command Window on your PC.
tasklist_/fi_“STATUS_eq_running”_>_”%USERPROFILE%\My_Documents\Processes.txt”
tasklist /fi “STATUS eq running” > ”%USERPROFILE%\My Documents\Processes.txt”
• If you entered the command correctly, the prompt will return to the prompt like it was before you entered the command. It will appear that nothing happened, but in that logged on user’s My Documents folder will be the Processes.txt file which you can open and view the list of running processes when that command was entered.
• Each time you run that command it will replace the current Processes.txt file with the new one. If you wish to save a copy of running processes when all was OK, then change the name of the current Processes.txt file (I add the date it was made to the name, such as Processes06152021.txt).
You can find the purpose of any process by copying the image name from the list and paste into Google or any other search engine. Be sure to copy and paste because the difference between a necessary file’s name and a malware file’s name may be only one letter or a period.