View system process details with WMIC

The Windows Task Manager and CMD command line display system processes have a major defect, that is, they cannot view the path of the corresponding program of the process, which makes the virus accessible, virus constructs the name of a system process, which makes it difficult for us to judge.

 

In fact, Windows comes with a WMIC tool, you can view the details of the process:

 

Click Start, Run, or press win + R to open the run dialog box and enter WMIC"

 

A command window is displayed.

Show WMIC: Root/CLI>

 

Enter WMIC: Root/CLI> Process

 

In this way, you can see the path of the application corresponding to each process, and it is easy to determine whether the process is poisoned.

 

WMI (Windows Management Instrumentation, Windows Management Specification) is a core management technology in windows. It allows you to access, configure, manage, and monitor almost all windows resources, for example, obtain the list of installed programs on the local or remote computer. However, WMI is not easy to understand and use, so Microsoft launched WMIC (the extra C is the abbreviation of command-line), which is actually a client program, WMI provides a simple and easy-to-use command line interface.