#process-explorer

Diagnosing Live Systems with Sysinternals: Process Explorer and Autoruns

Using Process Explorer and Autoruns to inspect a suspicious running process and audit every autostart location that Task Manager doesn't show.