Hello,
This one is made to find malicious software who want
to mask themself.
He use lists of prog as shown in the task manager
He works with three text files.
********** memopage\ReferenceList.txt
is the list of prog with no problem,you modify it manually with notepad
********** memopage\ActualList.txt
is the generated list by find_intruder
********** memopage\SuspectList.txt
Is the result of the comparison between the ReferenceList and the ActualList.txt
In SuspectList.txt you must find all that is not usual .
You must made a search on the internet to know what they are.
If they are normal prog (updater and other prog) you can add them to
the ReferenceList.txt with the notepad.
If They are malware,you have perhaps there disk location in the text file.
If not,make a DIR /S/B on c:\ in a DOS windows (cmd.exe).
Delet them from memory with the task manager and erase them from the disk.
The ReferenceList.txt is made under windows 10,you must modify it if you have another system
The SuspectList.txt is shown in the notepad only if there is something unusual.
Made the same thing for driver and services.
The antimalware need at least Win 7
