task manager

[Ranger Fan]

I'm using XP SP3. I'd like to know how I can tell where a given .exe shown
running on the processes tab in task manager came from. i.e. how can I tell
that taskmgr.exe for example is a legit .exe sourced from a legit location
like c:\windows\system32\etc... rather than from some temp directory which
was deposited by some malware?

 

[Leonard Grey]

Scan your computer for malware.

 

[Andrew E.]

Write down the process(s) in question on paper,go to my computer,search,
expanded search (include hidden files),type in the exe.In the result window,
usually a mouse hover will give enough details,otherwise explore the files.