CFW Monitoring Windows Process Connections

[shmu26]

at

What is this "at" process? I haven't heard of that one yet.

 

[509322]

What is this "at" process? I haven't heard of that one yet.

Command line utility similar in some respects to schtasks.exe:

https://technet.microsoft.com/en-us/library/bb490866.aspx

 

[shmu26]

Command line utility similar in some respects to schtasks.exe:

At

Can a typical PC user disable it?

 

[509322]

Can a typical PC user disable it?

Sorry... I don't recall a way for a user to manually disable it themselves. If you research it online maybe you will find a hack to disable it. That would be a good share.

In many security products, a user can disable it.

It is disabled by our product's default policy. In 1000s of hours of testing I have never seen it blocked once during typical use. I have seen it blocked only when testing malware and that was one single time.

 

[shmu26]

Sorry... I don't recall a way for a user to manually disable it themselves. If you research it online maybe you will find a hack to disable it. That would be a good share.

In many security products, a user can disable it.

It is disabled by our product's default policy. In 1000s of hours of testing I have never seen it blocked once during typical use. I have seen it blocked only when testing malware and that was one single time.

Thanks. So if you saw it in action only once, then it is not a major player in malware.