DEP Process Scanner

DEP Process Scanner is a command-line application capable of scanning the currently running programs to display processes with enabled DEP (Data Execution Prevention).

DEP is a Microsoft technology that runs extra checkups on the system memory to find and isolate malicious code. In other words, it can help identify infected processes that were missed by typical anti-malware solutions.

The downloaded package contains two separate .exe files for launching DEP Process Scanner on 32- and 64-bit Windows. It's not possible to fire it up by just double-clicking an executable.

Instead, you have to call its process from a Command Prompt dialog. Just make sure you're executing the .exe that matches your system's architecture type.

A set of command-line options are available, which can be listed in the console window with -h. The complete syntax is DEPProcessScanner64.exe (or DEPProcessScanner32.exe) [-h | -d | -p | -n process_name | -f exe_file_path].

If you just run the executable without any arguments, you can view a list with all DEP-enabled processes, including the process name and file extension, process ID (PID), session ID, PC username, and full path to the process file.

However, you can ask the tool to list all non-DEP or DEP-disabled processes (-d) and to check if a DEP is enabled for a process by ID (-p pid), name (-n process_name) or executable file (-f exe_file_path).

There are no commands implemented for saving all this information to file for closer inspection. On the other hand, you can select everything with your mouse and copy content to the Clipboard by pressing Enter.

All things considered, DEP Process Scanner offers straightforward options to help you check DEP-enabled processes for malware infections. It requires minimal experience with console-based applications.