Monitor PC background processes to spot hidden malware fast

A background process is a program, or part of one, that runs without you directly using it. Some handle dull chores such as installing updates and syncing files. Others do essential work, including drawing the windows you click on.

A long list of processes isn’t a bad sign by itself. Problems start when one of them uses far more processing power or memory than it should, taking resources away from the apps you actually care about. On a PC with slower hardware, that hit is easier to feel.

Task Manager is the first place to look. It lists your open apps alongside every background process, including Windows’ own system tasks, and shows how much CPU, memory, disk activity and network bandwidth each one is using.

There are several ways to open it:

• Press Ctrl + Shift + Esc, the quickest route.
• Press Ctrl + Alt + Delete and choose Task Manager.
• Right-click the Start button, or an empty part of the taskbar, and select Task Manager.

Start on the Processes tab in the left sidebar. Clicking the Name column header groups everything into three blocks: active apps, background processes and Windows processes. Clicking any other column, such as CPU or Memory, sorts by that instead and pushes the heaviest users to the top.

Do this once while your PC feels normal. That gives you a baseline, so when something later uses more than usual you will notice the difference instead of guessing.

Many entries will be familiar, such as your web browser and Task Manager itself. Chrome alone can show a long list, because it runs a separate process for each tab plus others for extensions and hardware acceleration. Its own built-in task manager, opened with Shift + Esc inside the browser, shows what each one does.

Other entries are less obvious. A game launcher may leave an updater running after you close its window, and Windows depends on many services with cryptic names like svchost.exe. Don’t assume something is useless just because you don’t recognize it, and don’t guess. Search the name online, and right-click the process and choose Open File Location to see where it sits on your drive.

Context matters too. A hidden launcher pushing up disk, CPU and memory use looks alarming, but it is often just downloading and installing an update.

Ending a process should not be your first move. Quit an app the usual way where you can, with the X in the corner or its File and Quit menu, and look in the notification area near the clock, where icons for background apps let you close them properly.

If an app won’t close, right-click it in Task Manager’s Processes list and pick End task. That forces it shut without letting it save your work, which is usually unavoidable once an app has crashed anyway.

Sometimes Task Manager itself is slow to appear. Microsoft engineer Raymond Chen explained in late October that when an app hogs the processor, every program waits its turn, including Task Manager and the taskbar. Ctrl + Alt + Delete opens a separate secure screen that can still reach Task Manager, though it can lag too. You can also switch on End task for the taskbar under Settings, System, Advanced, then right-click a frozen app’s taskbar icon to close it without opening Task Manager at all.

Speed isn’t the only reason to watch your processes. If something looks wrong, especially a process that keeps running even after you end it in Task Manager, give your PC a malware check with the free Microsoft Defender built into Windows.

• Open Windows Security and go to Virus & threat protection.
• Select Scan options.
• Choose Microsoft Defender Antivirus (offline scan), then Scan now.

Your PC will restart for this. The offline scan runs in its own separate environment, so stubborn malware can’t keep itself running to avoid being quarantined or removed.

Every bit of processor and memory that background apps don’t use is available to your game. Avoid running several game launchers at once while you play, since their downloads show up as network, disk and CPU activity in Task Manager.

Recording tools can cost performance as well. Windows 11 has built-in capture through the Game Bar, and you can turn it off under Settings, Gaming, Captures if it affects gameplay. If you also have a third-party recorder installed, check its settings so the two aren’t recording at the same time.

To stop apps launching every time you sign in, open Task Manager, select Startup apps on the left, right-click anything you don’t need straight away and choose Disable. You can still open those apps later. You don’t need to kill every process, because Windows does its own prioritizing, and it already gives extra priority to the app in front of you.