Skip to content

Instantly share code, notes, and snippets.

@liejuntao001

liejuntao001/symantec SEP do scan

Created April 22, 2020 01:08
Show Gist options
  • Save liejuntao001/39ceeca0c30062b28ef91e6ab7e75177 to your computer and use it in GitHub Desktop.
Save liejuntao001/39ceeca0c30062b28ef91e6ab7e75177 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
symantec SEP do scan
In cmd run as Administrator
1 Look for process ccSvchst.exe
> tasklist | findstr cc
ccSvcHst.exe 5336 Services 0 36,652 K
ccSvcHst.exe 12696 Console 2 6,400 K
2 Kill it
> taskkill /F /PID 5336
SUCCESS: The process with PID 5336 has been terminated.
3. Do a quick Active Scan
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment