One great tool can be Process Explorer. It's made by a company that was bought by Microsoft, so now you can download it from microsoft.
I run in in tray, I see it all the time. It always shows my CPU usage and if the usage goes high for too long I can check what program is guilty for that. Also it's a great replacement for the usual Task Manager.
And indeed, this is not only about Monero.
Monero just happened to be one of the few successful coins where CPU mining still got you somewhere. I don't know if it's still the case and it should be more difficult for the malware makers too with the often changes in the algo (which require new miner too).
But this was attempted for Bitcoin and possibly for other coins too. Bitcoin gone ASIC thus that (old) kind of malware mining is an even bigger waste of energy for nothing.