Process Explorer is a Windows tool written by Mark Russinovich, used for examining currently running processes and their open handles

learn more… | top users | synonyms

31
votes
6answers
58k views

Editing Hosts File in Windows 8

I'm trying to edit my hosts file in Windows 8 Pro. When I open C:\Windows\System32\Drivers\etc\hosts in notepad++ or any other text editor, make changes and attempt to save, I get a dialog that tells ...
24
votes
2answers
4k views

Found new malware not detected by antivirus. How to evaluate the threat?

On a Windows 7 workstation running an up to date antivirus suite (Kaspersky) I found several suspicious processes. To look at the process activity I used the excellent ProcessMonitor from SysInternals....
20
votes
1answer
20k views

Private Bytes VS Working Set in Process Explorer

I know that the working set is the actual amount of memory the process is using and also that private bytes is the amount set aside just in case it needs more. So would I add the two to figure out ...
18
votes
5answers
54k views

Can't remove certain fonts in Windows 7

We have an x64 Windows 7 professional machine on which some but not all fonts can not be removed. The problematic fonts in question are not system fonts or Microsoft Office fonts (I think, they haven'...
18
votes
2answers
3k views

How to restore the Process Name column in Process Explorer?

Currently, Process Explorer's window does not show the process name: (When I run Process Explorer as another user, the column displays correctly.) I have tried dragging all the column handlers, ...
18
votes
4answers
7k views

Sysinternal's Process Explorer v14 doesn't show network activity

The new version of Process Explorer shows network activity history, but it doesn't in one of my computers. This particular PC runs Windows XP SP3 and it has just been reformatted so everything is "...
16
votes
3answers
13k views

Equivalent to Sysinternals Process Explorer on Linux

I am using Ubuntu 11.10 and am looking for an equivalent to Process Explorer on Linux. There is System Monitor but it's not nearly as good as Process Explorer with all of its detailed information ...
16
votes
1answer
23k views

Log %CPU by Process over time

Is there any easy way on Windows to log %CPU time per process over time to a file for later analysis? As far as I can see... Task manager shows me the %CPU per process but only visually - no way to ...
16
votes
2answers
38k views

98-100% memory use, no process uses more than 25MB

I am having intermittent issues with my gaming computer. Sometimes, while playing Battlefield 3 (only 2 times the problem has occured), my memory usage goes to 100% of my 16GB machine. I close down ...
13
votes
2answers
6k views

Determine which CPU a process is running on

Using Sysinternals' Process Explorer, is there a column that can be used to indicate which CPU a process is running on? If no column, is there some other way?
12
votes
3answers
1k views

How to identify terminated Windows process if I still have its PID?

Background: In the middle of my work, license agreement for installing "Microsoft Mouse and Keyboard Center" suddenly appeared. I'd like to understand what process launched the setup, but using ...
9
votes
2answers
2k views

How to open the built-in task manager when it's replaced by Process Explorer?

I want to open the built-in task manager with Process Explorer's Replace Task Manager option checked. I've tried: Running taskmgr.exe from the run dialog. PE was opened instead. Creating a copy of ...
7
votes
3answers
2k views

How to measure total RAM usage of a program under Windows?

I was comparing the memory usage of different portable browsers but this question is general for all programs that open up in several sub-processes in task manager. See the screenshot from ...
7
votes
3answers
349 views

Is there a modern Process Manager supporting things like grouping (Imagine tens of chrome.exe's)? [duplicate]

Possible Duplicate: Good Alternatives to Windows Task Manager Hi, I am tired of using Windows Task Manager. Whenever I look at it, I see tens of Chrome.exe processes there. I am hoping to ...
7
votes
2answers
6k views

Process Explorer: How to check what process is holding my external disk?

I have an external disk (MyBook) that I always plug in and out of my PC. The problem now is that when I want to stop the MyBook USB device, I get a "cannot be stopped right now" error. Is there any ...
7
votes
4answers
405 views

(solved) Mysterious and frequent activity on secondary disk, event when offline in Disk Management

Update (solved) The sound was coming from my speakers, that's all there is to it. While I go to cringe in a small hole for a few weeks I'd like to thank (and beg forgiveness from) everybody who took ...
6
votes
2answers
1k views

How can I pin Process Explorer to the task bar on 64-bit system?

I'd love to pin Process Explorer from sysinternals to my task bar. However procexp.exe is a 32-bit application that launches the 64-bit procexp64.exe on an x64 system. However when I pin it to the ...
6
votes
2answers
586 views

Is it necessary to suspend a process before terminating it?

What happens when a process in Windows is suspended by Process Explorer or similar software (e.g., Process Hacker)? I've read somewhere on the web that the Sysinternals authors recommend suspending ...
6
votes
3answers
3k views

Windows 7: Can I auto-start task manager?

Is there a way to automatically start up the task manager (in this case, process explorer) when I log into Windows 7?
6
votes
4answers
2k views

Process Explorer not showing the biggest user of my RAM

Does anyone know why Process Explorer might show these weird values for memory usage of my Virtual Box instance? Here are the real numbers: But here's what Process Explorer is showing: So the ...
6
votes
1answer
2k views

Heavy CPU Usage for Interrupt

As a follow-up to the question Why can't my computer speed up again after closing large applications? … I used Process Explorer to check my PC. I found that there's an average 30-40% of CPU ...
6
votes
2answers
4k views

Is there open source software which is to Process Monitor what ProcessHacker is to Process Explorer? [closed]

Process Hacker is an open source alternative to the famous Process Explorer by Mark Russinovitch. Is there in the same vein a piece of open source software that can be a serious alternative to ...
5
votes
3answers
3k views

How do I check if some one is accessing my computer from somewhere?

Here is a snap shot of my processes running on Windows XP Is there anything suspicious? How will you know if some one is accessing your computer remotely?
5
votes
4answers
10k views

Windows 8 Task Manager shows 49% CPU, Process Explorer shows 100%

Any idea why the new Windows 8 Task Manager is showing 49% CPU while the Process Explorer is showing 100%? Is this a Windows 8 bug?
5
votes
2answers
5k views

How is RAM reported and represented in Process Explorer?

I am running Sysinternals' Process Explorer There are a couple things I am confused about, and I did not see this info in the help file. Here is a screenshot: The Working Set column, is that RAM? ...
4
votes
2answers
1k views

Is there a way to see GPU System Memory broken down process-by-process?

I am trying to figure out which app in my system is responsible for the memory spikes (note that the spikes are seen on GPU tab). Here's a question that spawned this one. EDIT To show System ...
4
votes
1answer
11k views

How to inspect a Process Explorer full dump

I've been having some trouble with Visual Studio 2010. It stops working, and I see it increases in memory usage. So I suspect a memory leak (in one of the plugins maybe). I took a Full Dump with ...
4
votes
2answers
312 views

explorer.exe randomly hogging my CPU; any insight into this ProcessMonitor log?

My computer occasionally becomes terribly unresponsive. Opening Process Explorer reveals that it's explorer.exe hogging 100% of the CPU. I poked around until I found the thread id which was doing it,...
3
votes
2answers
4k views

Windows Vista: Open file - security warning on local exe: “Unblock” does *not* work - why?

I use Process Explorer on a Windows Vista (Business 32bit) box. I have extracted the files from the zip file to C:\Program Files\Process Explorer. Every time I open the executable (procexp.exe) I get ...
3
votes
2answers
256 views

Changing colors of Process Explorer

I want to make my Process Explorer dark. I managed to change all colors except these very bright columns: How can I change these bright colors to something dark?
3
votes
1answer
5k views

Hard disk keeps running (Windows 7)

Windows 7 64-bit. I hear HDD running constantly and HDD LED blinking. I quit all applications, even deleted antivirus software (BitDefender) but it is still running. I searched many helps, watched '...
3
votes
2answers
715 views

identify which process is outputting sound

My computer periodically makes a random ding (among other sounds), and I can't figure out the source. Suggestions on SU include using bar indicators in the volume mixer to look for the source. ...
3
votes
1answer
683 views

How can I find out which processes on my computer are accessing the microphone?

After reading this interesting Lifehacker post and reading the comments on the page, one person was wondering if it would be possible to use the Physical Device Object Names of other hardware such as ...
2
votes
2answers
1k views

Can't kill process TGitCache.exe

Sometimes, I suspect when I open a music folder during the right moon phase and during a leap microsecond, this process crashes and pops up an error reporting dialogue. I decline to report the error, ...
2
votes
1answer
3k views

Identify an instance of Google Chrome by PID

While working I generally need around 40 windows open at a time and run 100-200 processes. When memory constraints become an issue, I start picking off the processes that are the most resource ...
2
votes
4answers
1k views

Remove Process Explorer's “Open File - Security Warning”

I'm on XP Pro w/ IE8 installed. When I launch procexp.exe (Process Explorer 11.33), I see a dialog warning me about the program I'm about to launch (the title of the dialog reads "Open File - ...
2
votes
5answers
10k views

Have local admin privileges on Windows XP, but getting “Error terminating process: Access is denied”. How to kill the process?

On one of the Windows XP machines I use regularly, there is a process that starts up periodically. I'd like to be able to kill the process – sometimes – because it occasionally runs when ...
2
votes
3answers
557 views

Process Explorer Freezes System

I am running Process Explorer version 16.02 on Windows 7 64-bit Service Pack 1 logged into a domain. The laptop is a Dell Latitude E6430 and is docked. Process Explorer runs as an administrator and ...
2
votes
1answer
214 views

Is there a way to reset the toolbar minigraphs in Process Explorer?

Windows Sysinternals Process Explorer includes in its toolbar some minigraphs showing recent usage history for CPU, Memory, and so on: These are nice. However, an inadvertent click on the 'thumb' ...
2
votes
1answer
2k views

What Is “Hardware Interrupts” Process In Windows 7?

I keep seeing it with Process Monitor software:
2
votes
1answer
39 views

How to keep a process freezed until I unfreeze it?

Is there any way to freeze a process, which should not run again until I unfreeze it, even if the system is restarted? The 'Greenify' app can do this for Android. Is there a similar solution for ...
2
votes
1answer
452 views

What is the “Ideal Processor” value?

What is the "Ideal Processor" value and why/how does it pick a certain processor to run on? I've recently seen an obvious increase in CPU usage on the furthest last core, core #7 (i7 930 ...
1
vote
2answers
80 views

Find handles by process

I am trying to figure out where an undocumented application is storing it's configurations. To find any files it might be using I thought I might be able to use process explorer to view any file ...
1
vote
3answers
1k views

Auto start a program (and run under other account) on user logon

I really like Mark Russinovich's Process Explorer so I'm always running it. I would like to automate this task of manually starting this process up every time I logon. But I want this program to run ...
1
vote
2answers
34 views

Why does process explorer show thousands of threads?

In the screenshot below, you can see that the OS is reporting 2925 threads. In my own programs, I set the number of threads per core to around 1:1 and that results in the fastest overall processing....
1
vote
2answers
138 views

Add Process explorer to taskbar right click context menu Windows 8.1

I recently discovered process explorer (https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx) and would like to add it to the context menu when you right click on the taskbar. It has the ...
1
vote
1answer
305 views

periodic error dialog (default Email app related) on Windows 10, appears to be CortanaMapiHelper, should I be concerned?

I'm running Windows 10 64-bit. Periodically (maybe daily?), I get the below dialog appearing on my machine. I normally just click OK and move on. This time, I ran Process Explorer, then used the "...
1
vote
2answers
757 views

Why is Process Explorer reporting activity in non-existent dedicated GPU memory?

I've been playing around with Process Explorer on a laptop of mine with Windows 7, 4 GB of RAM, and an onboard GPU(ATI Radeon 6480g as part of the A4 APU). Oddly enough, Process Explorer reports 1.5GB ...
1
vote
2answers
2k views

Media player classic starts at boot up CPU 100% not listed in msconfig. What is going on?

Every time I boot windows, media player classic starts running in the background (no actual MPC window opens) and hogs the CPU at 100% until I kill it. In process explorer the parent is explorer. I ...
1
vote
1answer
112 views

Why are some processes in “trees”, but others aren't?

In a program that shows process tree layouts, like Process Explorer, I see that some programs are "floating", apparently not tied to any tree. How is this possible? Most of the processes are tree'd ...