Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.

learn more… | top users | synonyms

0
votes
0answers
83 views

Visual Studio 2015 Update 2 started to crash immediately after statup

Recently, my VS2015 has started to crash immediately after starting up. The ActivityLog.xml has a limited info: https://onedrive.live.com/redir?resid=D2799D1EAD5F9578!712404&authkey=!...
0
votes
0answers
68 views

What process is using my drive?

Environment : Windows 10 Pro x64, Desktop PC, fresh install. System installed on C: (SSD). Secondary SSD on D:. I have a third E: HDD in my PC (Actually a RAID-1 of WD drives). I want it (them) to ...
0
votes
0answers
24 views

Procmon: create pmc file via script or load pmf file through command line

I'm trying to automate usage of procmon and I would like to specify arbitrary filters. I see that you can do that from the command line by loading a .pmc file with /loadconfig. So I am supposing I ...
0
votes
1answer
63 views

Procmon command line does not save filtered output

I am using procmon command line. procmon.exe /Quiet /Minimized /Openlog C:\Python27\code2\logs.pml /LoadConfig C:\Python27\code2\pmc.pmc /SaveAs C:\Python27\code2\output.csv After running the above ...
-1
votes
1answer
319 views

App all of a sudden asks “Please run as administrator”, but doing so has no effect

My dad has a Windows 7 system which he primarily uses to play Microsoft Flight Simulator 2004. His custom setup for this game is huge and there are problems every now an then which can usually be ...
2
votes
1answer
472 views

How can I use Process Monitor to detect register changes made by GPEdit modifications?

It is supposed that Process Monitor can capture the registry changes made by any program. This thread explains it fine (thanks you, James T). But it seems things are not so easy when talking about ...
0
votes
1answer
169 views

Windows 8 - Logging Process Monitor/Explorer to Diagnose BSOD Cause

I recently started experiencing BSODs every time I allow my computer to go idle. The specific Bug Check error codes I'm receiving (0x139 with parameter 1 = 3) are, according to this Microsoft support ...
1
vote
1answer
108 views

Are filtered events in Process Monitor stored in memory or on disk?

When filtering events in Process Monitor, does it store the filtered events in memory or on disk, or does it just give you a filtered count? The reason I'm asking is, we're trying to figure out what ...
0
votes
0answers
56 views

How can I get a list of processes that were run and exited on Windows?

On occasion, a command-line window appears then instantly vanishes. I'm sure it is some scheduled task, or something that the company IT department runs periodically. How can I determine what this ...
1
vote
1answer
156 views

Process Monitor not showing stack for network events

I'm trying to trace down some network activity from a process, running under Windows XP. I see the network events in question, but when I go to look at the stack for that even (on the Stack tab), it ...
9
votes
4answers
60k views

Why is my disk at 99% usage here?

I have a similar issue as this user. You can pretty much take his screen shot and apply it to my issue: Windows 8.1, 99% disk usage or in that vicinity for a longer period of time (minutes). Yet the ...
0
votes
1answer
754 views

Changing default behavior of a Keyboard Multimedia Keys

Today I've got a Dell KB522 keyboard, which has 7 multimedia keys on top. I was wondering if it's possible to change the behaviour of those keys due to the lack of official Dell app to do that (for ...
2
votes
1answer
916 views

Process Monitor capture filter (or scripting)

As you know, Microsoft distributes the Russinovich extremely powerful process monitor. It captures a lot of system events and has a filter to show only some of them. I want to record a rare fault at ...
3
votes
2answers
702 views

identify which process is outputting sound

My computer periodically makes a random ding (among other sounds), and I can't figure out the source. Suggestions on SU include using bar indicators in the volume mixer to look for the source. ...
3
votes
1answer
6k views

Root cause for high CPU usage; which measurement to trust more: Windows Task Manager or Process Explorer?

Consider this Windows 8.1 machine (in-place upgrade from Windows 8) with differing reports on its CPU usage. The machine is idle, and has been for 3 days. There are no CPU intensive tasks running ...
0
votes
1answer
801 views

Can windows search indexer prevent file from deleting?

I know that when windows processes open files for reading, they lock them. How does Windows indexer do that? Can it prevent the file from being deleted in addition to slowing everything down? Can my ...
0
votes
1answer
70 views

Which process - in windows - changes system settings

I'm currently writing a program that changes certain system settings. For most of those settings, I was able to find information on registry keys on the internet. For others, however, I wasn't able to ...
0
votes
0answers
205 views

File access from client Windows Server 2012 works with procmon enabled, otherwise doesn't

Windows Server 2012, running Terminal Services has a client application installed. The server part is located on another Windows Server 2012. The client application is an old one, based on dBase. ...
0
votes
2answers
264 views

How can I determine which operations or processes prevent screen saver and sleep mode

My desktop will not enter sleep mode or fire up the screen saver. To troubleshoot, I have run procmon and procexp from sysinternals in order to determine if some event is making the system think it ...
4
votes
2answers
306 views

explorer.exe randomly hogging my CPU; any insight into this ProcessMonitor log?

My computer occasionally becomes terribly unresponsive. Opening Process Explorer reveals that it's explorer.exe hogging 100% of the CPU. I poked around until I found the thread id which was doing it,...
0
votes
2answers
57 views

Start ProcessMonitor will unexpectedly execute another irrelevant exe

Well, I have encountered a weird problem recently. Whenever I try to start ProcessMonitor, another irrelevant program (an IM software indeed) starts instead. In the end, the only way I start ...
5
votes
5answers
11k views

Process Monitor fails to load

I am trying to load Process Monitor (Procmon.exe) from Sysinternals, and I get the following error on startup. Unable to load Process Monitor device driver In the Event Viewer, I get the ...