Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.

learn more… | top users | synonyms

0
votes
0answers
9 views

Process monitor not showing all remove operations

I set process monitor using information from this answer:How do I log which process is deleting a file on Windows XP? But in a log I have only 4 entries while applications I'm trying to check removes ...
0
votes
0answers
32 views

Process Monitor not showing stack for network events

I'm trying to trace down some network activity from a process, running under Windows XP. I see the network events in question, but when I go to look at the stack for that even (on the Stack tab), it ...
5
votes
3answers
940 views

Why is my disk at 99% usage here?

I have a similar issue as this user. You can pretty much take his screen shot and apply it to my issue: Windows 8.1, 99% disk usage or in that vicinity for a longer period of time (minutes). Yet the ...
0
votes
0answers
34 views

Export raw data from Process Monitor's PML format

Process Monitor from Sysinternals has a cool feature called Process Activity Summary. The high resolution allows it to keep track of every occurring event. But if you export the results as an XML file ...
0
votes
1answer
132 views

Changing default behavior of a Keyboard Multimedia Keys

Today I've got a Dell KB522 keyboard, which has 7 multimedia keys on top. I was wondering if it's possible to change the behaviour of those keys due to the lack of official Dell app to do that (for ...
0
votes
1answer
130 views

Process Monitor capture filter (or scripting)

As you know, Microsoft distributes the Russinovich extremely powerful process monitor. It captures a lot of system events and has a filter to show only some of them. I want to record a rare fault at ...
3
votes
2answers
179 views

identify which process is outputting sound

My computer periodically makes a random ding (among other sounds), and I can't figure out the source. Suggestions on SU include using bar indicators in the volume mixer to look for the source. ...
3
votes
1answer
2k views

Root cause for high CPU usage; which measurement to trust more: Windows Task Manager or Process Explorer?

Consider this Windows 8.1 machine (in-place upgrade from Windows 8) with differing reports on its CPU usage. The machine is idle, and has been for 3 days. There are no CPU intensive tasks running ...
0
votes
1answer
224 views

Can windows search indexer prevent file from deleting?

I know that when windows processes open files for reading, they lock them. How does Windows indexer do that? Can it prevent the file from being deleted in addition to slowing everything down? Can my ...
0
votes
1answer
41 views

Which process - in windows - changes system settings

I'm currently writing a program that changes certain system settings. For most of those settings, I was able to find information on registry keys on the internet. For others, however, I wasn't able to ...
0
votes
0answers
124 views

File access from client Windows Server 2012 works with procmon enabled, otherwise doesn't

Windows Server 2012, running Terminal Services has a client application installed. The server part is located on another Windows Server 2012. The client application is an old one, based on dBase. ...
0
votes
2answers
113 views

How can I determine which operations or processes prevent screen saver and sleep mode

My desktop will not enter sleep mode or fire up the screen saver. To troubleshoot, I have run procmon and procexp from sysinternals in order to determine if some event is making the system think it ...
3
votes
1answer
110 views

explorer.exe randomly hogging my CPU; any insight into this ProcessMonitor log?

My computer occasionally becomes terribly unresponsive. Opening Process Explorer reveals that it's explorer.exe hogging 100% of the CPU. I poked around until I found the thread id which was doing ...
0
votes
2answers
54 views

Start ProcessMonitor will unexpectedly execute another irrelevant exe

Well, I have encountered a weird problem recently. Whenever I try to start ProcessMonitor, another irrelevant program (an IM software indeed) starts instead. In the end, the only way I start ...
4
votes
4answers
8k views

Process Monitor fails to load

I am trying to load Process Monitor (Procmon.exe) from Sysinternals, and I get the following error on startup. Unable to load Process Monitor device driver In the Event Viewer, I get the ...