Questions tagged [process-monitor]
Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.
26
questions with no upvoted or accepted answers
4
votes
2
answers
676
views
explorer.exe randomly hogging my CPU; any insight into this ProcessMonitor log?
My computer occasionally becomes terribly unresponsive. Opening Process Explorer reveals that it's explorer.exe hogging 100% of the CPU. I poked around until I found the thread id which was doing it,...
2
votes
1
answer
1k
views
Why do programs start working when I open Process Monitor?
I have a script I wrote that creates and writes to a file every 20 or 30 seconds and it has been doing that fine for the past 15 years or so on 5 versions of Windows, but I installed the outstanding ...
2
votes
0
answers
397
views
Program terminates as soon as I launch Process Monitor
I wanted to monitor all the activity of a program, to see which files are being used, etc. I used Sysinternals excellent Process Monitor, which I've used before. However, as soon as I launch Process ...
1
vote
1
answer
378
views
Sysinternals procmon "Process Active Summary" is missing most processes
I am trying to track CPU usage of our build script and of all the processes it spawns to accomplish the task of creating a release. I ran a procmon64.exe (with profiling) session during the course of ...
1
vote
1
answer
1k
views
How can I view details for a specific process using the Process Monitor on Windows?
I want to use the Sysinterals Process Monitor to inspect a specific process on my Windows computer.
Is there a way to search the running processes by the path to the executable or by PID?
I tried ...
1
vote
0
answers
681
views
Process Monitor: Any way to tell what process is terminating another?
I use Process Monitor from SysInternals to view logs from users' when they're being unable to launch an application. Very often users are running various security software they're not even aware of, ...
1
vote
0
answers
263
views
In Process Monitor, is it possible to see what data is written/read per entry?
In Process Monitor, is it possible see what data is being read/written to a particular item, be it a file or registry? For example, if a program added "platform=x64" to settings.ini somewhere, Process ...
1
vote
0
answers
50
views
How to extract action done by a program (controll panel client) to script in windows?
Frequently I have to make some changes in control panel using graphical applets. I'd like to know if there is any way to extract an action (for example the thing that is happening in system while ...
1
vote
0
answers
897
views
What process is using my drive?
Environment : Windows 10 Pro x64, Desktop PC, fresh install. System installed on C: (SSD). Secondary SSD on D:.
I have a third E: HDD in my PC (Actually a RAID-1 of WD drives).
I want it (them) to ...
1
vote
1
answer
668
views
Process Monitor not showing stack for network events
I'm trying to trace down some network activity from a process, running under Windows XP.
I see the network events in question, but when I go to look at the stack for that even (on the Stack tab), it ...
0
votes
0
answers
64
views
What does the "QueryDeviceInformationVolume" operation in Process Monitor mean?
Seeing an operation called "QueryDeviceInformationVolume" in a SysInternals Process Monitor log when I start a desktop application. Simply trying to get some details about this operation and ...
0
votes
0
answers
314
views
Is it possible to use procmon to find out why a process ends?
Let's say I started notepad. In a PowerShell window, I run ps notepad | Stop-Process -Force to kill all notepad session. I captured a procmon trace during these operations. Is it possible to find out ...
0
votes
1
answer
517
views
Can you set Process Monitor to filter multiple file types instead of a single file type? Or all sounds?
I'm trying to figure out which programs are making certain sounds and the only tool that I've come across to have that ability is Syinternals Process Monitor.
Filters
Unfortunately, it doesn't seem to ...
0
votes
1
answer
168
views
Is Process Monitor able to pick up when a "system sound"(one of those wav files), plays? I'm using Windows 7
Is (sysinternals) Process Monitor able to pick up when a "system sound"(one of those wav files), plays? I'm using Windows 7
I tried this filter "ends with" "wav" but it'...
0
votes
0
answers
964
views
svchost.exe writes registry on startup with revoked permissions
I made a post recently about some program changing the HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ProxySettingsPerUser registry key every boot from 1 to 0. I found out ...
0
votes
0
answers
3k
views
Can someone tell me what exactly the file's name was when there was a NAME COLLISION in Process Monitor listed?
I'm trying to figure out what for SNES9x requires to be run as Administrator inside Window 10, so I created a Process Monitor log.
Looking through it I discovered that there's a NAME COLLISION listed ...
0
votes
1
answer
793
views
Pass cmd argument to running process when shutting down windows service
I am creating a windowservice that starts a process where I pass multiple cmd arguments in the StartInfo.Arguments. That works fine as expected.
The problem is that when i stop the windowsservice, I ...
0
votes
0
answers
411
views
Why is CORSAIR opening and closing the same file thousands of times a minute?
I've recently been playing around with Process Monitor, honestly being amazed at how many of my applications appear to be making useless calls to the disk. One of the main culprits I saw were CORSAIR,...
0
votes
1
answer
830
views
Running Process Monitor causes application to work
This is a longshot, but perhaps someone with knowledge of the internal workings of Sysinternal's Process Monitor may have an idea.
Recently we've had a very murky problem at work. We have a software (...
0
votes
0
answers
34
views
How to tell which program just excecuted a task or process? (Don't know if PhraseExpress or Word made the change.)
How do I figure out which program, application, add-on, or anything else just made a change in my computer?
I tried to be a considerate person and look up for answers in similar questions first. It ...
0
votes
0
answers
703
views
Visual Studio 2015 Update 2 started to crash immediately after statup
Recently, my VS2015 has started to crash immediately after starting up. The ActivityLog.xml has a limited info: https://onedrive.live.com/redir?resid=D2799D1EAD5F9578!712404&authkey=!...
0
votes
0
answers
142
views
How can I get a list of processes that were run and exited on Windows?
On occasion, a command-line window appears then instantly vanishes. I'm sure it is some scheduled task, or something that the company IT department runs periodically. How can I determine what this ...
0
votes
1
answer
2k
views
Changing default behavior of a Keyboard Multimedia Keys
Today I've got a Dell KB522 keyboard, which has 7 multimedia keys on top. I was wondering if it's possible to change the behaviour of those keys due to the lack of official Dell app to do that (for ...
0
votes
1
answer
140
views
Which process - in windows - changes system settings
I'm currently writing a program that changes certain system settings. For most of those settings, I was able to find information on registry keys on the internet. For others, however, I wasn't able to ...
0
votes
2
answers
71
views
Start ProcessMonitor will unexpectedly execute another irrelevant exe
Well, I have encountered a weird problem recently.
Whenever I try to start ProcessMonitor, another irrelevant program (an IM software indeed) starts instead.
In the end, the only way I start ...
0
votes
0
answers
973
views
aswSP.SYS BSOD if I start Process Monitor
I'm trying to use Process Monitor but I get a BSOD saying aswSP.SYS crashed.
aswSP.SYS is Avast! antivirus self protection system driver file.
Do you know why do I get this BSOD and more importantly ...