Usually refers to applications from the Sysinternals Suite (eg. Process Explorer, Process Monitor, RAMMap, ...)

learn more… | top users | synonyms

0
votes
0answers
13 views

Handle.exe creates Handle64.exe & hangs thereafter

On windows server 2008 R2 ,In a folder I have handle.exe along with psexec.exe and a batch file name test.bat with following content: psexec -s D:\data\handle.exe -p taskhost.exe > ...
5
votes
2answers
547 views

MKLINK vs. Junction.exe

SysInternals has a program junction.exe that creates Junctions (aka. reparse points, aka. symlinks) in Windows. However, Windows also comes with a mklink which seems to do the same thing. Is there a ...
0
votes
1answer
43 views

in ProcessExplorer what is the difference between remote address = 127.0.0.1:0 and *:*?

In Process Explorer when I select a process click on "TCP/IP" tab it shows 5 columns: Protocol, Local Address, Remote Address, State, Service. Under Remote Address, I often see entries such as ...
1
vote
0answers
57 views

Windows sessions: Process Explorer vs. Logonsessions.exe

In researching a problem with an API call that is limited to particular sessions, I found some information that implied when you use runas to create a process as another user, a new security token is ...
0
votes
0answers
42 views

Alternative to SysInternals Zoomit.exe with gradual ZOOm-In and Out animations

It seems like ZoomIt animates a "semi-gradual" zoom, although I wish it were a bit slower or configurable, but the zoom out if sudden. When I see people do online recordings their zoom in and zoom ...
3
votes
2answers
105 views

Changing colors of Process Explorer

I want to make my Process Explorer dark. I managed to change all colors except these very bright columns: How can I change these bright colors to something dark?
9
votes
3answers
260 views

What does the path '\REGISTRY\A\…' in Sysinternals Procmon log mean?

I use Sysinternals Procmon utility to monitor the registry access by some programs. Most log entries have the Path property starting from HKCU\… or HKLM\…, that corresponds to the registry hives ...
0
votes
0answers
70 views

Using SysInternals to troubleshoot perf issue streaming YouTube video

Recently I was watching this youtube video on SysInternals utilities, with the intent of trying to learn a little about how to troubleshoot performance issues and malware: ...
2
votes
0answers
448 views

Internet Explorer 10 doesn't seem to work with Sysinternals Desktops

I heavily use Sysinternals Desktops version 2 to manage multiple desktops. In the past, I used Internet Explorer 9 as this was the only web browser I found that could function across multiple ...
1
vote
1answer
66 views

Is there a way to reset the toolbar minigraphs in Process Explorer?

Windows Sysinternals Process Explorer includes in its toolbar some minigraphs showing recent usage history for CPU, Memory, and so on: These are nice. However, an inadvertent click on the 'thumb' ...
0
votes
2answers
115 views

How can I determine which operations or processes prevent screen saver and sleep mode

My desktop will not enter sleep mode or fire up the screen saver. To troubleshoot, I have run procmon and procexp from sysinternals in order to determine if some event is making the system think it ...
3
votes
1answer
3k views

Huge memory usage in Nonpaged Pool

I have a one-year-old iMac with 8GB RAM running a bootcamped Windows 7 Ultimate 64 bit. The following memory analysis with Sysinternals RamMap.exe leaves some questions open: What could be the ...
2
votes
1answer
4k views

How to unlock files using handle.exe and process name?

I tried Unlocker 1.9.1 but it doesn't work correctly for me on Windows7 (worked ok on Windows XP) and also I tried LockHunter 2.0.2.103 x64 and reported a bug but .... LockHunter actually unlocks the ...
1
vote
1answer
395 views

USB-keyboard & mouse powered off in windows-7

I have a problem with a pc where usb devices are not getting any power as soon as windows starts up (it works in preboot). This pc has no ps/2, so there is no chance for input, also not in secure boot ...
2
votes
3answers
8k views

Using du.exe (Sysinternals) is it possible to show folders above a certain size?

du.exe lets you recursively identify folders that take up a large amount of space. For example, the following will show you the size of all the folders from c:\ 3-levels deep: du.exe -l 3 c:\ How ...
1
vote
2answers
506 views

Starting Autoruns.exe or procexp.exe hard-boot the PC

I am currently backpacking in India for several months and have to use public PC to check my email and write my blog. The first thing I do when after I plugged in my hard-drive is to use ...
6
votes
1answer
2k views

Does Psexec execute Remote Procedure Calls?

I've heard of RPCs and that they get executed via TCP port 135. I just executed ipconfig via psexec.exe on a remote PC and wondered if this is a RPC. As I've seen in Wireshark, the whole process is ...
1
vote
0answers
109 views

Can I change the sysinfo export language?

I just noticed that when I export the sysinfo logfile for diagnosis that all the stuff in there is in my national locale! This is of course bad if I want help from international / English speaking ...
2
votes
1answer
1k views

How to exclude every process in Sysinternal's Process Monitor in the filter except for one process?

How to exclude every process in SysInternal's Process Monitor in the filter except for one process? Some kind of using a wildcard filter.
5
votes
2answers
2k views

Is there open source software which is to Process Monitor what ProcessHacker is to Process Explorer?

Process Hacker is an open source alternative to the famous Process Explorer by Mark Russinovitch. Is there in the same vein a piece of open source software that can be a serious alternative to ...
0
votes
2answers
792 views

Handle Sysinternals software does not accept -c parameter

I am trying to close a handle to a locked file in Windows, using Sysinternals Handle software (http://technet.microsoft.com/en-us/sysinternals/bb896655). First I search for opened handle: handle.exe ...
2
votes
1answer
114 views

Where does Windows save things as the current system power state?

I'm currently wondering about the place that Windows (XP, Vista, 7) store information like "Windows is running" and so on. I mean, somehow Windows knows when you just power-down your computer that it ...
3
votes
2answers
4k views

Is there a version of Process Monitor that runs on Windows 2000?

I have a problem I'm trying to track down on a Windows 2000 machine. I downloaded SysInternals Process Monitor (ProcMon.exe) but it seems to need Windows XP SP2 or higher. I've seen traffic that ...
4
votes
2answers
2k views

Commit Charge < Physical Memory?

If Commit Charge is the total amount of physical memory and virtual memory; how can Commit Charge ever be less than Physical Memory? For example; I have in System Information in Process Explorer ...
1
vote
1answer
497 views

Why is process monitor taking up 2+ gb of physical memory?

I am trying to hunt down a rogue process that is locking a file in a specific directory which is preventing a log being appended to. This locking happens about one to three times a week, so needless ...
8
votes
5answers
36k views

How can I change the timestamp on a file? [duplicate]

Possible Duplicate: How to modify timestamp in a dll or exe? How can I set the timestamp for a file via the command-line to a specific date? My specific situation is Windows 7, and I'd ...
10
votes
3answers
6k views

Equivalent to Sysinternals Process Explorer on Linux

I am using Ubuntu 11.10 and am looking for an equivalent to Process Explorer on Linux. There is System Monitor but it's not nearly as good as Process Explorer with all of its detailed information ...
3
votes
1answer
309 views

Windows keyboard shortcuts not working in Sysinternals Desktops

Windows Sysinternals Desktops is a virtual desktop utility that provides up to 4 virtual desktops. It creates a Windows desktop object for each additional virtual desktop other than the default one. I ...
2
votes
4answers
1k views

sdelete alternative on osx

In the sysinternals suite for windows there is this nifty sdelete tool for securely deleting individual files as well as overwriting unallocated disk space with randomness or zeroes ( the -c or -z ...
1
vote
2answers
83 views

What are the main and non-damaging parts of Sysinternals Autoruns?

What are the main parts of Sysinternals Autoruns to use when disabling regular startup items that I can tell a not-so technical user to use? (Not parts for disabling stuff like important services ...
2
votes
2answers
217 views

Is it safe to disable these entries shown in Sysinternals Autoruns?

Was directed to this free program http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx through Superuser. Is it correct that I can un-check the entries which are identified (via Image Path) ...
2
votes
4answers
14k views

Run Explorer in SYSTEM account on Windows Vista or 7 using Sysinternal’s psexec tool?

Has anyone been successful at launching an instance of Windows Explorer in the SYSTEM account on Windows Vista or 7? It is possible to do this on XP, but I haven't been able to get it to completely ...
9
votes
0answers
398 views

How does rebooting a computer work? [duplicate]

Possible Duplicate: How does a computer restart itself? How does a computer's reboot command actually work? How is the computer told that it shouldn't stay down after powering off, and ...
2
votes
1answer
548 views

Move a screen from one virtual desktop to the other

I'm using the "Desktops" program by sysinternals. I'm wondering if it's possible to move a screen to one of the other virtual desktops?