Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [process-explorer]

Process Explorer is a Windows tool written by Mark Russinovich, used for examining currently running processes and their open handles

1
vote
1answer
12 views

icacls - Integrity level is not apply on the exe file

I have an exe file that run as Medium integrity by default. I tried to change its integrity to Low with the following statament : icacls 1.exe /L The output message show its succeed : 1.exe ...
0
votes
2answers
123 views

Silent Process Exit: process '?' was terminated by the process 'C:\Windows\System32\svchost.exe' with termination code 1067

We have a serious issue with a C# application being terminated silently at random and infrequent points in time on a Windows 10 32-bit installation. E.g. it might be a month between occurrences. Or ...
0
votes
0answers
38 views

How to automatically suspend a process in windows 10; how did I kill Cortana/SearchUI?

Long ago I killed Cortana. I forget how. Now, after the Creators Update, my start-menu search is not working, so I'd like to get Cortana back. What's happening is that ShellExperienceHost.exe and ...
1
vote
1answer
27 views

Where does chocolatey install sysinternals?

Chocolatey has a nice sysinternals package, but where does it install to? (by default) https://chocolatey.org/packages/sysinternals
0
votes
2answers
87 views

Found a crypto mining process - how do I get rid of it? [duplicate]

Noticed some minor performance decrease, decided to install the process explorer described here: https://security.stackexchange.com/questions/76100/how-to-find-processes-that-are-hidden-from-task-...
1
vote
1answer
24 views

Process Explorer doesn't show all privileges

Win7 x64 Enterprise, Process Explorer v16.20. On a process' Security tab, only a few privileges are listed instead of three dozen as it should: I doesn't matter if I run Process Explorer elevated or ...
0
votes
0answers
380 views

rtcore64.sys in use - process explorer does not show why

I am trying to install new version of MSI AterBurner. First it said application is active, so installation will cancel. OK so after I closed the application I started setup again and I got I tried ...
1
vote
0answers
89 views

How to get historical graph of processes activity in Process Exprlorer - Windows Sysinternals

I have strange behaviour of laptop during night with no human around. Sometimes fan gets high RPMs and it looks like computer is processing something. It happed also that Laptop waked up by itself few ...
0
votes
0answers
27 views

What does the PageFileModified field mean?

If I open process explorer and go to View->System Information and look under Paging Lists , there's a field named PageFileModified What does this field mean?
0
votes
0answers
32 views

Process Explorer Why is my Java process displayed with a shortcut icon?

Why is my Java process displayed with a shortcut icon? I have startade the Java program from a bat-file containing this command: java -jar myProgram.jar
2
votes
1answer
127 views

“I/O write” or “Disk write” affects the SSD?

I like to find out which program using mostly my SSD. I'm using Process Hacker (in elevated mode) to get an overview of my SSD usage and find the programs whose using it mostly. To test the ...
0
votes
0answers
178 views

Process Explorer: Process Disk: Read/Write bytes not working?

I like to find out which program using mostly my SSD. On Windows 7 x64 machine in Process Explorer (opened as Administrator) double clicking on a process opens up the details of it. On the Disk and ...
0
votes
0answers
52 views

When can a file be in use by a process when it is not in use by a process? [duplicate]

Forgive the riddle-like question, but that's what I'm experiencing (I think). What I'm trying to do is delete a specific file. When I originally tried to delete it, Explorer tells me it's in use by ...
0
votes
0answers
176 views

Is there a way to record parent process information in Process Explorer or Process Hacker

When I view a process properties in Process Explorer (procexp.exe from http://sysinternals.com) or Process Hacker (ProcessHacker.exe from http://processhacker.sourceforge.net) on Windows, sometimes it ...
0
votes
0answers
139 views

How to list all Privileges held by a Process?

Using Process Explorer tool, we can see the privileges held by a running process. A running process might delete the privileges, and hence effective privileges held by the process would be less than ...
0
votes
0answers
246 views

Why do our applications get suspended on Windows Server?

We have 2 applications installed on a Windows Server 2008 R2 Standard, 64-bit. These applications are used by multiple users via remote desktop. In the last weeks, more or less once a week, following ...
0
votes
0answers
86 views

Sysinternals Process Explorer procexp.exe reset column values

I really cannot find the setting to reset an accumulated column value: I added the column "I/O Write Bytes" which shows the total I/O Bytes. How can I reset the value of the column, that it starts ...
0
votes
0answers
123 views

Sysinternals process explorer “verified signer” column inconsistency

Why would the Sysinternals process explorer column "Verified Signer" change from "unable to verify" to "Verified"? I have sysinternals process explorer set to autostart as elevated on login. If I ...
0
votes
0answers
83 views

Process Explorer hangs after symbols have been configured

I have configured symbols in Process Explorer. I am aware that this has an impact on the performance of Process Explorer, especially in the beginning when symbols have not been downloaded from ...
1
vote
1answer
735 views

View process environment variables in Windows

Is there a way to view the environment variables of a specific process. I know that i can see them using the Process Explorer. However, i need to use them in a batch or powershell script. Is there a ...
-1
votes
1answer
405 views

Process Explorer CPU Usage pattern explanation

The Process Explorer utility shows that my CPU is running at about 5% capacity. Why does the CPU usage suddenly increase when I launch an application and then come back down to normal usage (5-8%) a ...
-1
votes
1answer
740 views

What causes CPU usage to suddenly increase when a program is closed.

I'm using the Process Explorer utility to look at the CPU usage. My CPU is running at < 5% for the most part. But when I launch a program (for e.g. Word, or Excel etc.) the CPU usage increases (for ...
0
votes
0answers
443 views

CPU constantly at 100%, but in Process Explorer usage is around 5%

Task Manager shows CPU usage constantly at 100%, but Process Explorer shows CPU usage at about 5%. I've tried the solution presented in CPU Constantly at 100% In Task Manager, But Not in Process ...
0
votes
1answer
88 views

Process explorer's Thread values don't display the total amount for that Process

I would like process explorer to display on the process details the total amount of the quantity used by all its threads in each field. From the looks of the following picture, a Google Chrome example,...
0
votes
1answer
97 views

How to make process explorer show disk active time?

How can you make process explorer show active time like Windows Task Manager? EDIT: My problem is as shown down here in the picture. Some times my hdd is working, but I won't see it in process ...
1
vote
0answers
254 views

System is taking up too much CPU Power

The "System" is taking up too much CPU usage. I've had this problem for a while but it keeps getting worse, I feel. Sometimes I need to restart the computer multiple times until I'm lucky and it won't ...
1
vote
1answer
187 views

What is the lowest priority Process Explorer can set?

I ask because the last two entries in the context menu sound as if they may be in the wrong order: … Background: 4 (Low I/O and Memory Priority) Idle: 4 If these both have the same numeric base ...
0
votes
2answers
979 views

What process is running with Processid:{1EF75F33-893B-4E8F-9655-C3D602BA4897} via DllHost? It eats up CPU and RAM on a continuous basis

I'm curious if anyone knows what COM service is using Processid:{1EF75F33-893B-4E8F-9655-C3D602BA4897}? I've noticed that my RAM usage went up to 96%, and is still growing. (Mind you, I have 32GB of ...
1
vote
2answers
257 views

Why does process explorer show thousands of threads?

In the screenshot below, you can see that the OS is reporting 2925 threads. In my own programs, I set the number of threads per core to around 1:1 and that results in the fastest overall processing....
0
votes
3answers
480 views

Is it possible to kill a process on its startup? [closed]

I have to run a program, a virus scanner, on my work laptop. It is awful, so amazingly bad that it slows down everything else I try to run. It's made me so much less productive - however, due to ...
2
votes
3answers
558 views

Add Process explorer to taskbar right click context menu Windows 8.1

I recently discovered process explorer (https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx) and would like to add it to the context menu when you right click on the taskbar. It has the ...
0
votes
0answers
140 views

Process Hacker/Explorer: How to automatically open process properties on launch

When monitoring/debugging executables, I often have to restart them. In Process Hacker/Process Explorer: Is it possible to automatically open the properties window after launching/restarting a ...
0
votes
0answers
40 views

“Access denied” message when investigating driver in Process Explorer

I have a virgin installation of Vista Home Premium 32 with a 100% CPU usage problem arising from svchost hosting taskeng.exe doing some unknown thing. I know that this is due to some driver ...
0
votes
0answers
297 views

How to debug 'File in use by another process' error in Sublime Text

All of a sudden, today, I have started having problems uploading files with Sublime Text and the SFTP plugin. There have been no sytem changes, new programs installed or suchlike. I was using it ...
5
votes
1answer
804 views

periodic error dialog (default Email app related) on Windows 10, appears to be CortanaMapiHelper, should I be concerned?

I'm running Windows 10 64-bit. Periodically (maybe daily?), I get the below dialog appearing on my machine. I normally just click OK and move on. This time, I ran Process Explorer, then used the "...
0
votes
1answer
2k views

Background processes running while idle using lots of CPU

I downloaded Windows 10 to my VMware machine and it works great but I've noticing slowdown on my real computer when I leave my virtual machine idle. I have Process Explorer open and when I have it run ...
14
votes
3answers
6k views

How to identify terminated Windows process if I still have its PID?

Background: In the middle of my work, license agreement for installing "Microsoft Mouse and Keyboard Center" suddenly appeared. I'd like to understand what process launched the setup, but using ...
0
votes
1answer
350 views

Windows 8 - Logging Process Monitor/Explorer to Diagnose BSOD Cause

I recently started experiencing BSODs every time I allow my computer to go idle. The specific Bug Check error codes I'm receiving (0x139 with parameter 1 = 3) are, according to this Microsoft support ...
1
vote
1answer
62 views

How to log application runs with as much detail as possible?

On windows I have Powershell program running every hour ( that is what I have noticed coming up on the Task Bar. I have tried to use Sysinternals Autostart and Process Explorer to capture what it is ...
0
votes
1answer
1k views

2 Internet Explorer (32 bit) processes taking up CPU

I am running Windows 8.1 N Pro x64 and there are 2 Internet Explorer processes that must be for 32 bit. It stays there even if Internet Explorer is closed. I tried ending the processes but they just ...
2
votes
1answer
55 views

How to keep a process freezed until I unfreeze it?

Is there any way to freeze a process, which should not run again until I unfreeze it, even if the system is restarted? The 'Greenify' app can do this for Android. Is there a similar solution for ...
0
votes
2answers
2k views

CPU usage is 100% because of svchost.exe windows 7

It has been a while now since my laptop started being very slow and cpu usage is 100% almost all the time. I downloaded process monitor and below is the process details that is taking most of the ...
7
votes
3answers
5k views

How to measure total RAM usage of a program under Windows?

I was comparing the memory usage of different portable browsers but this question is general for all programs that open up in several sub-processes in task manager. See the screenshot from ...
0
votes
1answer
467 views

Mystery Pop-up Window [closed]

Roughly once every day or two, a pop-up window appears on my computer. It disappears in a tiny fraction of a second, impossible to discern where it is coming from. Any suggestions about how to catch ...
26
votes
2answers
4k views

Found new malware not detected by antivirus. How to evaluate the threat?

On a Windows 7 workstation running an up to date antivirus suite (Kaspersky) I found several suspicious processes. To look at the process activity I used the excellent ProcessMonitor from SysInternals....
-1
votes
1answer
242 views

Accidentally killed SteamService.exe under wininit (Process explorer) [duplicate]

I rebooted my computer and checked on process explorer to see if it had returned. But it was gone. What is SteamService.exe exactly? And why has it not come back after I killed the process under ...
18
votes
2answers
19k views

Determine which CPU a process is running on

Using Sysinternals' Process Explorer, is there a column that can be used to indicate which CPU a process is running on? If no column, is there some other way?
1
vote
1answer
807 views

Process Manager/Hacker show already closed processes in Windows 8.1

I recently switched to Windows 8.1 64-bit Pro, and while I'm liking it so far (Minus Metro), I have a pretty serious problem... Process Explorer (And Process Hacker) show rogue processes. So far I've ...
1
vote
0answers
47 views

Assessing Performance in Process Explorer: Varying Block Sizes

I am trying to assess the performance of my scientific software using Process Explorer, with the files both locally on our blade server (Dell VRTx, Windows Server 2012) and over the network from ...
7
votes
4answers
659 views

(solved) Mysterious and frequent activity on secondary disk, event when offline in Disk Management

Update (solved) The sound was coming from my speakers, that's all there is to it. While I go to cringe in a small hole for a few weeks I'd like to thank (and beg forgiveness from) everybody who took ...