Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It is a part of the Windows Sysinternals suite. Use this tag for any questions related to this tool.
Questions tagged [process-monitor]
34 questions
9
votes
1 answer
Slow Visual Studio, related to SQMClient?
Visual Studio started working slower than usual, and after checking for add-ons and doing a repair, it's just as slow. I used process monitor to check what was going on, and found that a lot of stuff is going on related to SQMClient, which - as far…

Hanne Smith
- 207
- 2
- 9
8
votes
0 answers
Hide ProcessMonitor from ThemIda
I use the same computer for playing a game while working.
For my work i need to use ProcessMonitor from Microsoft.
Problem is that the game is "protected" with ThemIda and it won't start when ProcessMonitor is already running or will "crash" as soon…

Andreas Hinderberger
- 1,505
- 23
- 41
5
votes
2 answers
How to use Process Monitor to determine which DLL is causing a BadImageFormatException
I have a large web application, which is supposed to run in a 64 bit process. However, when I set "Enable 32-bit Applications" to False on my App Pool, I get the following error trying to run the app in IE:
is not a valid Win32 application.…

ProfK
- 49,207
- 121
- 399
- 775
4
votes
3 answers
Need the source code for top and find the connection between top and /proc/ directory in linux
I wanted the source code for top which I could not find anywhere also, i wanted a little more information on what exactly does the /proc directory contain.y I have seen it have a series folders labeled 1, 2, 3 4, .... and in those folders there seem…

Shouvik
- 11,350
- 16
- 58
- 89
4
votes
2 answers
Why is Visual Studio constantly trying to create a 'dummy/empty' file?
I just ran Process Monitor (by Sys Internals) for the first time on this Win7 RTM machine to figure out the paths VS2008 uses when compiling (so i can exclude them from my AV).
Check this out ....
alt text…

Pure.Krome
- 84,693
- 113
- 396
- 647
3
votes
1 answer
DLL not loaded from documented search path
I have a process which is loading a DLL from a place not listed in the documented search order (docs linked below). I want to know why.
Here's the description of my setup:
I have a folder 'c:\foo' containing a.dll and b.dll.
I have a python script…

Andrew Bainbridge
- 4,651
- 3
- 35
- 50
3
votes
1 answer
how to disable logging in Process monitor while startup
How to Open Process monitor with logging on all logging components STOPPED.
By default, it starts capturing all the logs giving no time to do CTRL + E which stops Capture Events and apply my filter.
It fills virtual memory quick enough to become…

Sundar Rajan
- 556
- 4
- 25
3
votes
2 answers
How can a device driver be EXE like Process Monitor
Process Monitor and Explorer are supplied an EXE file.
But they include a driver. -Where is it.
By Windows Internals,
Process Monitor works by extracting a file system filter device driver from its executable
image (Procmon.exe) the first time…

Benjamin
- 10,085
- 19
- 80
- 130
3
votes
3 answers
How to install Sensu client without installing Sensu server?
I am trying to install a Sensu client without the server.
According to the documentation:
"The Sensu Core package installs several processes including sensu-server, sensu-api, and sensu-client."
However after adding the repository, I was only able…

Greg
- 8,175
- 16
- 72
- 125
3
votes
0 answers
Monitoring JRuby processes using god gem
Is it possible to monitor jruby program using God ruby gem ? Any working example will be helpful. Here is what I've tried so far but it doesn't work.
Here is the God file start_app.god
God.watch do |w|
w.name = "simple"
w.start = "jruby…

Sam Samson
- 927
- 4
- 20
- 35
2
votes
2 answers
Sysinternals Process Monitor (ProcMon): Using wildcards on filter
I am using Sysinternals Process Monitor to debug some incoming events and now I am trying to create a filter on Path and using wildcards. What I am trying to use is to filter path which begin with c:\MyApp\MyDocuments\Temp and ends with .pdf
Path…

Willy
- 9,848
- 22
- 141
- 284
2
votes
0 answers
Access Denied messgaes in Process Monitor
I have an application that runs on a web server under a local user that resides in the Power User group. Process monitor is reporting the following Access Denied Errors:
User: Network Service, All Access Denied on…

Brian
- 548
- 2
- 8
- 22
2
votes
1 answer
What happens to the file with colon in the name?
I'm not a regular curl user, but from time to time I use it to test something.
So I was writing in command line this:
curl -o:output.html www.google.com
It didn't gave me any error, looked like everything is ok, but output file didn't appeared.
So…

Giedrius
- 8,430
- 6
- 50
- 91
2
votes
1 answer
Using the Output of Sysinternals Process Monitor in another programm/script in real time
I'm working on a script that should check on certain system events (like opening of a file, or changing of a registry key) and start further actions depending on that. But I haven't found a clean way to get the information into my script.
I'm…

user208465
- 21
- 3
1
vote
0 answers
DLL dependency from different installation folder not found in ASP.NET website
I have created a .NET Framework 4.7.2 website with a WCF service. To expose data through this service, I have to reference a third party DLL with Copy Local = False from C:\InstallLocation. The website is loading this DLL at runtime, but I get an…

naxtell
- 11
- 3