I found a third new feature which the SearchWinIT article doesn't mention. I suppose, I won't need this feature either. So this feature only gives you some limited information about the process' activity during a certain time span. It only displays the activity span for each process (see screenshot) in the Process Activity Summary window (formerly called Process Summary). Unfortunately, Procmon 1.2 doesn't really allow you to 'see how each process is running' (whatever that is supposed to mean). There is another new feature that sounds interesting in the SearchWinIT article:Īlso included in the latest version is a feature that lets users better see how each process is running during an activity trace by showing a graph for each one. Well, that's not really exciting either, is it? Process Monitor has the new switch '/run32' for this purpose which does nothing else than run the 32 bit version of the tool. You can now open log files on a 64 bit machine that were generated on a 32 bit system.

Process Monitor 1.2 has some new features, though. It just means that Process Monitor's filters only affect the display of events, but not the event data itself. The real name of the feature is non-destructive filtering and it's not new because the predecessors of version 1.2 already supported it.

So, it seems like my desktop is just screwed up and MS didn't add 'destructive' filtering. Process Monitor runs on Microsoft Windows 2000 SP4 with Update Rollup 1, Microsoft Windows XP SP2, Microsoft Windows Server 2003 SP1, and Microsoft Windows Vista as well as 圆4 versions of Microsoft Windows XP, Microsoft Windows Server 2003 SP1 and Microsoft Windows Vista.I tried the tool on two other Vista machines, and it worked there without problems. Its exclusively strong features will make Process Monitor a core tool in your system damage control and malware hunting toolkit.

It blends the features of two legendary Sysinternals tools, Filemon and Regmon, and adds an thorough list of enhancements containing rich and non-destructive filtering, complete event properties like session IDs and user names, trustworthy process information, complete thread stacks with bundled symbol support for every operation, simultaneous logging to a file, and many more. Process Monitor is an complex monitoring software for Microsoft Windows that shows real time file system, Registry and process and thread activity.

Process monitor for windows xp