Process Explorer v16.02 Updated

Checker on 8 Mar 2014

Process Explorer is an advanced task manager. It is an indispensable tool for both beginners and power users. I use it all the time to kill tasks that refuse to be killed, or find what which processes are still holding on to a particular file or DLL so it refuses to be deleted.

Alternatively, Process Explorer Portable is also available, which is stealth.

Category:
System Requirements: WinXP / Vista / Win7 / Win8
Writes settings to: Windows registry
Stealth: ? No
Unicode support: No
License: Freeware
How to extract: Download the ZIP package and extract to a folder of your choice. Launch procexp.exe.
Similar/alternative apps: Process Hacker
What's new?
  • This minor update adds a refresh button to the thread’s stack dialog and ensures that the Virus Total terms of agreement dialog box remains above the main Process Explorer window.

42 comments on Process Explorer  The Portable Freeware Collection Latest Entries Feed

Moroni 2006-07-11 10:25

You can really tell this is an Advanced Task Manager! It by far surpass Windows Task Maganer! Give it a try!

Hairball 2006-07-12 12:23

This program rocks. Ever try to find that pesky virus that won't go away? Squash it with this program. Tells you everything about everything going on inside you machine. All of it.

Zat 2006-08-10 13:23

nice prog to see what''s happened with process

a 2006-10-16 17:40

when you set it up just the way you like it.. then suddenly all the custom settings have magically dispeared! that is freaking annoying, other then that it's a very good program, but could be better with more process manulipation features (free memory, crash process, ect)

Zen Render 2006-11-07 23:24

There's a BUNCH of great standalone apps are SysInternals, but this is the one I use almost every day at work. When trying out this app, make sure you right-click on the column headings, and check the Command Line checkbox, which will tell you where the listed process' file actually resides (makes it much easier to figure out which is the virus or spyware, if the file is sitting in the root or temp folders of the drive). "A"'s comment is correct about the settings, but they're "per-machine." Not entirely sure what they mean by "crash process" but you can "kill" processes and ever entire process trees (the process and every process it may have spawned).
All in all though, a great utility for anyone's "pocket-toolkit."

Nyarnon 2006-11-09 02:07

Great just what I was looking for for my portable collection. Smart prog. Thanks.

GBJ 2007-01-09 04:53

The only thing this beauty lacks is an INI file to store your custom settings, including visible columns and column widths. Then it would be truly portable.

guest 2007-05-10 12:25

GBJ, one posting in this thread http://portablefreeware.com/forums/viewtopic.php?t=1542 says that JPE can be used to make process explorer truly portable

Lego 2007-09-07 00:15

Since Micro$oft took this great utility over, you can not kill several MS processes, like WPALogon.dll.
Guess why.... ;-)

Many Many Many User 2008-02-27 09:28

would you kindly support INI file?

saving is a must i would say

Static 2008-02-27 20:59

Is there a pre-MS version still available?

Erind 2008-02-28 11:00

I've got some older versions if you want it. Back when it was split into 4 different versions. 9x, Amd64, Ia64, Nt

Erind 2008-02-28 11:01

Erm... email would probably help, eh? a s c h e e l (at) g m a i l (dot) c o m
Or find me on AIM JohnC256

Midas 2008-02-29 03:16

Like others before, I must say this is one of my essential utilities. I run it permanently on all my computers!

Although I haven't had that problem, I am really disapointed by what Lego revealed ("Since Micro$oft took this great utility over, you can not kill several MS processes, like WPALogon.dll") which I find a serious breach of confidence -- we're so used to get 'coned' by M$, aren't we?

Does anyone know, which was the last version that wasn't crippled in this way? I might still have it laying around...

avoidz 2008-03-04 20:38

10.2 - Jul 14 2006 - Final version prior to acquisition by Microsoft

:)

Dan 2008-04-18 05:08

Look at the screenshot;
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

"Micro$oft took this great utility over", incorporated their own 'taskmgr.exe' and called it a new version

Bigoeuf 2008-04-21 03:37

Re:avoidz: 10.2 - Jul 14 2006 - Final version prior to acquisition by Microsoft
http://www.filehippo.com/download/b1ccff64d93539021e5d35ad2c08b3ef/download/

Midas 2008-04-22 07:04

Where's the changelog? Is it really worth getting the M$ bloat instead of keeping the version Bigoeuf kindly put at our disposal?

GBJ 2008-06-10 07:19

First, this is one GREAT utility. However, that being said, how anyone can consider it 'portable' (as it indeed writes all settings to the registry) simply blows my mind. Hello ? It is NOT PORTABLE ! ! Just TRY running it from a USB stick and see if your views and column settings remain ! PLEASE learn the true meaning of 'portable.' You cannot change the definition based on your personal taste and whether or not you like one app over another.

Midas 2008-06-17 02:49

My take on Portable Software is programs that just work when I run them without installing... Features like INI file based settings, stealth and removable drive awareness are very welcome pluses, but they don't change that basic tenet.

Just my 2 cents.

Midas 2008-06-17 02:53

Does anyone know of a changelog for PE? Thanks...

a 2008-08-11 09:20

be cautious of some of these programs from sysinternals, i've had some restarts, bsod, crashes, freeze ups, and lingering processes from using their utilities, never had this problem with any other software. i'm a fan of process explorer, procmon, autoruns, and a few others.. but man do they have issues. i suppose because i have older versions or whatnot. more reason to not use the registry for settings!

Samalama 2008-10-15 23:40

Writes to the registry - NOT PORTABLE.

Like GBJ says....GREAT utility. However, that being said, how anyone can consider it 'portable' (as it indeed writes all settings to the registry) simply blows my mind.

Will not use until really is made portable - why is it even on this site?????????????

a 2011-03-16 16:33

@Samalama It's on this site because it's useful, simple as that. Despite writing registry keys, I now use it daily on multiple machines, and in my USB Toolkit, most SysInternals have become more stable now days.

V14.1

Shodan 2011-03-17 11:57

The latest version - 14.1 - is a CPU cycle hog. HUGE difference between 11.1 and 14.1 in cycles the app uses.

V14.1

ChipsNHotSauce 2011-06-10 23:43

@Shodan, I've noticed that too, that's the why I use 11.x on my laptop. I updated to 14.x on my other pc and I haven't noticed the CPU issues, since then, perhaps it has been fixed.

V14.12

zak_711 2011-08-20 14:40

15.02 Better check the site again

V15.02

Checker 2011-08-20 20:29

Site says: V15.01 ... TPFC says: V15.02 ... Download is: V15.03
TPFC-DB updated ;-)

V15.03

Emka 2011-12-16 17:04

Link to website seems to be broken.

V15.11

webfork 2011-12-16 20:09

emka: modified link, should work now

V15.11

mukhi 2012-06-07 11:27

giving me the following download error:
This XML file does not appear to have any style information associated with it. The document tree is shown below.
OutOfRangeInputOne of the request inputs is out of range.
RequestId:***Time:***

V15.13

abc 2012-06-07 16:59

Seems that dreadful "unreadable memory" error has FINALLY been fixed in this version.

V15.13

abc 2012-06-07 17:29

\Files\ part of the URL needs to be lower case \files\ I can't change the entry until I spam the forum with 50 posts, so...

here's the proper link:
http://download.sysinternals.com/files/ProcessExplorer.zip

V15.13

JohnTHaller 2012-06-07 18:08

abc - I fixed it.

V15.13

Ruby 2012-06-08 11:13

I've changed the 'Download' link as it hasn't been updated to reflect the 'Live' site
From:
http://download.sysinternals.com/files/ProcessExplorer.zip
To:
http://live.sysinternals.com/files/ProcessExplorer.zip

V15.2

lautrepay 2012-12-19 01:38

PA.c released a wrapper (online installation) that makes Process Explorer truly portable: http://portableapps.com/apps/utilities/process-explorer-portable

v15.23

Midas 2013-03-01 15:36

For correct Process Explorer "Configure Symbols..." options check, for instance, http://blogs.msdn.com/b/vijaysk/archive/2009/04/02/getting-better-stack-traces-in-process-monitor-process-explorer.aspx

For a portable, this essentially means you have to get an updated 'dbghelp.dll' file to place alongside the PE executable, and then point to it in the "Debug.dll path" field; in the "Symbols path" field, after creating a 'symbols' folder inside the one you keep PE in, you could paste the following:

SRV*symbols*http://msdl.microsoft.com/download/symbols

(You can change the part amidst stars (the cache path) to whatever you want or leave it out for no caching.)

v15.23

__philippe 2013-08-02 09:43

Sysinternals' Process Explorer now updated to v15.40

http://technet.microsoft.com/en-us/sysinternals/bb896653

__philippe

v15.31

Checker 2013-08-02 17:18

@ __philippe: Thanks ... and updated.

v15.40

__philippe 2014-01-30 20:42

SysInternal's Process Explorer updated to v16.0 (January 29, 2014)

Thanks to collaboration with the team at Vir*sTotal, this Process Explorer update introduces integration with Vir*sTotal.com, an online antivir*s analysis service. When enabled, Process Explorer sends the hashes of images and files shown in the process and DLL views to Vir*sTotal and if they have been previously scanned, reports how many antivir*s engines identified them as possibly malicious. Hyperlinked results take you to Vir*sTotal.com report pages and you can even submit files for scanning.

===
Note that Process Explorer v16.0 itself includes precious little explanation about the new Vir*sTotal checking feature. The internal help (F1) does not mention it at all.

However, Martin Brinkmann (from ghacks.net) provides a neatly illustrated elaboration on the subject :
http://tinyurl.com/qduwkor

__philippe

v15.40

Checker 2014-01-31 19:17

@ __philippe: Thanks ... and updated.

v16.0

__philippe 2014-02-05 09:13

Process Explorer updated to v16.0.1 - (Feb 4,2014)
http://blogs.technet.com/b/sysinternals/archive/2014/02/04/updates-process-explorer-v16-01-sigcheck-v2-02.aspx

This release fixes a bug that could cause a crash when the Vir*sTotal column is added to the process view, and another that could cause a crash when verifying digital signatures.

Process Explorer v16.0.1 download here:
http://technet.microsoft.com/en-us/sysinternals/bb896653

__philippe

v16.0

Post your comment