It is currently Wed Jun 19, 2013 4:53 pm

All times are UTC - 8 hours




Post new topic Reply to topic  [ 46 posts ]  Go to page Previous  1, 2, 3, 4  Next
Author Message
 Post subject:
PostPosted: Sat Aug 04, 2007 6:32 am 
Offline

Joined: Mon Jul 30, 2007 9:47 am
Posts: 6
hi. does anyone mind pointing out the exact settings to use when doing this on sysinternals process explorer?

i did try it, im just not sure if what i did was right. i didnt quite understand some of the options.

id appreciate any help.

thank you and good day.


Top
 Profile  
 
 Post subject:
PostPosted: Sat Aug 04, 2007 10:11 am 
Offline

Joined: Thu Aug 03, 2006 7:52 pm
Posts: 411
4Gigs wrote:
hi. does anyone mind pointing out the exact settings to use when doing this on sysinternals process explorer?

i did try it, im just not sure if what i did was right. i didnt quite understand some of the options.

id appreciate any help.

thank you and good day.

Here's what I use for Process Explorer v10.2. It's from a procexp_jauntePE.ini file:

Code:
[Registry]
Use=1
Data=.\procexp_jauntePE.reg

[Filesystem]
Use=0

[ModuleExclude]
1=*

[ModuleInclude]
1=procexp.exe

[RegistryExclude]
1=*

[RegistryInclude]
1=HKEY_CURRENT_USER\Software\Sysinternals\Process Explorer
2=HKEY_CURRENT_USER\Software\Systems Internals\Process Explorer

[RegistryIgnore]
1=HKEY_CURRENT_USER\Software\Sysinternals\Process Explorer
2=HKEY_CURRENT_USER\Software\Systems Internals\Process Explorer


Top
 Profile  
 
 Post subject:
PostPosted: Sun Aug 05, 2007 1:44 am 
Offline

Joined: Sat May 12, 2007 1:05 am
Posts: 63
redllar wrote:
Code:
[RegistryInclude]
1=HKEY_CURRENT_USER\Software\Sysinternals\Process Explorer
2=HKEY_CURRENT_USER\Software\Systems Internals\Process Explorer

[RegistryIgnore]
1=HKEY_CURRENT_USER\Software\Sysinternals\Process Explorer
2=HKEY_CURRENT_USER\Software\Systems Internals\Process Explorer

Why are you including and ignoring the same keys? What does it mean? I'm not clear what ignoring keys does.


Top
 Profile  
 
 Post subject:
PostPosted: Sun Aug 05, 2007 2:14 am 
Offline

Joined: Sat May 12, 2007 1:05 am
Posts: 63
I tried a similar setting for Process Monitor and it worked - but only the first run. On all subsequent runs I get an error message: MS Visual C++ abnormal program termination.
Code:
[Registry]
Use=1
Data=.\Registry\%appname%.reg

[Filesystem]
Use=0
Data=.\FileSystem

[ModuleExclude]
1=*

[ModuleInclude]
1=procmon.exe

[RegistryExclude]
1=*

[RegistryInclude]
1=HKEY_CURRENT_USER\Software\Sysinternals\Process Monitor
2=HKEY_CURRENT_USER\Software\Systems Internals\Process Monitor

[RegistryIgnore]
1=HKEY_CURRENT_USER\Software\Sysinternals\Process Monitor
2=HKEY_CURRENT_USER\Software\Systems Internals\Process Monitor


Top
 Profile  
 
 Post subject:
PostPosted: Sun Aug 05, 2007 4:58 am 
Offline

Joined: Thu Aug 03, 2006 7:52 pm
Posts: 411
Quote:
Why are you including and ignoring the same keys? What does it mean? I'm not clear what ignoring keys does.

The ignore list is for keys that you don't want the app to know about, even if they exist in the system registry. So if my portable reg happens to be missing a certain key value, and that key value exists in the system reg, the app will be told that that key value doesn't exist, and default it as it would normally.

What I'm doing is making sure that I don't pick up any system registry entries when running on pcs that have Process Explorer installed and running normally. There's also some apps that get into infinite loops when the same reg key exists both in the portable reg and the system reg. This will prevent that type of problem as well. There's also a 3rd benefit but I can't remember what it is. :)


Top
 Profile  
 
 Post subject:
PostPosted: Sun Aug 05, 2007 5:00 am 
Offline

Joined: Thu Aug 03, 2006 7:52 pm
Posts: 411
Quote:
I tried a similar setting for Process Monitor and it worked - but only the first run. On all subsequent runs I get an error message: MS Visual C++ abnormal program termination.

Yeah, I seem to remember having a problem with RegMon as well back when I was using it. I'll try and take a look at it again when I have the chance.


Top
 Profile  
 
 Post subject:
PostPosted: Sun Aug 05, 2007 11:12 am 
Offline

Joined: Mon Jul 30, 2007 9:47 am
Posts: 6
thanks redllar for the ini file and for the discussion above. helps a lot.

cheers.


Top
 Profile  
 
 Post subject:
PostPosted: Sun Aug 05, 2007 1:50 pm 
Offline

Joined: Thu Aug 03, 2006 7:52 pm
Posts: 411
sgp wrote:
I tried a similar setting for Process Monitor and it worked - but only the first run. On all subsequent runs I get an error message: MS Visual C++ abnormal program termination.

Hey sgp, thanks for finding that bug. It's in the in-memory registry usage code, so if you turn that off and rebuild your launcher then things should work. I can't test it completely because I'm on 2K SP1 and Process Monitor wants SP4.

PM or email me if you want a new version of the JPE dll that has a fix in place for the bug.


Top
 Profile  
 
 Post subject:
PostPosted: Sun Aug 05, 2007 1:53 pm 
Offline

Joined: Thu Aug 03, 2006 7:52 pm
Posts: 411
4Gigs wrote:
thanks redllar for the ini file and for the discussion above. helps a lot.

cheers.

You're welcome.


Top
 Profile  
 
 Post subject:
PostPosted: Wed Aug 08, 2007 1:25 am 
Offline

Joined: Sat May 12, 2007 1:05 am
Posts: 63
redllar wrote:
PM or email me if you want a new version of the JPE dll that has a fix in place for the bug.

Hi Redllar, I PM'ed you my e-mail address a couple of days ago... but I still haven't gotten your reply. ?? Thanks.


Top
 Profile  
 
 Post subject:
PostPosted: Wed Aug 08, 2007 4:20 am 
Offline

Joined: Thu Aug 03, 2006 7:52 pm
Posts: 411
I just PM'd you back.


Top
 Profile  
 
 Post subject:
PostPosted: Mon Aug 13, 2007 6:20 am 
Offline

Joined: Sat May 12, 2007 1:05 am
Posts: 63
redllar wrote:
Here's what I use for Process Explorer v10.2. It's from a procexp_jauntePE.ini file:

Code:
[Registry]
Use=1
Data=.\procexp_jauntePE.reg

[Filesystem]
Use=0

[ModuleExclude]
1=*

[ModuleInclude]
1=procexp.exe

[RegistryExclude]
1=*

[RegistryInclude]
1=HKEY_CURRENT_USER\Software\Sysinternals\Process Explorer
2=HKEY_CURRENT_USER\Software\Systems Internals\Process Explorer

[RegistryIgnore]
1=HKEY_CURRENT_USER\Software\Sysinternals\Process Explorer
2=HKEY_CURRENT_USER\Software\Systems Internals\Process Explorer

Mmm, I just noticed that with these settings, when I exit procexp the process stays around like a zombie, though the window does close. Does it happen to you too?


Top
 Profile  
 
 Post subject:
PostPosted: Mon Aug 13, 2007 8:52 am 
Offline
User avatar

Joined: Fri Aug 03, 2007 3:48 am
Posts: 240
@ sgp
I found that problem with a few apps like ultra ISO it only seems to be when I shut them down with the Red Cross and not through the files/Exit command.

I'm not sure if it's because the close window cross is a windows command and doesn't get hooked right or something...


Top
 Profile  
 
 Post subject:
PostPosted: Mon Aug 13, 2007 10:01 am 
Offline

Joined: Thu Aug 03, 2006 7:52 pm
Posts: 411
Quote:
Mmm, I just noticed that with these settings, when I exit procexp the process stays around like a zombie, though the window does close. Does it happen to you too?

Just re-tested and no problems like that here. And I tested both with the normal procexp entries in the system registry and without. Are you running task manager as well? Is it showing a cpu spike via procexp while the procexp process is still active but with no visible window?


Top
 Profile  
 
 Post subject:
PostPosted: Mon Aug 13, 2007 10:41 am 
Offline

Joined: Sat May 12, 2007 1:05 am
Posts: 63
Local wrote:
@ sgp
I found that problem with a few apps like ultra ISO it only seems to be when I shut them down with the Red Cross and not through the files/Exit command.
Local, you are probably right, because I do always use the red X to close my apps. And I've seen that type of problem before, mainly in conjunction with console apps. I start the portable wrapper from a console session, if that matters.
BTW, I don't always get zombies, just sometimes.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 46 posts ]  Go to page Previous  1, 2, 3, 4  Next

All times are UTC - 8 hours


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Protected by Anti-Spam ACP Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group