Finding the Process Accessing an IP Address.Troubleshooting Applications that Require Admin Rights.Changing Procmon’s Altitude (Capturing Lower-Level Events).Setting up Long-Running Procmon Captures.Exporting and Opening Events to/from Log Files.Highlighting Events and Converting to Filters.Importing and Exporting Procmon Configurations.An entry in one of your event logs should indicate what the problem is. Do you see procmon.exe appear briefly, then go red and/or disappear? If so, then “something” is preventing it from running and is killing it. Launch Process Monitor while carefully watching the other part of the screen. I can run Process Monitor under Windows 7 圆4 with no problems, and as suggested it does spawn a procmon64.exe process.ĭo you also have Process Explorer? Does it work? If not then Task Manager will do, but try splitting your screen so that you can run Process Explorer (or Task Manager) in one part, and have the command where you try to launch Process Monitor in the other part. Could also be the dreaded UAC getting in the way, so check your settings. If you do not see your own user name in the list, add it in and give it “Full control”. The user (or group) that you are running under needs to have “Full control”. Using Windows Explorer or similar, navigate to the executable file (I would guess C:Program FilesProcess MonitorProcmon.exe), right-click on it, then Properties, then Security. If you do not see the “Do you want to run” message when you run it as administrator, that suggests a security issue.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |