Process Explorer v15.1 ~ Autoruns for Windows v11.2

Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

The Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you'll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you'll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.

Process Explorer

This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more. Autoruns goes way beyond the MSConfig utility bundled with Windows Me and XP.

Autoruns for Windows

A Guy

Autoruns

   Information

- Fixes a bug in the jump-to-folder function when executed on disabled items and correctly locates print monitor DLLs when they are stored in print monitor-specific system director

Process Explorer

   Information

- A Task Manager replacement.
- Adds support for new Windows 8 features by giving the processes hosting immersive applications a distinct highlight color.
- Shows immersive application package names in process tooltips and as a new process view column.
- Lists AppContainer and capability SIDs in the process security properties.
- Updates the GPU support to be compatible with Windows 8.
- GPU memory counters with more descriptive labels.
- Display of the logon session ID on the security properties.
- Reporting of suspended processes as suspended in the CPU usage column.

Changelogs are always posted under the "Site Blog" link on the left hand side on the site.


Sysinternals Site Discussion - Site Home - TechNet Blogs

Ooops, thanks Aaron, was late...

A Guy

You're welcome.