Asked by:
** Feature Requests **

-
Thought it might be a good idea to have an overview of threads holding feature requests.
Makes it easier to find out if a request has already been made.
(The requests have been made by various users.)
- FeatureRequest: Autoscroll process image, field "Command line", properties dialogue
- FeatureRequest: Available Physical Memory in Statusbar
- Feature request: Commit history in tray
- Feature request: Emergency Hotkey
- Feature request: global hot-key of "Always on Top"
(Maybe the "Emergency Hotkey" and the "Global Hotkey of 'Always on top'" could be merged into 1 feature? - comment added by me, Karl) - Feature request: Add "Options" to the Systray Icon Menu
- Feature request: Keyboard shortcut for suspend/resume a marked process
- Feature request: Computer Name in title bar
- Feature request: network usage (again!)
- Feature Request: Maximum CPU Level a Process Has Used And For How Long
- Feature Request: Total Line
- Feature Request: Type >1 char selects better matches
- Feature Request: I/O in bytes per second
- Feature Request: Normalized i/o history
- Feature request: multiple CPU graph (in ProcessExplorer main window)
- Feature Request: CPU Usage optional % / processor
- Feature request: Thread CPU usage
- Feature request: exclude from overall CPU
- Feature request: restart history?
- Feature Request: Save changed priority
- Feature request: Save column prefs to disk
- Feature request: Smaller/Standalone Performance Graphs
- Feature request: suggestions for PE improvement (Trusted Processes / Autoclose Processes)
- Feature request: Limit CPU usage
- Feature request: Option to throttle offending processes?
- Feature request: Option to unload procexp100.sys (procexp1xx.sys)
- Feature request: Option to hide all P.E. tray icons
- Feature request: PE and Vista’s "Protected Processes"
- Feature Request: PE Logging
- Feature Request: Terminalsession - Connect
- Feature request: enable/disable token privileges using P.E.
- Feature Request - ID Version of .NET Framework
- Feature request: Show every local or global Windows hook that a program has set
- Feature request: Xkill behavior
- Feature request: (Support for) external localization files
- Feature Request: Links to launch other Sysinternals tools installed on the machine
- Various PE Feature Requests by Matts_User_Name. (Well, as the title indicates this is not just 1 feature request, but a rich list of requests and richly illustrated.)
This thread is meant to give an overview.
Therefore, please, discuss the feature requests in their appropriate threads.
Feel free, though, to add links to other P.E. feature requests which are not listed, yet.
And note:
There is no warranty that the requests in this list will be implemented, because only the programme author can decide.
Karl
--
P.S.:
When the list was started, I thought it might be a good idea to arrange it according to the topics the requests covered. Now I am wondering if I should not sort them in alphabetical order simply.
Question
All replies
-
I would like to add some ideas to the feature list:
-Multiple process suspend/resume or kills
-DLL ejection
-Thread suspend/resume on 9x (I have seen this done with another task manager btw)
- Handle / DLL filter box
I also think we should have a bug list thread and make both pinned topics.
Richard S. -
Hi, redhawk.
I guess you misunderstood me.
This thread was only meant to be an overview of threads that hold feature requests so they can be found easily.
This is why I asked,Feel free, though, to add links to other P.E. feature requests which are not listed, yet.
If we start posting feature requests directly in this thread, I assume it will soon turn into an unreadable endless monster.
Yet, this is just my personal idea.
Apart from this, I agree that it might be helpful to have sticky threads for bug reports as well.
The problems with sticky threads for feature requests and bug reports are- Due to a bug in the forum stoftware, any sticky thread will loose its sticky property as soon as a normal user adds a message. Only moderators can assign the sticky property again thus moving it back to the top of the thread list.
- Those 2 sticky threads should exist for each Sysinternals utility, so there would be quite a number of these sticky threads.
- Someone would have to make sure double feature requests are somehow joined.
- Someone would have to evaluate the bug reports and take out those that are actually handling errors.
- Forum software products do not offer a really professional approach to keeping track of feature requests and bugs. Doing it manually for all Sysinternals utilities might easily be a fulltime job, but none of the moderators works fulltime for this forum, we are all doing it in our spare time.
Hm, so after all maybe creating this sticky thread was not such a good idea.
Karl -
Another feature request: For the ability to save the column settings to a file
http://forum.sysinternals.com/forum_posts.asp?TID=7448&P N=1&TPN=1
-
-
-
Thanks, Kyle.
The feature request is already in the list in the first message:
RFE: Type >1 char selects better matches.
Compare to the thread you point us to: Keyboard selection annoyance in v10, please.
Different words, same complaint about lost feature, same request to re-introduce it.
Karl -
-
I could not "see" process explorer on my desktop, although it was running in the system tray. When I right-clicked and selected MOVE, I was able to move the crosshair with my arrow keys and then hit enter (this is supposed to work on any application in Windows that has jumped off the desktop). However, Process Explorer still did not appear on the crosshairs like it was supposed to.To complicate the problem, I could not get my task manager back because when Process Explorer was working correctly, I had checked the box to replace my task manager. Note: I would suggest in the future update that you add Options to the right-click menu on the system tray icon. I will post a copy of this suggestion in the appropriate thread too.SOLUTION: To get my original task manager back, I had to go to START::RUN and type in REGEDIT. I did a search for procexp.exe and then deleted every instance (about 10 I think). Now I got back my task manager!
-
-
Feature request for Process Explorer to identify "protected processes" in Vista; thread is at:
-
Can the following request be added to the list please:
http://forum.sysinternals.com/forum_posts.asp?TID=8401&P N=1&TPN=1
Request for computer name to be included in window title and system tray tool tip.
Thanks,
Mark
-
-
-
Feature request:
If the lower pane is disabled, don't try to load any handle or DLL information upon starting up. This would allow Process Explorer to run even when system handles have grown to excessive numbers due to a handle leak. Maybe there could also be a checkmark under Options to disable all handle processing. This would make process explorer a lot more stable in the event of a system handle leak.
-
Please add the "Process Startup Log" feature to your list.
http://forum.sysinternals.com/forum_posts.asp?TID=8417
Thanks,
Dimitris Staikos
-
Hi, Dimitris.
If I am not mistaken your request Process Startup History feature? and this request Feature Request: PE Logging look pretty similar to me.
And this request Feature Request: PE Logging is in the list of feature requests.
So I assume this covers your request, too.
Karl -
Hi!
Dunno if it's already officially requested.
How about localizations?
Something like external textfiles with additional languages.
Cf. this thread, A French Translation?, please.
Added request to the Feature Request List.
Karl -
Hi, Dimitris.
If I am not mistaken your request Process Startup History feature? and this request Feature Request: PE Logging look pretty similar to me.
Damn, they look pretty similar to me too :-)And this request Feature Request: PE Logging is in the list of feature requests.
So I assume this covers your request, too.
KarlIndeed it does. Looks like I was not pretty thorough when checking the list. The feature's title is not exactly self-describing ("PE logging" could mean almost anything) so I just thought it would probably be about something else and didn't have a look at it.
Thanks,
Dimitris
-
-
-
Feature request for Process Explorer to identify the version of the .NET Framework that a ".NET Process" has loaded into its address space; thread is at:
-
-
-
-
-
-
-
-
Bring back the ability to choose which search engine to use!! Until then I will have to keep using version 10.2!
Thank you for the tip about the most recent version containing this feature! I was dismayed when Process Explorer itself revealed the string http://search.msn.com hard coded into its own executable.
BTW what are the other differences between 10.2 and 10.21?
Thanks,
-
what are the other differences between 10.2 and 10.21?
From the site blog:
This Process Explorer release fixes a bug in 32-bit path resolution on 64-bit systems and changes the threads tab to asynchronously populate its thread list.
-
Bring back the ability to choose which search engine to use!! Until then I will have to keep using version 10.2!Thank you for the tip about the most recent version containing this feature! I was dismayed when Process Explorer itself revealed the string http://search.msn.com hard coded into its own executable.
Not likely to happen. Microsoft is steadfast in it's refusal to accommodate competing technologies, and now that it owns Sysinternals, you'll see this with it's new toys.
-
Didn't I read somewhere that future utilities / releases would respect the Search Provider configured in IE7, if IE7 is found on the system?Theoretically
, one could also use a hex editor on procexp.exe...
-
-
-
-
Another feature request would be 'Logging Performance Data', see
-
Feature Request: Threads Column Selection
-
Diddn't I read somewhere that future utilities / releases would respect the Search Provider configured in IE7, if IE7 is found on the system?Found what I was thinking of...Autoruns ... uses the configured IE7 search engine for on-line searches ...While this isn't a comment on all Sysinternals tools, it does show that attention is being paid to the choice of search engines that the tools allow one to use. I guess I would be surprised if Process Explorer didn't adopt this technique with the next version...
-
-
-
-
How about a workaround for SecuROM's idiocy (ie refusing to run when PE has been loaded previously)?
I don�t think that it detects PE explicitly, what it does it to detect certain things like hooks and such, and considers those to be part of a debugger like some games (eg Popcap�s) do. There�s probably a way around it, just like there is a way around SoftIce detection, but it goes beyond a utility and turns into an outright hacking app (technically speaking since it circumvents copy protection and/or uses �hacking� techniques�which are now illegal in Germany and others.) -
-
Various PE Feature Requests by Matts_User_Name.
(Well, as the title indicates this is not just 1 feature request, but a rich list of requests and richly illustrated.)
--
Karl
- Edited by Simon UltimateMicrosoft employee, Administrator Tuesday, May 22, 2018 1:45 PM moderation
-
Various PE Feature Requests by Matts_User_Name.
-
-
Various PE Feature Requests by Matts_User_Name.
(Well, as the title indicates this is not just 1 feature request, but a rich list of requests and richly illustrated.)
--
Karl
- Edited by Simon UltimateMicrosoft employee, Administrator Tuesday, May 22, 2018 1:46 PM moderation
-
Various PE Feature Requests by Matts_User_Name.
-
Multiple CPU graphs in Process Properties dialog
http://forum.sysinternals.com/forum_posts.asp?TID=11151 -
-
-
(reposted from another thread, in relation to digital signature verification on processes and dlls)
Why don't sysinternals programs distinguish between:
1. Signed (and Verified)
2. Signed (but file doesn't match Signature)
3. Not Signed
4. Unknown (because the sysinternals program gave up trying to retrieve the necessary certificates after 5 seconds)
Currently they are displayed like this:
1. Verified
2. Unable to verify
3. Unable to verify
4. Unable to verify
2 and 3 should be distinguished between, and 4 shouldn't happen except in rare cases. As it is now 4 happens frequently because programs like process explorer try to verify all the items in the list asynchronously and this lags the program (especially in computer with little ram) and causes some that should be 1s to end up as 4s. Also the ability to cache certificates (in a user specified folder) would be handy for offline use. -
-
Various feature requests by x-faktor:
-
-
-
-
I have a request to quickly be able to open ProcMon from the context menu of ProcExp, with filters set to only displaye the monitored process.
See Open ProcMon from Process Explorer?
Thanks
Bernd
-
Request to display process affinitythanks
-
Additional informatin on threads and processes:requested by:
-
-
Don't know when this feature got added, but anytime there is a new process created, PE will jump to it in the list, scrolling the window. This is good in principle, however I had an HP multi-function printer installed (PSC 2510) that has a horrible printer driver which creates a new process every 30s or so. This means that when I'm looking at an item in PE (let's say sorted by memory used descending), every 30s or so the list scrolls down to this new process (it's at least very small, consuming only a few megs of RAM, but this means it appears in the bottom of the list). So now I need to scroll up again to see what's happening to the process I'm interested in...
See how this gets annoying very quickly?
What I'd like therefore, is a way to turn off the "jump to new process" feature. It's very useful in most cases, so I don't think it should be removed, but I do need a way to be able to turn it off when needed. Maybe a new menu option in the View menu?
-
-
-
It's understandable - the name of the option doesn't necessarily suggest that the view will be scrolled to display the new process. The help file is a bit clearer, however:Show New Processes: when enabled Process Explorer scrolls the Process view to bring into view new processes.
-
-
Well, my favorite utility that I use at my company (Remote Task Manager) seems to have its development suspended. It has limited use on x64 and very limited use on vista and 2008.Things it does:* Remote task viewing* Remote service viewing* Remote driver viewing* Remote netstat viewing* Remote network usage viewing* Remote shares viewing* Client/Server based task execution (also command line, like psexec, except that the daemon is permanent so its 5-10x faster)Well, that just stinks, I don't know of ANY other program which does everything RTM does.While I love process explorer on the local machine, its completely worthless to remote hosts, which is what I'd really want.Any chance of that happening? Anyone see anything else like this utility?agressiv
-
Feature Request: Totals for identical processes...
On a terminal server especially, it would be great to have a way to sum up metrics such as memory usage for ALL similar processes. For example, 30 users on a terminal server, 30 instances of Word... how much memory is Word consuming?Also, it would be great to be able to see totals per user. So again, on a terminal server to be able to see how much memory/CPU/etc. each user session is consuming.I know that having these numbers showing "live" add yet more resource usage, so a feature could be set to snapshot, or highlight a bunch of services and right-click to see total figures or something of that nature. -
-
-
-
Feature Request: Tray Icon for Each Core by ewiner
-
Feature Request:
A separate colum to show on which core(s) a process is currently running.
I have a Dual Quad-Core machine (= 8 Cores). The only way to see which Core is used by a process is to open the "System Information"--> "Show on graph per CPU" and look for an graph witch nearly 100% CPU utilisation... but only, if the process has a lot CPU usage...
Does know anyone a other solution?
Greetings
Merleg
-
Feature Request: Multi-CPU options by Adrian
-
Feature Request: Differentiate background tasks by Telcontar
-
Feature Requests: Some missings into the PE the great by x-faktor
-
Feature Requests: Process properties / Environment improvement by pouillot
-
I would like to see the following implemented so it would be easier to assess the loads certain processes are using...add % column (optional) for virtual size (memory)andadd % column (optional) for cpu (cum.) timewhere % = percentage of total for the process in that rowfor example xxxx is using 3% of the used memoryorfor example xxxx is using 5% of the total cpu timeWhy? for example total used cpu time of 0:0:13 is small but knowing that is 1% is more valuable infoAnd yes I understand these are continuous calculations...if a problem, they could be updated every second or so...or have an optional update setting for the user.Thanks!
-
An easy one: how about an option to only display the PE icon in the Tray, and not in the Taskbar? Personally, I like Applications (Firefox, Word, etc.) in the Taskbar; and monitoring programs/drivers/utilities (PE, AV software, Speaker icon, etc.) in the Tray. For now, I'm using a freeware app called 'Tray It!' to remove the Taskbar bar-icon-name thingee - but that's sloppy.Other than that one really minor nit-pick, I've liked everything else about PE for the past 2-3 years that I've used it. It's a great tool for discovering all the junk slowing down my systems!! There are so many uses for this great tool, perhaps the powers that be will do something crazy - like replace the crippled, barely-useful Taskman with Process Explorer!!!Farewell.
-
-
-
Howdy!
Thanks for the reply... yeah, I saw 'Hide when Minimized' - but I don't want to minimize. I have a dual-monitor system, so I run main apps on the left (center of my desk), and PE (plus other monitors) on the right monitor. Makes network maintenance a lot easier to be able to know everything going on around here with a glance. :-)
Winamp has exactly what I'd LOVE to see in PE, I'll include a pic...
Cheerio!
Mr.Scott
- Edited by Simon UltimateMicrosoft employee, Administrator Wednesday, June 6, 2018 2:58 AM moderation
-
-
-
Feature request: Explorer like way to locate process by typing process name,
e.g. to locate a process named "abc.exe"
currently:
typing "abc" will locate 3 processes, 'a' for the first process whose name starts with 'a', then the first "b*****" process, then the first "c*******" process.
expected:
typing "abc" will exactly locate the process "abc.exe", neither "aac******" , nor "aba*******", nor "c****"
-
Hi creyle,Sounds a bit like "RFE: Type >1 char selects better matches" referenced earlier in this topic.
-
Hi molotov,
Thanks, that's exactly what I want, thanks for pointing out, and, your time :)
RegardsHi creyle,Sounds a bit like "RFE: Type >1 char selects better matches" referenced earlier in this topic. -
I would like to have the ability to configure both the 32 and 64-bit versions of Dependency Walker (on 64-bit system of course) so that when "Launch Depends..." is clicked then the correct version is automatically chosen according to image type of the process.
-
Here I will request some features after I have read various suggestions especially Mark's list:CPU-Kernel-ID# - should show the CPU or Kernel number that is executing the process - nowadays Dual CPU Quad Core Servers have 8 active CPU kernels - it would be nice to see which CPU kernel is executing which processHide/Show Terminated processes ICON - if turning highlighting duration to higher values - for example 600sec = 10min (by changing the registry key :-) then the termination of processes could be analyzed for a longer time periode - sometimes it would be interesting to toggle away the red terminated processes to make a screenshot for exampleHide/Show Suspended processes ICON - the same for suspended processesAllow higher values at Highlighting Duration - was also suggested by others - I manipulate it in the registry (nice to have)Allow different color for Suspended processes - was also suggested by others, i find it nice to haveSuspending/Killing groups - to suspend processes of installed software that is used every now and then but not rregularly, it would be nice to define grouplist of processes that should be suspended by one click - this could be hierarchically - now I do this with batchfiles of pskill - but this solution lacks some sort of manageability - if suspending groups are implemented, it should be chooseable to suspend or to kill a processGrouping processes - nowadays I'm grouping processes with different words in the process comment. The comments are stored in the registry. and using them i can group processes on the screen or sorting them. The multtselect featur was suggested elsewhere.Automatic suspending/killing - at startup of PE there should be run a sheduler that is able to suspend/kill processes after a certain amount of time - after starting the PC some tasks will startup after a certain periode of time - i expierienced that after all the initial update and startup processes started worked and terminated approx 10 to 15 min canAnd of course the logging feature with a subset of possible variables as I described it in http://forum.sysinternals.com/forum_posts.asp?TID=9748&PN=1AddingMedium & Long term CPU usage - you display the actually short term CPU usage in the field CPU - the values are jumping up and down very quickly - i suggest two further CPU usage values - i call it medium and long term CPU usage - you should be able to enter two values for example 15 sec for medium term and 15 min for long term CPU usage and then there should be displayed the cumulated usage over the selected periode of timeResetting the PageFaults - to analyze the actual memory paging situation I'm not interested any more how many page faults were produced during booting - so I would prefer to be able to erase all pagefault values, so the cumulation starts newResetting CPU Time - the same would be interesting for the cumulated CPU time to start cumulation newThen Saving the PE after 15 min - with highlight duration set to 900 I could have a logging of the 15 minutes of all running and terminated processes with cumulated CPU usage and page faults during this 15 minAfter I had written my suggestion I had a different idea to realize a sort of logging technique. This comes in a differentMichael
-
In ProcExp all numbers in bars and graphs are displayed with 1 fixed decimal point, like %.1f kB, %.1f MB, %.1f GB... Especially in the Commit bar & Commit History graph, displayed memory values are suddenly too coarse when the consumption comes over 1023.9 MB -> 1.0 GB, one or two additional decimal places would be nice here. Possibly on other places in the application too... (I thought about constantly using at least three digits if available, but that's only an idea.)
If some line (Process, Handle, Network connection, Thread, etc.) is selected, it is displayed "white font on blue background". If difference highlighting (red / green) should be applied to the selected line, it is not visible (and gets not noticed), the selected line is still "white on blue background". Let it behave just like in the TCPView - red or green characters on blue background - and both the difference highlighting and selection are available. -
A small request to the features list.
It would be handy to have "open containing folder" option in the contextmenu of PE. This option opens the folder containing the running exe file.(its hard to open the properties of a process and copy the exe path and open run command and paste there and press enter)
Thanks to MARK for this beautiful piece of freeware. A must have tool to ROCK windows internals -
-
-
-
Hexadecimal PID & TID by Igort75, x-faktor
-
Better error message when PE fails to start because there are too many handles.
-
History in Process Explorer Search dialog by Igort75
-
-
Can you add "Hard Drive activity Graph" and system tray icon.
http://forum.sysinternals.com/forum_posts.asp?TID=14110
-
-
-
I'd like to see some simple filtering options in PE. Nothing as complex as the super granular filtering in procmon. Simple things like being able to only show processes by a particular user or processes consuming more than N number of handles would be really great.
Or even if it wasn't necessarily filtering, rather highlighting that could be configured to show such things, that would be plenty useful.
-
Hi Andy,Processes running as the same user as Process Explorer are able to be highlighted with a configurable color. Another way to easily call out the information you mentioned is to add the appropriate column to PE and sort by it. Columns (handles, for example) will be sorted ascending or descending; for "User Name", this has the effect of grouping like usernames together.
-
Thanks for the tip, though I dare say my column sorting skillz are quite mad.
I was suggesting these features because I use PE often on Win 2003 Servers that are often very busy, so it would be helpful to have filter ability to weed out the noise and make it easier to see just what I want.
Although your comment about PE highlighting the current user gives me a thought. If I were to do a "Run as..." with PE I could not only get highlighting, but also simply uncheck the "show processes for all users" option. But does Windows have an equivalent to the unix "su" or "sudo" commands? Even as Administrator, when you want to do a "run as..." you need to know the user's password. An su equivalent would allow me to run something as another user without knowing their password. -
But does Windows have an equivalent to the unix "su" or "sudo" commands?Not that I'm aware. (and discussion)
-
Yes, definitely understandable for that scenario. However 'sudo' prompts you for your own password, even when you're trying to use sudo to do something as another user besides root. Cygwin and sudo could probably do what I want, but totally not worth the effort.
...yes yes... I'm obviously a unix guy by profession. Feel free to point and laugh at the unix guy lurking in Windows forums... ;) -
<offtopic>Cygwin and sudo could probably do what I want, but totally not worth the effort.I've not used Cygwin; I would be interested in knowing how a Windows sudo might work, where your own password will get you into any user's account... From what I'm aware, short of brute-forcing, etc. this would not be possible, if the user was not already logged in. Is that a requirement for sudo as well?</offtopic>Feel free to point and laugh at the unix guy lurking in Windows forums...Not at all...
-
-
It would be really nice if process explorer let you copy the environment strings into the clipboard on the environment tab from the process properties. I tried to select all the environment strings with ctrl-a and then did a ctrl-c, but the strings did not get copied to the clipboard. I would like to be able to put all the environment strings in a file.
-
-
-
Regarding new features / enhancements... Mark has made this comment (in the PE forum), and in the context of BgInfo, Bryce has made this comment.
-
In most Windows lists (including Taskman), typing the beginning of a line brings you to the entry. In ProcExp, if I type "firefox", I end up at the first entry beginning with the letter "x". This is an important search mechanism.
The CPU and I/O graphs seem to have disconnected colors. I/O and CPU use from the same process should use the same color. The importance is probably obvious: so related activity in the two graphs can be seen, especially in the System Information view. -
Hi hurf,typing the beginning of a line brings you to the entrySeems similar to "RFE: Type >1 char selects better matches" referenced earlier in this topic (and here).I/O and CPU use from the same process should use the same color. The importance is probably obvious: so related activity in the two graphs can be seen, especially in the System Information view.Unless I'm interpreting this wrong (and I probably am) this would seem to lead to cluttered graphs, with too many colors to be of use (or possibly even display). If one wishes to see I/O and CPU activity for a process, it seems one could look at the Performance Graph of that process' properties.
-
-
-
Hi Andy,FWIW... Matts_User_Name has also requested this in this topic:Mark has responded to some of those requests here.
-
-
Feature Req: "Hide when Close" by M.v.G
-
-
-
Request: Explorer Properties dialog by pterry
-
Another excellent improvement to PE would be a window similar to System Information that would display the current and registry setting for the ever popular lanmanserver parameters that control the performance of a server.The values and keys I am referring to are located here in the registry.HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parametersSo, for example, if I opened the window, it would show me what maxworkitems is set to at the registry location above and what the current value is in the system and perhaps a low and high water mark for the item.
-
hi all :)
Excellent Program !! :Dthese are my suggestions:
1- option to add a column to see the affinity: when there are many open processes, costs a lot of time checking all.
2- in the properties of a process, in the section Performance Graph only shows a graph of CPU usage. I would like to have an option to see the use in each core, like the graphic of "System Information"
Thanks ,) -
I've made a request here: http://forum.sysinternals.com/forum_posts.asp?TID=14901When viewing the stack of a thread of a 32-bit process on 64-bit Vista (say, IE), it looks like I'm just seeing the 64-bit stack, not the "interesting" 32-bit stack (it starts with wow64cpu.dll!Thunk0Arg+0x5).It would be really great if PE could show the 32-bit stack.Thanks!
-
i have the following problem, ver. 11.13
i have an Intel E6750
when i open the window "System Information" each CPU graph shows the activity of each core.
when you put your pointer on the graph, you see a pop-up informing the process causing the CPU consumption.
but here comes the problem, when i try to find what causes a peak in core1.
EP shows the information of core0 processes in the pop-up of core1, making it impossible to know the process causing the peak consumption in core1.
intend to correct this detail? Thanks :) -
I'd like to be able select much longer Refresh times then the slowest available Update Speeds 2s, 5s, 10s - like 15s, 20s, 30s, 60s, which are handy if I'd like to observe CPU/mem/IO behavior of few selected apps (keeping their property graphs opened) over longer term - hours. How to do it in the GUI? I'm aware that by adding another 3-4 entries the list would grow a bit... Maybe an additional "Custom" refresh rate entry and a freely selectable number somewhere? (I know there is currently nothing like this in the whole GUI.)(In the past I have been doing this also to lower the PE's CPU consumption, with my number of running processes and displayed columns it was usually around 5% of CPU, with v11.20 it seems to be much lower.)[bug report] One way to achieve this is manually editing HKEY_CURRENT_USER\Software\Sysinternals\Process Explorer\RefreshRate and launching a new PE instance, which has a drawback: if I specify any "unknown" number (say 20000 for 20 seconds) and Pause the periodical refresh, it can't be unPaused (to my specified refresh rate) anymore. The selection sticks to Paused and I've to select any of predefined refresh rates to unpause the GUI. Maybe repairing this would help enough.
-
Ability of Process Explorer x64 to highlight 32-bit .NET processes.
-
-
<Network Info / Network Usage Display in Process Explorer>
One particular old and popular feature request gets re-posted once in a while:
+ Feature request: network usage (reloaded)
+ enhancement : network info in Process Explorer
</Network Info / Network Usage Display in Process Explorer>
-
* Borland Delphi applications identifier request * by clOpenKey
-
please please, mark just add to the performance graph, cpu usage hisory,the THREAD ID of the cpu using thread spike! This is a feature i would use very often! When you use a fulle screen application and you cant see the thread 's that is taking the CPU into this process, this is a must have!
-
Feature Request: Set Thread Priority by nathanreynolds
-
Type of GDI objects by Igort75
-
Feature request: process grouping by sorin
-
Any yet another:
On Performance tab of a process, it shows CPU usage -- it would be useful if it could tell me which thread was using the cpu -- I know 'processX' was using 100% of a cpu, but if I could tell which of the 45 threads was hogging things, I might be able to find the root of the problem -- especially when it seemed to lock up my desktop's mouse click-event processing. It held up clicks for the whole desktop -- but it all seemed to focus on one program (firefox) that was hogging the CPU. The problem was I still had 300% cpu left (available) out of the 400% cpu on my system. (each 100%=1 cpu)
-
Hi Astara,Sounds similar to Jul's request.
-
I agree. I read through the list at the beginning, but not through 14 pages of responses....
I have a feeling that most of these features are going to fall flat on their face.
Mark has, for the most part, been taken away from his free-win tools days -- not completely, but certainly nowhere near the resource to the community that he used to be -- but I think that was part of the point of MS hiring him as a high-level engineer -- they wanted that resource -- and they didn't want that resource handing off such useful features to the community. :-(.
Oh well....Everyone's gotta make a killing, er, living...don't think I would have done much different. Darn rich corporations -- buying up all the great talent... :-)
I asked for some of the features long before he joined MS. Occasionally even traded emails...would be nice if he would release the tools he doesn't want to support/enhance as open-source so improving them could become community projects...now it's all tied up behind the close-source wall. :-(
-
-
Hello,I'm a new user of Process Explorer. Must thank the developers. Fantastic.Just had a suggestion for a feature maybe for a future version. When chasing rogue processes, it would be nice to have the ability to mark unverified, but trusted processes. This would make unverified, unknown (and therefore as yet untrusted) processes that much easier to pick out.Thanks
-
-
-
Feature Request: Start Debug with Higher Priority by comrade64
-
What about these enhancements? by ToolsFan:Process Properties / Tab TCP/IP - I love this Tab. It would be even better, if I could add a column like "I/O bytes" here so I could see which data amount is transfered via each single connection/socket by this process.
-
-
-
Physical Memory in Status Bar Suggestion by linearmode
-
Hi all sysinternals fans!
I have to mention a feature i wish i had into PE context menu:What i want is an item to open the folder of the image path of the binary in the explorer, just like the "open the folder" item of the explorer we can see with the find files wizard. What do you think of this? :)regards -
-
Hi,
a feature that I would find very usable in process explorer is filtering of processes by name. Often when there are more than 30 processes in the list it becomes difficult to find what I'm looking for.
It would be a great option to be able to hide from the list some processes that are always running and not making any problems.
And btw, thanks for PE - it's an invaluable tool already as it is...
Regards,
Gregor
-
-
-
-
I haven't added a "dump process" feature because you can get that same functionality by installing the Debugging Tools for Windows package, whereupon Process Explorer will add a "Debug" item to the process context menu. When you select it, Process Explorer will launch Windbg, which then attaches to the selected process. At that point you can save a dump.
-
whereupon Process Explorer will add a "Debug" item to the process context menu.I saw this debug, I tried it, I have WinDBG installed, but when I try to debug and confirm nothing happens..(maybe due to 64 bit?) Furthermore I think most would prefer additionally a direct and simple dump function.
-
SystemPro,
You might have a look here for ideas on how to configure the debugger:
Introduction to x64 debugging, part 1
-
-
-
-
Today i was debugging an java/tomcat application.
The procesexp environment tab was the tab which i needed alot, to check all the java variables etc.Those value's can be long :).And it would be a nice extra feature to be able to right click copy to clipboard an environmental value.*Right click copy value on Environment tab* -
I have a suggestion for improvement of the Process Explorer help.
I'd say it lacks explanation of the process performance data.
As a good example for such an explanation you can have a look at the Windows Task Manager help topic titled "Process counter column headings" (on Windows XP Pro.).
One of the unclear terms is "Other Bytes" in the I/O group of the process performance data.
In the Windows Task Manager help it is explained as
"the number of bytes transferred in input/output operations generated by a process that are neither a read nor a write, including file, network, and device I/Os. An example of this type of operation would be a control function. I/O Other Bytes directed to CONSOLE (console input object) handles are not counted." -
Hi reni,*Right click copy value on Environment tab*Looks similar to this request:Also in this topic, here.
-
-
-
In the Lower Pane view when Dlls are shown, or also maybe for properties of a file handle that happens to be an executable binary, it would be very helpful to have a Properties Pane that exposes the COM registration for the file (from HKCR), and provides a button to Unregister the binary.
Thanks for your consideration.
-
Feature Req - Option to Disable Tooltips by MarloweMacMurp
-
Note: moved user1024's post into its own topic:
hide Process Explorer from task bar?
The topic is essentially a +1 for Mr.Scott's request to remove Process Explorer from the task bar while keeping the main window visible.
-
-
Feature Request Keyboard Shortcuts by Beach
-
-
Request to have Process Explorer save settings, when the user running Process Explorer is being logged off, discussed in:
Missing tray icons after restart -
Feature Req: History in Search dialog by robertrusso
-
-
-
From 2008-11-19:
Updates: Process Explorer v11.3, Handle v3.42 | A new Mark's blog post | 2 New Mark's webcasts: Case of the Unexplained and Inside Windows Server 2008 R2 Virtualization and VHD Improvements::
Process Explorer v11.3: This update to Process Explorer includes numerous enhancements and bug fixes, including a physical memory history graph...
-
-
Hello,
1- add a column to view the affinity2- able to select multiple processes to change the affinity, priority, etc. .. faster than do so individually.
3- In the System Information window, add option to change the way the graphs show the CPU information when it is put your pointer over them.
a) Default
b) if we put the pointer in core0, show only the process that consumes more in the core0, so that we can identify it.
Thanks :)
-
Can we please, unless I somehow missed it, have a way to "deselect all" under set affinity, or right click to clear all but the one I clicked on.
It sucks having to unclick each core in a dual quad system.. unless I figure a way to automate the process....
-
New feature request: Display hooks. by Lundholm
-
-
Opinions on suggestion: GDI SysTray Counter ? by Matts_User_Name
-
PE features suggestions!!! by igalk474
-
-
Is it possible to put back the old "current CPU Load" tray icon?Also discussed in this topic:
CPU usage in tray area
-
Request: Use of comment field by MartinP
-
-
A forum search for Unload DLL shows this has been requested previously, most recently here:
function request for process explorer -
-
-
A feature I would find useful is a roll up of resources, CPU utilization... So for example, when I collapse Snagit32.exe, it would show the resources of Snagit32.exe and also the TscHelp.exe, SnagPriv.exe, and SnatitEditor.exe. This would give me a more accurate idea of the footprint of this application.TIA
-
A few practical suggestions by wj32
-
-
Deferred Procedure Calls (DPCs) details showing me what is causing constant DPC and Hardware Interrupt usage.Ok Kernrates does not work in Vista 64.What else could I try ?Please advise.Thanks !
-
-
-
-
-
-
-
-
OK, I hope you're not running 64-bit Windows: http://processhacker.sourceforge.net/
Download the latest unstable release.
-
-
Requesting: "Process Manager" toolI use Google Toolbar, but I *hate* GoogleUpdater. I'm one of those people who want to chose when my software is updated. No matter how hard I try, I can never seem to catch google updating my toolbar from V4 to V5 (It updated itself again today). And Process Monitor is too bulky to be running all the time! So...Add a tool called "Process Manager" where I can create a filter (much like in ProcMon). The idea is to capture new processes and handle (pause|terminate) them as the user specifies.The Filter window- would be a near rip-off of the ProcMon filter window.-Where: [Process Name | Path | Command Line | {other fields}]
-Evaluator: [is | is not | begins with | ends with | contains | excludes]
-Text/Value: [text/value]
-Action: [Terminate | Pause | Notify me | Pause and Notify me | Terminate and Notify me]
-Notify: [Pay a sound, Bring Process Explorer to front | Display Popup | {etc}]Example:[Process Name] [Contains] ["GoogleUpdater"] [Pause and Notify me] [popup]Notification Popup would be: "Process Explorer just paused "GoogleUpdater.exe (1234)". Due to Process Manager filter #3". <OK> <Terminate> <Resume process>Justifiation:This would really great for troubleshooting issues where you have a hard time determining when/how a process is starting. Especially those ones that start and stop right away (Update checkers) or are triggered by user action (IExplore, Adobe, Apple).Personally, I would use:*jusched* = [Pause and Notify me] [popup]*GoogleUpdater* = [Pause and Notify me] [popup]*AppleUp* = [Pause and Notify me] [popup]*AcroTray* = [Pause and Notify me] [popup]*QTTask* = [Pause and Notify me] [popup]*isuspm* = [Pause and Notify me] [popup]*Updater* = [Pause and Notify me] [popup]ProcMon is a great tool to catch this sort of thing if you know exactly what and when you are looking for. But this tool would be invaluable because it could automatically Pause or Terminate the process faster than any manual action could - namely before the process delivers it's payload.Please feedback if you read this. Pro or Con.Thanks for your time,ControlAir -
-
-
-
My first thought is that this sounds awfully close to what some HIPS products already do...Molotov,Thank you for reading my post and commenting. It's appreciated.I'm not quite sure what HIPS products are. I just know that I run Process Explorer almost constantly on my computer and this just seems like a natural place for such a tool.
-
HIPS = host-based intrusion-prevention system
I was remembering a previous experience I had, when I had installed Comodo firewall for 2.5 hours - it seems it was asking me every time a process was started, what I wanted to do. Presumably, there is a trainable rules-based mechanism incorporated that would seem to accomplish some / most / all of what you described.
-
...I was remembering a previous experience I had, when I had installed Comodo firewall for 2.5 hours - it seems it was asking me every time a process was started, what I wanted to do...That's exactly why I would want something like "Process Manager Tool" to be added to Process Explorer. Because I don't want a product that watches everything asking me what to do with each process. I want one that only looks for what I tell it to look for. Also, I wouldn't want to use a host-based intrusion-prevention system to do basic troubleshooting. Process Explorer is a Flash-Drive program that i can use on any computer I'm working on -- which is often part of my job.Anecdotal: A few months ago, I was using PE to watch Adobe Reader do some magic: Whenever I floated my mouse over an .PDF icon(without even clicking it), a new adobe process would magically launch. I had never seen this before and I thought of all the malicious possibilities that it implied. I can't remember what I did sine then to disable that little trick. I think it was a regedit on the .PDF filetype. I wish I had the ability to capture that process and suspend it.Also, that damned (ARGHHH - My apologies for loosing my cool) GoogleUpdater updated my toolbar again today from V4 to V5. Now I just want ANY tool that can suspend a process so I can figure out how to stop Google from those updates! Any ideas?
-
I want one that only looks for what I tell it to look for.Perhaps, HIPS software has this capability ("default allow"-type behavior).I wouldn't want to use a host-based intrusion-prevention system to do basic troubleshooting.I would not classify rule-based process execution allowance decisions to be troubleshooting, or basic troubleshooting... I personally think the feature is more appropriate for products like e.g. the referenced HIPS software.Now I just want ANY tool that can suspend a process so I can figure out how to stop Google from those updates! Any ideas?You may be interested in this topic:
Whitelist -
Molotov,Thanks for your thoughts on this. I started to look more into HIPS and programs that can whitelist/blacklist processes. So far, I haven't found anything I want to add to my troubleshooting toolkit. But I'll eventually find something, I'm sure.I still give a +1 vote to a "Tools | Process Manager" being added to PE. It still seems like a natural addition to me.Thanks again...
-
Feature Request: process Average CPU usage by geppetto
-
-
-
Request: Enhancement for dealing with malware by utaeladil
-
-
Process explorer accessibility by tspivey
-
-
Hi,
what do you think about something like an internal list of known processes (perhaps with md5-hash) and the possibility to hide those processes? It would be much easier to locate new processes or modified programs. In the context menu should be an option 'add to trusted processes'. A quick button for changing the mode would be perfect.
Frank
-
Hi Frank,
Something along these lines has been suggested previously (can't recall precisely where, but I would not be surprised if it is in one of the 22 pages of posts that comprise this topic).
One thing that may be helpful is to use the Comment field on the process Properties Image tab.It would be much easier to locate new processesAdd the Start Time column and sort by it?modified programsThough I don't see a column for it, the Image tab of each process' properties includes a "Time" field.
-
Hi molotov,
thanks for the fast response.
".... suggested previously"
Sorry, I studied just the first post with the summarization.
The idea with the Start Time is nice - but only for the current session. New programs in the autostart will be mixed between all other programs past next reboot.
The idea to hide programs with a known md5-hash is better than using the Time field. Viruses don't change timestamps. There must not be a visible column for the hash. I do not want to see it. Just an internal list:
program, md5-hash, hidden-flag
That would keep the PE table much shorter and you would see evil new programs with one view, instead of studying (and remembering- I'm beyond 50) the hole list.
Frank -
-
-
-
-
-
I would really like to see the ability to view the processes of remote machines.
I'm not sure what commands/libraries you use to retrieve the processes, but wouldn't this feature be as simple as adding an option to change a command flag? (e.g. if you're using the TaskList.exe command, just add the /S flag and allow the user to input a remote station).
I could write my own utility that would do this, but I don't really want to reinvent the wheel...especially with such an awesome utility like Process Explorer already out there.
Thanks!
-T -
Hi TSkull,
Process Explorer uses NtQuerySystemInformation to obtain various information. It is not just as simple as adding some option to some internal command. That said, as you might imagine, you are not the first to request such a feature...
-
Hi molotov,
Thanks for your quick reply and for filling me in. :-) I kind of figured that it would've been too good to be true for that to be the case (easy as adding some option to some command).
That said, would there possibly be an eta on a feature like this? I understand if not...but it never hurts to ask...
-T
-
-
-
process explorer dll copy by Creep
-
Feature Request: Preserve Parentage Information by FleetCommand
-
Feature Request: "Secure" RunAs!
Process Explorer already has Run as Limited User, but how about giving it an UAC-like Secure RunAs that can be used on XP, too? I mean, the possibility to use Process Explorer to run something as administrator with the login dialog in a secure desktop, like that of UAC, so the admin password can't be keylogged by any malware running in the limited account. That would be a useful feature. I already suggested that for a stand-alone tool, but it would be cool in Process Explorer, too. �
-
Hello,
I vote also for this feature request. A proposal could be to handle "Ctrl+C" to copy the selected environment variables into the clipboard.
This will solve the pb of viewing long environment variables
Hi
It would be useful to save Environment variables of a process to text file.
Is there another utility that could do it ?
Thanks -
-
-
-
-
A feature I would like to have in Windows 7 :
a "Run as Administrator" Jump list command in process explorer's icon.
For the moment, I launch process explorer with CTRL+MAJ+ESC, and it launch himself as a normal user (normal). But I often need to do something as administrator, and as I don't have any shortcut, I must dig to my folders to find the .exe, right click on it > Run as Administrator. It would be a nice thing to have.
-