How to use Procmon to Troubleshoot a Problem by Britec

How to use Procmon to Troubleshoot a Problem by Britec.co.uk

If you are not familiar, process monitor (procmon) is monitoring tool that helps you to monitor in real time processes activitiy, Registry and file-system. It combines to useful former tools of http://technet.microsoft.com/en-us/sysinternals/bb545027.aspx called FileMon and RegMon. Also with Process Monitor you can log activity during the initialization of boot-start device drivers which is probably the most useful option.
My example will be rather simple just to show you how to use ProcMon as far as this will be enough to understand what can be done with it. To be honest, to use Process Monitor you must have certain knowledge about windows processes as well as their names and usage.
I will use the general Process Monitor example with ccleaner.
-----------------------------------------------
need help with computer problems?
http://www.briteccomputers.co.uk/forum
----------------------------------------------
http://www.britec.org.uk
http://www.pcrepairhertfordshire.co.uk

Category:

Howto & Style

Tags:

• How to
• Procmon
• Troubleshoot
• Problem
• Britec
• process monitor
• windows
• computer
• software
• FileMon
• RegMon
• tech
• IT
• Fix

[ExCLuSIv3Modz]

brittec09 is a beast, both his videos and his website is super helpful thank you :)

[Britec09]

@ExCLuSIv3Modz glad I could help.

[tinydx95t2]

You make the best computer help videos i've ever seen anywhere.

[Britec09]

@tinydx95t2 Thanks mate....all the best Brian

[mitchman5155]

You have to have some of the best "how to videos" on the internet. I thank you very much.

Mitch.

[Britec09]

@mitchman5155 Hi Mitch, Thanks for your kinds words...its nice people like you that make me make videos..Thanks its means alot.

All the best

Brian

[irfanfare]

It was great as an introduction, where to find the detailed "How to use' ? Even Russinovich assumes you know the steps and gave precious little on his site.

[lara400notout]

i want that wallpaper!

[bolius1]

Thanks, be interesting to see you do it for an infected machine