Mark Russinovich and Bryce Cogswell have released a new version of a real-time process monitor for Windows (tentatively called 'Process Monitor
') that combines the features of Regmon
. There is a whole set of new features too, of course.
Process Monitor keeps track of file system, registry, and pocess/thread activity in real-time, allowing you to dive deep into the internals of Windows and gain an insight into what is going on. It runs on Windows 2000 SP4 with Update Rollup 1, Windows XP SP2, Windows Server 2003 SP1, and Windows Vista as well as x64 versions of Windows XP, Windows Server 2003 SP1 and Windows Vista. As the authors describe:
It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more.
It can also give you a list of files currently in use, which may prove to be very useful in case you want to delete a file that Windows says is in use. A similar tool called Sloth is available for the Mac.