How to use ProcMon on Windows XP

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.

It seems that the ProcMon from May 13, 2014 version 3.10 works on XP. Available for download from the Archive.org site: https://web.archive.org/web/20140625080651/http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx

Download older versions of Process Monitor for Windows. All of the older versions of Process Monitor have no viruses and are totally free on Uptodown.

Process Monitor, or ProcMon, is an advanced monitoring tool that allows you to see in real-time the file system, registry, and process activity occuring in Windows.

摘要: 執行程序監視器的步驟。 請按照以下步驟執行 Windows Process Monitor （ProcMon） 工具。 3.接受或同意授權合約以繼續。 4.隨後會出現下列視窗。 5.重現問題並儲存記錄檔。 7.選擇要與路徑一起保存的檔案的格式。 7.擷取並傳送儲存的檔案以供調查/檢閱。 有關進程監視器的詳細資訊，請參閱下面的Microsoft文檔。

Download Process Monitor for free. Advanced monitoring tool for Windows. Process Monitor is an advanced Windows monitoring tool that provides real-time visibility into file system, Registry, and process/thread activity.

Process Monitor 是微软提供的一款系统进程监视软件。 常用来检测 恶意软件 和处理系统故障。 绿色版免安装，解压后双击运行Procmon64.exe. 打开软件后，主界面默认展示字段分别是： Time of Day：事件发生的事件。 Process Name：触发该事件的进程名。 鼠标悬停在进程名上可以显示进程路径。 PID：进程ID。 Operation：事件的操作类型。 Path：事件操作的文件的路径，非进程路径。 Result：事件操作结果。 Detail：事件操作的额外信息（没啥用）