@__philippe
Thanks for the useful article you provided. In fact I use both Process Hacker and System Explorer and I wonder which one I like more, both are exactly to my taste.

@smaragdus, @DarkShadow

For sponsors of registry's virginity preservation society (yours truly included),
Process Hacker is a worthy alternative to Process Explorer.
http://www.portablefreeware.com/index.php?id=1934

ProcessHacker includes quite a few unique functions too, lavishly detailed here:
https://chentiangemalc.wordpress.com/2011/06/13/process-explorer-vs-process-hackerpart-1-of-2/

https://chentiangemalc.wordpress.com/2011/07/03/process-explorer-vs-process-hackerpart-2-of-2/

@webfork
I do not consider Process Explorer to be portable, just like AutoRuns. Minor or major settings, they are saved to the registry which kills portability on the spot, at least for me.

DarkShadow: Some programs that write minor or inconsequential settings to the registry can be accepted.

Why is it listed as portable if it writes its settings to registry ?

@ __philippe: Thanks ... and updated ;)

Process Explorer updated to v16.05 (released 10-MAR 2015)
PE now includes a Protection column that shows process protection status

Process Explorer updated to v16.0.1 - (Feb 4,2014)
http://blogs.technet.com/b/sysinternals/archive/2014/02/04/updates-process-explorer-v16-01-sigcheck-v2-02.aspx

This release fixes a bug that could cause a crash when the Vir*sTotal column is added to the process view, and another that could cause a crash when verifying digital signatures.

Process Explorer v16.0.1 download here:
http://technet.microsoft.com/en-us/sysinternals/bb896653

__philippe

@ __philippe: Thanks ... and updated.

SysInternal's Process Explorer updated to v16.0 (January 29, 2014)

Thanks to collaboration with the team at Vir*sTotal, this Process Explorer update introduces integration with Vir*sTotal.com, an online antivir*s analysis service. When enabled, Process Explorer sends the hashes of images and files shown in the process and DLL views to Vir*sTotal and if they have been previously scanned, reports how many antivir*s engines identified them as possibly malicious. Hyperlinked results take you to Vir*sTotal.com report pages and you can even submit files for scanning.

===
Note that Process Explorer v16.0 itself includes precious little explanation about the new Vir*sTotal checking feature. The internal help (F1) does not mention it at all.

However, Martin Brinkmann (from ghacks.net) provides a neatly illustrated elaboration on the subject :
http://tinyurl.com/qduwkor

__philippe

@ __philippe: Thanks ... and updated.

Sysinternals' Process Explorer now updated to v15.40

http://technet.microsoft.com/en-us/sysinternals/bb896653

__philippe

For correct Process Explorer "Configure Symbols..." options check, for instance, http://blogs.msdn.com/b/vijaysk/archive/2009/04/02/getting-better-stack-traces-in-process-monitor-process-explorer.aspx

For a portable, this essentially means you have to get an updated 'dbghelp.dll' file to place alongside the PE executable, and then point to it in the "Debug.dll path" field; in the "Symbols path" field, after creating a 'symbols' folder inside the one you keep PE in, you could paste the following:

SRV*symbols*http://msdl.microsoft.com/download/symbols

(You can change the part amidst stars (the cache path) to whatever you want or leave it out for no caching.)

PA.c released a wrapper (online installation) that makes Process Explorer truly portable: http://portableapps.com/apps/utilities/process-explorer-portable

I've changed the 'Download' link as it hasn't been updated to reflect the 'Live' site
From:
http://download.sysinternals.com/files/ProcessExplorer.zip
To:
http://live.sysinternals.com/files/ProcessExplorer.zip

abc - I fixed it.

\Files\ part of the URL needs to be lower case \files\ I can't change the entry until I spam the forum with 50 posts, so...

here's the proper link:
http://download.sysinternals.com/files/ProcessExplorer.zip

Seems that dreadful "unreadable memory" error has FINALLY been fixed in this version.

giving me the following download error:
This XML file does not appear to have any style information associated with it. The document tree is shown below.
OutOfRangeInputOne of the request inputs is out of range.
RequestId:***Time:***

emka: modified link, should work now

Link to website seems to be broken.

Site says: V15.01 ... TPFC says: V15.02 ... Download is: V15.03
TPFC-DB updated ;-)

15.02 Better check the site again

@Shodan, I've noticed that too, that's the why I use 11.x on my laptop. I updated to 14.x on my other pc and I haven't noticed the CPU issues, since then, perhaps it has been fixed.

The latest version - 14.1 - is a CPU cycle hog. HUGE difference between 11.1 and 14.1 in cycles the app uses.

@Samalama It's on this site because it's useful, simple as that. Despite writing registry keys, I now use it daily on multiple machines, and in my USB Toolkit, most SysInternals have become more stable now days.

Writes to the registry - NOT PORTABLE.

Like GBJ says....GREAT utility. However, that being said, how anyone can consider it 'portable' (as it indeed writes all settings to the registry) simply blows my mind.

Will not use until really is made portable - why is it even on this site?????????????

be cautious of some of these programs from sysinternals, i've had some restarts, bsod, crashes, freeze ups, and lingering processes from using their utilities, never had this problem with any other software. i'm a fan of process explorer, procmon, autoruns, and a few others.. but man do they have issues. i suppose because i have older versions or whatnot. more reason to not use the registry for settings!

Does anyone know of a changelog for PE? Thanks...

My take on Portable Software is programs that just work when I run them without installing... Features like INI file based settings, stealth and removable drive awareness are very welcome pluses, but they don't change that basic tenet.

Just my 2 cents.

First, this is one GREAT utility. However, that being said, how anyone can consider it 'portable' (as it indeed writes all settings to the registry) simply blows my mind. Hello ? It is NOT PORTABLE ! ! Just TRY running it from a USB stick and see if your views and column settings remain ! PLEASE learn the true meaning of 'portable.' You cannot change the definition based on your personal taste and whether or not you like one app over another.

Where's the changelog? Is it really worth getting the M$ bloat instead of keeping the version Bigoeuf kindly put at our disposal?

Re:avoidz: 10.2 - Jul 14 2006 - Final version prior to acquisition by Microsoft
http://www.filehippo.com/download/b1ccff64d93539021e5d35ad2c08b3ef/download/

Look at the screenshot;
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

"Micro$oft took this great utility over", incorporated their own 'taskmgr.exe' and called it a new version

10.2 - Jul 14 2006 - Final version prior to acquisition by Microsoft

:)

Like others before, I must say this is one of my essential utilities. I run it permanently on all my computers!

Although I haven't had that problem, I am really disapointed by what Lego revealed ("Since Micro$oft took this great utility over, you can not kill several MS processes, like WPALogon.dll") which I find a serious breach of confidence -- we're so used to get 'coned' by M$, aren't we?

Does anyone know, which was the last version that wasn't crippled in this way? I might still have it laying around...

Erm... email would probably help, eh? a s c h e e l (at) g m a i l (dot) c o m
Or find me on AIM JohnC256

I've got some older versions if you want it. Back when it was split into 4 different versions. 9x, Amd64, Ia64, Nt

Is there a pre-MS version still available?

would you kindly support INI file?

saving is a must i would say

Since Micro$oft took this great utility over, you can not kill several MS processes, like WPALogon.dll.
Guess why.... ;-)

GBJ, one posting in this thread http://portablefreeware.com/forums/viewtopic.php?t=1542 says that JPE can be used to make process explorer truly portable

The only thing this beauty lacks is an INI file to store your custom settings, including visible columns and column widths. Then it would be truly portable.

Great just what I was looking for for my portable collection. Smart prog. Thanks.

There's a BUNCH of great standalone apps are SysInternals, but this is the one I use almost every day at work. When trying out this app, make sure you right-click on the column headings, and check the Command Line checkbox, which will tell you where the listed process' file actually resides (makes it much easier to figure out which is the virus or spyware, if the file is sitting in the root or temp folders of the drive). "A"'s comment is correct about the settings, but they're "per-machine." Not entirely sure what they mean by "crash process" but you can "kill" processes and ever entire process trees (the process and every process it may have spawned).
All in all though, a great utility for anyone's "pocket-toolkit."

when you set it up just the way you like it.. then suddenly all the custom settings have magically dispeared! that is freaking annoying, other then that it's a very good program, but could be better with more process manulipation features (free memory, crash process, ect)

nice prog to see what''s happened with process

This program rocks. Ever try to find that pesky virus that won't go away? Squash it with this program. Tells you everything about everything going on inside you machine. All of it.

You can really tell this is an Advanced Task Manager! It by far surpass Windows Task Maganer! Give it a try!