AppMonitor/process monitor.

Similar Questions

• Here a process monitoring app office charge before explorer.exe

  Hello

  I was asked to find a way to load an office process monitoring process before explorer.exe

  Our monitoring application takes a few minutes to load, and we would like to speed up the process.

  It was suggested that replace us explorer.exe shell by default with our app.exe and as soon as it loads restoration explorer.exe shell

  Anyone have any ideas?

  RR

  Hi ReggieRichard,

  Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the public on the TechNet site. Please post your question in the Sub forum.

  Link: http://social.technet.microsoft.com/Forums/en-US/itproxpsp/threads

  With regard to:

  Samhrutha G S - Microsoft technical support.

• Linux process monitoring

  I just installed NMS.

  I want to follow some linux process, I can monitor basic server stuff and set alerts for up/down interface... I get the email alert.so it works fine...

  I read on the forum above to open this post...

  1 there is not an error or omission in the supervision of the State... and the current process monitor is Ok.

  2. I have the same problems as the 2 another post I found in this community...

  I set the alert to send an e-mail if the process is NOT running... but the process is running and I get the alert...

  I set the alert to send an e-mail if the bias is running... I stop the process and I get the warning that the process is running...

  I check the process with the command ps - ef too...

  I tried with centos and debian 607. same problem with both...

  is this a bug? NEM 6.8.24479 or am I missing something...?

  Hello

  We have already discovered this and Quest were recognized as a bug - BUG ID 2792 "alert message indicates that the process down when they are running. We have no date yet for a fix.

  Brian

• Customize the FDM process monitor reports

  Hi all
  
  The FDM process monitor reports can be customized to the location of FDM group/hide/show, please suggest.
  
  Kind regards
  Sanjeev

  The reports are relatively easy to treat. Open the program client FDM (Workbench), expand the reports tab and then you can change the report from this point. I would recommend to copy the existing report and work on a copy in case where. If you have to write a report of basic skills (crystal reports / access reports), it should be fairly simple. If not, may take some studying to learn how to change the report. In addition, a query SQL/T-SQL basic writing ability would server you well too.

  The report used by FDM tool is Active Reports. They have online user guide; However, it is not terrible:

  http://www.datadynamics.com/help/ActiveReports6/arGETActiveReportsDesigner.html

• Including a new report of process monitor

  Hi all
  
  I was wondering is adding a new type of report on the Workbench under process monitor reports (default reports are: Process Monitor, Process Monitor with locks, all categories of process, process status period monitor range, process monitor sorted by location hierarchy) I might modify the information showed by this 'new report '.
  
  For example if I generate the process with locks monitor, it will display all only place that I have in my application, but I need this 'new report' to see the only some of these places filtered by an attribute, I supposs the correct way to do currently to locate and modify the script being called by the adapter to publish this report. The problem is that I can't find what is called script.
  
  I'm wrong and this publication process is done through a already compile library, a .dll file? If this is the case is anyway to replace this call?
  
  I hope I made my problem clear enough
  
  Thank you
  
  Published by: HFMColUser on 26 - it is a-2011 15:41

  Hello
  Log on to FDQM (FDM) work bench customer, and then click Reports tab.

  Copy the report you want to edit and paste (I prefer to do it this way, we will create all the problems in the existing reports)
  change the description of the report.

  Right-click on the report now. Definition of report clcik properties, tab click SQL on the top.

  Now add vpartcatpercartesian.partname like '% E '. so, you will get only the localities beginning with E in your report.

  Published by: PadmajaV on August 27, 2011 03:15

• With VFoglight 6.1 process monitoring

  Hello
  I'm trying to get more watched through the console of VFoglight. Anyone who has gone through or have seen a way to do this?

  Recommended Monitor Baseline Performance counters

  ID

  Meter

  Description

  Meaning

  1

  CPU - % time processor

  The percentage of time processor used for user processes or transactions as opposed to sitting idly CPU system

  More use of the processor, more processors are used the user to process or system transactions

  2

  System - Processor queue length

  The number of threads waiting for processor

  The higher the queue, the more threads waiting on processors to process instructions on the CPU

  3

  Memory - Pages/sec

  Pages, reading and writing memory

  More the memory usage, processes are too busy in memory

  4

  Paging file-% of use for _Total

  The percentage of all page files that are in use

  More use of the swap file, more memory is needed to support the system exceeds the physical memory on the server

  5

  Physical disk - AVG. disk queue length.

  The number of read and write requests pending for the physical disk subsystem

  More average disk queue length, the more resources are waiting for previous applications to the end before responding to their request

  6

  SqlServer: General statistics - user connections

  The number of users of the system

  The more users indicates that the server is unable to load system

  7

  Network bytes/s interface

  The bytes sent and received via a single network adapter

  Determine if excessive network traffic occurs on a network card, or if the system has isolated problems on the SQL Server with no network traffic

  8

  SQL Server: locks - waiting for latches/sec - _Total

  The application of lock waits per second

  Determine if an excessive blocking is limited to resources for users to access the system

  9

  System - Threads

  The number of threads on the computer

  Determine if the number of threads exceeds the typical reference level that indicates more than process are occurring on the system

  10

  System - Changes of context/s

  The number of processes that are changing threads per second

  The change of context, plus the server is stressed

  Thank you
  Paresh

  Paresh,
  have you watched or read the documentation on the physical operating system followed by cartridges and what they can provide for you? You must have vFoglightPro to use them, but they might be what you're looking for.
  -larry

• JRockit - process monitor JRockit java

  Hello everyone, we have installed in our environment (Windows Server 2008R2) that uses the Java JRockit of Weblogic Platform. I came across the question where I cannot follow the process (connect to JVM) java through the JRMC (JRockit Mission Control) as the java process runs user SYSTEM account. This is why it does not appear as a local JVM. If I run it via my account I can monitor fine. Can anyone suggest how to monitor the process of java which was run on the SYSTEM account. I can't log in as the SYSTEM the server tho. Thank you, Viktor Ozerov

  In my view, your only option is to add some flags of the jvm to WLS to enable the agent remote jmx.

  Something like

  -Dcom.sun.management.jmxremote

  -Dcom.sun.management.jmxremote.port = 7091

  -Dcom.sun.management.jmxremote.ssl = false

  -Dcom.sun.management.jmxremote.authenticate = false

• How to get process monitoring

  Hey people, I'm a process customized to my product. It is a java process that establishes a connection to a database jdbc. I collect the settings by default more open descriptor and discussions.  My question is how Hyperic determines what value for the Threads in the process are?
  
  or more precisely, what command line equivalent is to see how many Threads a process uses (unix)? Are these threads to the given operating system or threads created by connecting to a database, for example?
  
  Thank you
  
  Deeboh

  Hi Deeboh,

  If you perform a code search, you will see that the process Threads are determined by SIGAR:

  
  Template="sigar:type=ProcState,arg=%process.query%:threads"/ >

  http://sourceforge.Krugle.com/KSE/codespaces/EPwnGe

  And based on my tests SIGAR is equivalent to the operating system.
  To answer your second question:
  "ps - eLf" shows the number of threads using a process.

  PS - eLf | AWK ' {print $6 "" $10}' simply prints the number of threads and the command.

  See you soon
  Mirko

• Monitoring by AppMonitor agents

  Hello

  I have tried for hours to make a fundamental Foglight task and may not have to work.  As usual, thank you in advance for your help.

  I have two simple tasks to do.  First of all, I simply monitor a 3 on a client process called "replicat.exe" and e-mail alert when the any of the 3 process goes.  I did the following so far:

  Created an appmonitor agent

  Editing the properties of the Agent and defined process in the tab list of process in the Application/process list.  I have used 3 in the field number of Instances.

  Newspapers began and verified on the agent and everything is ok

  To get an alert when the process dies, I copied the Process_Availability rule in my own custom rule and simply set the variable where to send the alert.

  We stopped in the process, but nothing is happening: I do not receive an alert.  I read through some of the posts on the community and tried to edit and create custom rules, but I still can't get an alert to come out.  Is it more complicated than I think?  I used to use all the time in V4 and it was very simple.  I can't believe that it's changed.  Need me one more time!

  The second thing, that I am responsible monitors a file for changes in growth.  I need to create a rule that alerts when there is a change in the size of the files, upwards or downwards.  I think I can use the AppMonitor once again, but I was not sure where to find the settings or framing to put in place only.  Any suggestions on how to implement that?  Are there examples anywhere on how to do?

  Thanks again guys,

  I always enjoy your posts!

  Paul

  Hi Paul,.

  It seems that you did things right. Your description, I would expect that you get an alert when you have stopped the process monitored. Please, do the same thing again and go to the dashboard AppMonitor analysis group of operating systems to inspect the measures collected by the agent. If the problem persists, please post a screenshot of this dashboard captured five minutes after the stop of the monitoring process.

  Kind regards

  Brian Wheeldon

• The process of Microsoft Windows with Hyperic HQ monitoring

  Hi all
  
  First of all, I'll give you a quick overview of myselve. My name is Martijn you moulder and I am an employee at the MPS. As a case study, I run a trial with HypericHQ. I already know many HypericHQ functions because I did a case study of this tool before (personal use).
  
  However, I have a question: is it possible to watch processes on Windows (as in the window when you press ctrl + alt + delete, processes tab) with HypericHQ.  If Yes, how can I do this and if not: it is possible to control batch files?
  
  You would help me a lot in answering these questions.
  
  Kind regards
  
  Martijn you design and construction

  If you're looking to monitor a process which will be always available you would install a "Process Monitor" Service by:

  1.) platform that exist on the process, create a new Service platform.
  2.) give this process a Service name and choose "Process" from the menu dropdown, then select OK.
  3.) click the properties link on the next page setting is displayed.
  4.) from this page, enter the information you want about the process, you want to monitor.  For example, on my Windows Server I can enter "State.Name.eq = hq-agent" under the text box process.query to monitor the actual hyperic agent process.  Just be sure that you enter the name of the process as it is appears in the windows task manager and "DO NOT" include the .exe file. bat. etc...

  This will allow you to follow a process with the assumption that it should always be running.  To more precisely control a .bat file, you can configure a file of file server service that will let you run and collect specific information for this file.  Just do a search on the establishment of a Fileserverfile service.  Hope this helps :)

  The_Krummer

• Conflict of a process 'rundll32.exe' while playing games

  Some of the games I play: NFS Carbon, a "rundll32.exe" process is also generated at the same time. This process makes use of the processor to 100%, which makes my PC too slow like a SNAIL. In some devastating diseases, 75% of the list of all the processes in the Task Manager is filled with "rundll32.exe". This process is in the 'System32' of 'Windows' folder in C:\. My Kaspersky Internet Security 2010 also ignores this process like a virus. My PC is also equipped with A 3 GB of RAM, AMD 2.01 GHz processor and a nVIDIA 9400GT 1 GB gaming graphics card. Its quite pathetic that I can't play a simple game like NFS Carbon with this configuration. Please help me as soon as possible...

  Hello

  Maybe these will help. (If you think that it may be malware see next message.)

  References to Vista also apply to Windows 7.

  What is rundll32.exe and why it works?
  http://www.howtogeek.com/HOWTO/Windows-Vista/what-is-rundll32exe-and-why-is-it-running/

  What is the suspicious Rundll32.exe process?
  http://WindowsXP.MVPs.org/Rundll32.htm

  -----------------------------------------------------

  Follow these steps:

  Try these to erase corruption and missing/damaged file system repair or replacement.

  Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

  Enter this at the command prompt - sfc/scannow

  How to fix the system files of Windows 7 with the System File Checker
  http://www.SevenForums.com/tutorials/1538-SFC-SCANNOW-Command-System-File-Checker.html

  How to analyze the entries in the log file generating the program Checker (SFC.exe) resources of Microsoft Windows in Windows Vista cbs.log
  http://support.Microsoft.com/kb/928228

  Also run CheckDisk, so we cannot exclude as much as possible of the corruption.

  How to run check disk in Windows 7
  http://www.SevenForums.com/tutorials/433-disk-check.html

  ==========================================

  After the foregoing:

  How to troubleshoot a problem by performing a clean boot in Windows Vista or
  Windows 7
  http://support.Microsoft.com/kb/929135

  Use advanced tools to solve performance problems in Windows 7
  http://www.howtogeek.com/HOWTO/6152/use-advanced-tools-to-troubleshoot-performance-problems-in-Windows-7/

  Problems with the overall speed of the system and performance
  http://support.Microsoft.com/default.aspx/GP/slow_windows_performance?p=1

  How to troubleshoot performance issues in Windows Vista
  http://support.Microsoft.com/kb/950685

  Optimize the performance of Microsoft Windows Vista
  http://support.Microsoft.com/kb/959062
  To see everything that is in charge of startup - wait for a few minutes without doing anything - then right click on taskbar - task manager - take a look at stored by - Services - process - it is a quick reference (if you have a small box at the bottom left - show for all users, then check that).

  How to change, add or remove startup programs in Windows 7
  http://www.SevenForums.com/tutorials/1401-startup-programs-change.html

  A quick check to see that load method 2 is - using MSCONFIG and then display a list of the people here.
  --------------------------------------------------------------------

  Tools that should help you:

  Process Explorer - free - find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This exceptionally effective utility will show you even owned by each process.
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653.aspx

  Autoruns - free - see what programs are configured so that it starts automatically when your system boots and you login. Autoruns also shows you the full list of registry and file locations where applications can configure start automatic settings.
  http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspx
  Process Monitor - Free - monitor the system files, registry, process, thread and DLL real-time activity.
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896645.aspx

  There are many excellent free tools from Sysinternals
  http://TechNet.Microsoft.com/en-us/Sysinternals/default.aspx

  -Free - WhatsInStartUP this utility displays the list of all applications that are loaded automatically when Windows starts. For each request, the following information is displayed: Startup Type (registry/Startup folder), command - line String, product name, file Version, company name, location in the registry or the file system and more. It allows you to easily disable or remove unwanted programs that runs in your Windows startup.
  http://www.NirSoft.NET/utils/what_run_in_startup.html

  There are many excellent free tools to NirSoft
  http://www.NirSoft.NET/utils/index.html

  Window Watcher - free - do you know what is running on your computer? Maybe not. The window Watcher says it all, reporting of any window created by all running programs, if the window is visible or not.
  http://www.KarenWare.com/PowerTools/ptwinwatch.asp

  Many excellent free tools and an excellent newsletter at Karenware
  http://www.KarenWare.com/

  I hope this helps.
  --------------------------------------------------------------------------------------------
  Rob Brown - Microsoft MVP<- profile="" -="" windows="" experience :="" bicycle="" -="" mark="" twain="" said="" it="">

• How to save 32 bits off server automation of processes on Windows 7 64-bit

  Hello

  I have a server simple automation which registers and works without problems on 32-bit windows platforms, but each run on a 64-bit Windows 7 computer, fails to register.
  Running process monitor confirms the DENIED ACCESS during the function RegCreateKey for the GUID (library of types created ok, problem happens when trying to create keys for the interface).
  I suspect that the problem is trying to register a 32-bit server on a 64-bit computer. I found articles that deal with 32-bit loading in process servers by using the utilities found in the Windows\SysWOW64 as RegSvr32 folder. I tried anyway, but fails because the server is exe instead of dll or ocx.
  I tried manually to create the keys. I can create keys in HKEY_CLASSES_ROOT TypeLib, but Windows keeps create me keys in HKEY_CLASSES_ROOT\Wow6432Node, HKEY_CLASSES_ROOT Interface (or indeed HKEY_CLASSES_ROOT\) even though I have all permissions.
  I would be grateful to anyone who can help me solve this problem.
  Please accept my thanks in advance,
  CAnder1

  Hi,

  The question you posted would be better suited in the TechNet Forums.

  I would recommend posting your query in the TechNet Forums.

  http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads

• How can I activate the remote computer to power saving Mode monitor?

  I am a technician in a small private company and it is my duty to keep all desktop computers works very well.
  Desktop computers:

  • are the Dell Optiplex GX260
  • Run Windows XP SP3
  • have Dell 17 "monitors
  • with Intel Pentium 4 (2.4 Ghz) processor with 1 GB RAM

  I do my job after working hours. I connect to them with my laptop (running Windows 7) and check their conditions, one by one. Now, my employer comes to know that when I do this whole process monitors for desktop computers continue to run. As it is not put in place a very large company and electricity and the price of fuel in Pakistan are very high. So, he asked me to find a way to turn the monitors to the power saving mode, when I do my work. In this way, it will be significant energy savings and fund savings in monthly bills. So, can someone please tell me How do I turn on monitor of the remote computer to the power saving mode?

  There are several ways to handle this.

  #1-have affected the power turn on their monitors, but let run PC
  #2-click Start > Control Panel > Power Options and choose how long it is before the screen turns off. Once your activity on their machine is complete, then will kick time.
  #3-you say that you connect to their machines to check their conditions... whatever that means exactly. You can map their computer management console directly to your machine and I * think * he didn't wake up the monitor.

  I hope this helps.

• Windows host process Rundll32 has stopped working ONLY at startup on the desktop.

  When I start my Dell Inspiron 531 after that sign in the screen will Dim twice for a few seconds then the Windows host process Rundll32 has stopped working window appears. If you close another small window exactly the same error message mentioned above tells you that Windows will look for a solution but NEVER done. I use AOL version 9.0, I can sign and the big surf for dial-up access. I tried to download free Kaspersky on their site and an error message said it was incomplete or corrupted. I have Windows Security Essentials, Stopzilla, CCleaner, Glary Utilities, you run sfc/scannow, it cleaned up a few files and he tells me that he has no integrity problem after 4 scans. The big short PC but what the _ is causing this Rundll32 error and why is there NO information specific on how to solve this problem? Also Internet Explorer cascades tiles and diverts the PC sometimes force a quick stop, it's really weird to see, very rare but happens. Systerac Fix of Windows crashes after starting an analysis on current user files, really strange, as if something is trying to stop him on purpose. I wish that Microsoft would really worry about the Rundll32 error of work ceased and tell us customers how to fix this shit it is very boring I'll tell you. I want that my host process Rundll32 to work as it did for the past 2 years with no error message at startup. He never gives me these messages while I use the Internet. There are many pages of misinformation out there, can some Microsoft Engineer please give me that a definitive answer in particular to the Windows host process Rundll32 has ceased to function the error at startup ONLY and tell me how to fix Rundll32 file or the process, it would be greatly appreciated? Thank you. Woman

  Hello

  Be careful of having too many programs antivirus/security on the computer running much less
  at the same time. Have a single load at the same time as even the remains of one can cause a lot
  problems.

  ------------------------------------------------------

  What is rundll32.exe and why it works?
  http://www.howtogeek.com/HOWTO/Windows-Vista/what-is-rundll32exe-and-why-is-it-running/

  What is the suspicious Rundll32.exe process?
  http://WindowsXP.MVPs.org/Rundll32.htm

  -----------------------------------------------------

  Try these to erase corruption and missing/damaged file system repair or replacement.

  Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

  Start - type in the search box - find command top - RIGHT CLICK – RUN AS ADMIN

  sfc/scannow

  How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
  generates in Windows Vista cbs.log
  http://support.Microsoft.com/kb/928228

  Then, run checkdisk - schedule it to run at next boot, then apply OK your way out, then restart.

  How to run the check disk at startup in Vista
  http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

  -----------------------------------------------------

  If no joy trying to determine what is the cause:

  How to troubleshoot a problem by performing a clean boot in Windows Vista
  http://support.Microsoft.com/kb/929135
  How to troubleshoot performance issues in Windows Vista
  http://support.Microsoft.com/kb/950685

  Optimize the performance of Microsoft Windows Vista
  http://support.Microsoft.com/kb/959062
  To see everything that is in charge of startup - wait a few minutes with nothing to do - then right-click
  Taskbar - the Task Manager process - take a look at stored by - Services - this is a quick way
  reference (if you have a small box at the bottom left - show for all users, then check that).

  How to check and change Vista startup programs
  http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html

  A quick check to see who are loading is method 2 - using MSCONFIG, then post a list
  of these here.

  --------------------------------------------------------------------

  Tools that should help you:

  Process Explorer - free - find out what are the files, registry keys and other objects processes have
  Open, which DLLs they have loaded and more. This exceptionally effective utility will show same
  you who owns each process.
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653.aspx

  Autoruns - free - see what programs are configured so that it starts automatically when your system
  boots and you login. Autoruns shows you the full list of registry and file locations where
  applications can configure Auto-start settings.
  http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspx
  Process Monitor - Free - monitor the system files, registry, process, thread and DLL real-time activity.
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896645.aspx

  There are many excellent free tools from Sysinternals
  http://TechNet.Microsoft.com/en-us/Sysinternals/default.aspx

  -Free - WhatsInStartUP this utility displays the list of all applications that are loaded automatically
  When Windows starts. For each request, the following information is displayed: Startup Type
  (Registry/Startup folder), Command - Line String, the product name, file Version, company name,.
  Location in the registry or the file system and more. It allows you to easily disable or remove unwanted
  a program that runs in your Windows startup.
  http://www.NirSoft.NET/utils/what_run_in_startup.html

  There are many excellent free tools to NirSoft
  http://www.NirSoft.NET/utils/index.html

  Window Watcher - free - do you know what is running on your computer? Maybe not. The window
  Watcher says it all, reporting of any window created by running programs, if the window
  is visible or not.
  http://www.KarenWare.com/PowerTools/ptwinwatch.asp

  Many excellent free tools and an excellent newsletter at Karenware
  http://www.KarenWare.com/

  Hope these helps.

  Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.

• Host process has stopped working

  I'm opening a small window saying that "Windows host process rundll32 has stopped working". When I hear this my mouse and keyboard stop working. Why I get this message and how do I stop it? I did the obvious things like changing the batteries and that did not work, but I don't know what else to do.

  Hello

  What is rundll32.exe and why it works?
  http://www.howtogeek.com/HOWTO/Windows-Vista/what-is-rundll32exe-and-why-is-it-running/

  What is the suspicious Rundll32.exe process?
  http://WindowsXP.MVPs.org/Rundll32.htm

  -----------------------------------------------------

  Try these to erase corruption and missing/damaged file system repair or replacement.

  Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

  Start - type in the search box - find command top - RIGHT CLICK – RUN AS ADMIN

  sfc/scannow

  How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe)
  program generates in Windows Vista cbs.log
  http://support.Microsoft.com/kb/928228

  Then, run checkdisk - schedule it to run at next boot, then apply OK your way out, then restart.

  How to run the check disk at startup in Vista
  http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

  -----------------------------------------------------

  If no joy trying to determine what is the cause:

  How to troubleshoot a problem by performing a clean boot in Windows Vista
  http://support.Microsoft.com/kb/929135
  How to troubleshoot performance issues in Windows Vista
  http://support.Microsoft.com/kb/950685

  Optimize the performance of Microsoft Windows Vista
  http://support.Microsoft.com/kb/959062
  To see everything that is in charge of startup - wait a few minutes without doing anything - then right
  Click on taskbar - task manager - take a look at stored by - Services - process -.
  It's a quick reference (if you have a small box left - show for all users, then
  Check that).

  How to check and change Vista startup programs
  http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html

  A quick check to see who are loading is method 2 - using MSCONFIG then after a
  a list of these here.
  --------------------------------------------------------------------

  Tools that should help you:

  Objects of process Explorer - free - find out what files, registry keys and other processes
  have open, which DLLs they have loaded and more. This exceptionally effective utility will be
  even show you who owns each process.
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653.aspx

  Autoruns - free - see what programs are configured so that it starts automatically when your
  system boots and you log in. Autoruns is also the full list of registry and files
  locations where applications can configure start automatic settings.
  http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspx
  Process Monitor - Free - monitor the system files, registry, process, thread and DLL activity
  in real time.
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896645.aspx

  There are many excellent free tools from Sysinternals
  http://TechNet.Microsoft.com/en-us/Sysinternals/default.aspx

  -Free - WhatsInStartUP this utility displays the list of all applications that are loaded
  automatically when Windows starts. For each request, the following information
  appears: product Type of startup (registry/Startup folder), Command - Line String,
  Name, file Version, company name, location in the registry or the file system and more.
  It allows you to easily disable or remove unwanted programs that run in your Windows
  startup.
  http://www.NirSoft.NET/utils/what_run_in_startup.html

  There are many excellent free tools to NirSoft
  http://www.NirSoft.NET/utils/index.html

  Window Watcher - free - do you know what is running on your computer? Maybe not.
  The window Watcher says it all, every window created by all programs that are running, the statement
  If the window is visible or not.
  http://www.KarenWare.com/PowerTools/ptwinwatch.asp

  Many excellent free tools and an excellent newsletter at Karenware
  http://www.KarenWare.com/

  I hope this helps.

  Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle=""><- mark="" twain="" said="" it="">