Process Hacker and Windows discussion

Search found 948 matches

  • 1
  • 3
  • 4
  • 5
  • 6
  • 7
  • 48
by wj32
28 Jan 2016 07:23
Forum: Completed
Topic: The PCRE library
Replies: 2
Views: 1431

Re: The PCRE library

Done
by wj32
28 Jan 2016 07:20
Forum: Feature Requests
Topic: Including usage of children
Replies: 10
Views: 6284

Re: Including usage of children

Done in r6320 for the most common columns only.
by wj32
28 Jan 2016 04:41
Forum: Completed
Topic: Search commands
Replies: 5
Views: 1839

Re: Search commands

OK, regex support has been added.
by wj32
27 Jan 2016 13:22
Forum: Completed
Topic: Search commands
Replies: 5
Views: 1839

Re: Search commands

I will try to add regex support to the Find Handles and DLLs window soon.
by wj32
27 Jan 2016 13:14
Forum: Feature Requests
Topic: ToolStatus
Replies: 20
Views: 7966

Re: ToolStatus Bug?

I suggest making both Physical Memory and Commit Charge graphs and labeling them as such. On an unrelated note, I suggest adding "Show details for all processes" toolbar button. I found myself doing it way too often under win 7, because normal user can't see disk and network rates and graphs. The b...
by wj32
27 Jan 2016 13:01
Forum: Completed
Topic: Option to disable tray mini window
Replies: 5
Views: 5461

Re: Option to disable tray mini window

This has been added as a setting. You'll have to download the latest dev build and change MiniInfoWindowEnabled to 0 in your settings.xml file (%AppData%\Process Hacker 2).
by wj32
26 Jan 2016 23:14
Forum: General Discussion
Topic: Blocking processes?
Replies: 12
Views: 5472

Re: Blocking processes?

The process that caused the event is halted while the umkcf client processes the event. The umkcf client must process the event, decide whether to reject process creation, and return its decision to the driver.
by wj32
26 Jan 2016 21:32
Forum: General Discussion
Topic: Blocking processes?
Replies: 12
Views: 5472

Re: Blocking processes?

The PS and OB callbacks check driver signing, and this driver would bypass that.
by wj32
26 Jan 2016 08:51
Forum: General Discussion
Topic: Where are options stored? Export+Import?
Replies: 2
Views: 1315

Re: Where are options stored? Export+Import?

I think the readme tells you how to get portable settings working.
by wj32
26 Jan 2016 08:50
Forum: General Discussion
Topic: Blocking processes?
Replies: 12
Views: 5472

Re: Blocking processes?

2 years ago I started writing a framework for doing exactly this sort of thing: https://github.com/wj32/umkcf The bad news is: 1. Although I have a signed version of the umkcf driver, it really goes against everything that MS has been doing to secure the kernel, and I won't be releasing it. 2. The c...
by wj32
26 Jan 2016 08:43
Forum: General Discussion
Topic: Howcome...
Replies: 2
Views: 6201

Re: Howcome...

I think ntfs (and a bunch of other drivers) are special in that way, so don't change anything. If it ain't broke don't fix it :)
by wj32
26 Jan 2016 08:42
Forum: Feature Requests
Topic: Including usage of children
Replies: 10
Views: 6284

Re: Including usage of children

That's a good point! But creating derived "tree" columns will still be pretty annoying...
by wj32
26 Jan 2016 08:36
Forum: General Discussion
Topic: about phlib
Replies: 1
Views: 4148

Re: about phlib

I'm definitely not using any Windows source code, which I don't have access to (obviously). It's a combination of things, and it took me quite some time and effort to compile those headers. I'd rather not say how I did it though :)
by wj32
12 Sep 2015 17:13
Forum: Completed
Topic: Tool Tips Shutoff
Replies: 3
Views: 1625

Re: Tool Tips Shutoff

Right click on the tray icon.
by wj32
23 Aug 2015 04:11
Forum: General Discussion
Topic: phapppub.h ?
Replies: 2
Views: 1172

Re: phapppub.h ?

The GenerateHeader tool (in the tools folder) generates it based on the options in build/sdk/phapppub_options.txt.
by wj32
23 Aug 2015 04:10
Forum: General Discussion
Topic: Redistribution with third party app
Replies: 4
Views: 1523

Re: Redistribution with third party app

It will be fine as long as the license is displayed somewhere.
by wj32
18 Aug 2015 23:35
Forum: Completed
Topic: Total memory usage by tree or multithreaded process
Replies: 5
Views: 2900

Re: Total memory usage by tree or multithreaded process

Right now the best way is to enable the memory tray icon and hover over it. Chrome processes are grouped in the pop up window.
by wj32
18 Aug 2015 23:33
Forum: General Discussion
Topic: [Windows 10] What is ntoskrnl.exe!SmKmStoreHelperWorker doing?
Replies: 4
Views: 3523

Re: [Windows 10] What is ntoskrnl.exe!SmKmStoreHelperWorker doing?

Wow that's a pretty clever idea! Thanks for the post.
by wj32
18 Aug 2015 13:42
Forum: General Discussion
Topic: [Resolved]Convert PWCH to PSTR
Replies: 5
Views: 1982

Re: Convert PWCH to PSTR

PPH_STRING is in UTF-16. Use PhConvertUtf16ToUtf8Ex(string->Buffer, string->Length) to get a PPH_BYTES that is in UTF-8.
  • 1
  • 3
  • 4
  • 5
  • 6
  • 7
  • 48