Для определения драйверов, программ и служб, из-за которых Windows загружается медленно, нужно включить логирование процесса запуска операционной системы. В этой статье мы рассмотрим, как создать лог загрузки Windows и проанализировать медленные процессы с помощью утилиты Process Monitor.
Системная утилита Process Monitor обычно используется для отслеживания в реальном времени активности запущенных процессов, обращений к файлам и реестру. Также ProcMon позволяет включить логирование всех процессов, которые выполняются при загрузке Windows, получить время выполнения каждого процесса и сохранить лог в файл для дальнейшего анализа.
- Скачайте и распакуйте архив с Process Monitor (http://download.sysinternals.com/files/ProcessMonitor.zip);
- Запустите procmon.exeс правами администратора;
- В меню Options выберите пункт Enable Boot Logging;
- Выберите опцию Generate thread profiling events -> Every second. В этом режиме драйвер procmon будет записывать состояние всех процессов каждую секунду.
- Сохраните изменения. ProcMon скопирует драйвер procmon23.sys в каталог
%SystemRoot%\System32\Drivers
и создаст отдельную службу (в ветке HKLM\SYSTEM\CurrentControlSet\Services). Эта служба будет запускаться после запуска Winload.exe и будет записывать в лог активность всех процесс, которые выполняются при загрузке Windows и входе пользователя;Чтобы отключить режим протоколирования загрузки, выполните команду:
procmon.exe /noconnect
- Перезагрузите компьютер и дождитесь появления рабочего стола;
- Драйвер procmon23.sys будет писать лог событий до тех пор, пока пользователь вручную не запустит утилиту Process Monitor. После этого режим протоколирования загрузки отключается;
- В окне Process Monitor соглашаемся с предложение сохранить собранные данные в файл bootlog.pml.
Примечание. Если не остановить работу Process Monitor, то временный файл журнала %windir%\procmon.pmb со временем может занять все свободное место на системном диске.
- В моем случае размер файла bootlog.pml около 500 Мб. Откройте этот файл в ProcMon;
- Щелкните по заголовку таблицы в окне ProcMon, выберите Select Columns и включите отображение столбца Duration;
- Теперь нужно изменить параметры фильтрации процессов в меню Filter;
- В качестве параметра фильтрации выберите Duration, условие more than и значение 5. Нажмите Add и ОК.
- В списке процессов останутся только те действия, на которых ушло больше 5секунд (5 секунд я выбрал для наглядности);
- Также для анализа процесса загрузки можно воспользоваться функцией в меню Tools -> Process Tree, позволяющей отобразить все процессы в виде графического дерева с информацией о начале, завершении и длительности процесса;
Проанализируйте список процессов при загрузке, соотнесите процессы со службами, программами и драйверами. Чаще всего в этом списке оказываются антивирусы и другое «тяжелое» ПО.
Например, в этом примере при загрузке компьютер был запущен процесс обновления браузера Edge, который занял почти 4 минуты.
Обновление Edge выполняется отдельным заданием планировщика MicrosoftEdgeUpdateTaskMachineCore, которое выполняется при входе каждого пользователя. Если эта проблема возникает часто, можно отложить выполнение задания, добавив задержку в его расписание.
Также вы можете получить информацию об использовании CPU, RAM и дисков процессами при загрузке. Для этого выберите в меню ProcMon опцию Process Activity Summary.
Здесь вы можете отсортировать процессы и найти наиболее прожорливые процессы, которые используют много процессорного времени или памяти при загрузке.
С помощью Network Summary можно отследить медленные сетевые обращения и процессы, которые загружают/отправляют по сети большие порции данных при загрузке Windows. Например, на скриншоте видно, что при запуске компьютеру пришлось получить около 0.5 Мб данных с контроллера домена.
Выполните анализ всех процессов, которые тормозят загрузку Windows (в первую очередь нужно анализировать дочерние процессы Winlogon.exe). На основании полученной информации нужно выполните оптимизацию системы: удалить/обновить проблемные программы или драйвера, отключить некоторые службы или изменить тип их запуска (отложенный запуск или ручной по запросу), убрать программы из автозагрузки и т.д.
Every Windows user has used Task Manager at least once. It’s an essential, built-in utility that gathers important information about active processes and high RAM consumption. But when it doesn’t work, users need to open Process Explorer in Windows 10.
Simply put, where Task Manager’s capabilities end, Process Explorer shines. The freeware advanced task manager and system monitor are powered by Microsoft and created by one of the most famous Windows enthusiasts, Mark Russinovich.
Keep reading to find out about downloading Process Explorer in Windows 10!
How do I open Process Explorer in Windows 10?
First, Sysinternals, the developer behind Process Explorer, has a whole suite for various system tasks. You can either download the whole suite or download certain tools individually. The same goes for Process Explorer, the most-used tool in the bundle.
You can download an archived file for both system architectures or directly download the .exe file to open Process Explorer in Windows 10.
- Archive with x86 and x64 versions (File needs to be extracted before use)
- Direct software download
How do I use Process Explorer?
User Interface
Compared to Windows 10’s Task Manager, Process Explorer’s interface is a bit confusing and not as user-friendly.
While simple tasks shouldn’t present a problem, you’ll need to understand the program’s layout to perform more complex tasks, which shouldn’t take more than a few minutes.
On the left side of the main window, you’ll see active processes with a detailed subprocess list in a tree view. On the opposite side, you may see standard Task Manager-like columns of distinctive processes.
Of course, you can customize columns to meet your needs or use them to track certain consumption. The special emphasis goes on the Company name column. It’s the best way to round up trusted services and terminate ( later remove) the ones that may be malware.
Above the right side of the main window, you’ll see the monitoring features of Process Explorer. There’s real-time system information with CPU and RAM usage and HDD and GPU activities.
On the left side, above the process tree, you’ll see options mostly similar to a standard Task Manager.
If you want to examine a certain process, pause the updates with the Spacebar and press Ctrl + H for the Handle View panel.
Features in Process Explorer
For now, you may conclude this is just a poorly designed Task Manager, but you’d be wrong. Feature-wise, this tool is much better for advanced tasks, especially when it comes to malware hunting.
First, with Process Explorer, you can terminate an entire process tree instead of a single process. You’ve probably encountered Chrome/Firefox crashes and navigated to Task Manager to stop those shenanigans, and there, instead of one process, you saw 5-10 processes running.
With Process Explorer, you just kill a process tree, and that’s it! You can use this function by right-clicking on the wanted process and selecting Kill Process, or you can use the Shift + Delete keys combination for the same.
You’ve also probably tried to delete, move, or rename certain processes, but the system prompted you with a This file is open in another program message. And sometimes, you’ll know which program is preventing you from taking further action, but occasionally you won’t.
Process Explorer comes in handy here, allowing you to determine the process that blocked your file. Just open Process Explorer, press Ctrl + F, and type the name of the file. Kill the process and continue with previous actions.
In addition, this tool may be used as an antimalware solution. But, instead of scans, you select suspicious processes and check them with Virus Total.
Virus Total is a virus search engine comprised of a combined database contributed to by all major antivirus developers. You can single out one process (right-click and select Check VirusTotal) or check all active processes in by going to Options, and then selecting Check VirusTotal.com.
Once you toggle the Check VirusTotal, any new process will be automatically checked. The first number stands for virus confirmation, and the other for the number of antivirus companies. If you, for example, get 50/57, it means that 50 out of 57 companies flagged the process as malware.
- Microsoft wants Windows 10 users to upgrade to Windows 11 or Copilot + PCs
- Deleting ‘inetpub’ folder lets hackers permanently stop Windows updates, Microsoft warns
Process Explorer as a replacement for the Task Manager
Although Process Manager is a third-party tool, you can set it as your default task manager. Yes, you heard right: Process Explorer can completely replace your built-in Task Manager.
You can start it with Ctrl + Alt + Delete or Ctrl + Shift + Esc, just the same way as the native Task Manager before.
But there are both positive and negative sides to that.
- Positive: Superior features, better insight into all-around system performance, and customization possibilities.
- Negative: You won’t be able to organize startup and manage services on Windows 10 and old-fashioned design.
How do I replace Task Manager with Process Explorer in Windows 10?
- Launch Process Explorer, and click on Options, and then choose Replace Task Manager.
- Click Yes in the UAC prompt that appears.
Keep in mind that you’ll need administrative permission to complete the action. So, make sure you switch to an administrator account in Windows.
That should wrap it up! If you want to improve your overall control, download, and open Process Explorer in Windows 10. And with the information presented here, you should be able to significantly boost PC performance and eliminate any threats.
Do share your review of Process Explorer in the comments section below.
Tell us your opinion in the comments.
Procedures to Check Which Process Is Using More CPU in Windows 10. – Windows 10 is expected to run flawlessly but for several reasons, it fails to do so. In some cases, the OS slows down completely due to the consumption of high CPU by certain processes. So, you might need to know about those processes that are actually slowing down the system. Well, in this article, we will provide you a few utilities using which you can keep a track on CPU usage. If you want good performance from your PC, then pursue Things to do to Make Windows 10 PC Fast – User Guide.
To Check Which Process Is Using More CPU in Windows 10, you have three distinct and mostly used free monitoring utilities. Let us first know why actually you need to monitor the CPU consumption? Sometimes, one program needs the full attention of CPU and as a result, other programs that also require CPU fail to get enough time to perform their tasks perfectly. Hence, this leads to very slow performance of the OS. So, if you also have some troubles regarding the usage of CPU, then walk through the guide as three methods with steps are mentioned below to Check Which Process Is Using More CPU in Windows 10.
Ways to Check Which Process Is Using More CPU in Windows 10
Let us learn about the components and their steps to know CPU usage one after the other.
1. Task Manager
The first method is through Task Manager and this built-in utility generally serves the need of the basic users by monitoring about all the apps, processes and services that are right away running on your PC.
Step 1 – First and foremost, locate a blank space on taskbar and execute a right-click there. From the list of options that appear, select Task Manager, the third last one.
To know more methods to launch Task Manager, follow How to Open Task Manager in Windows 10.
Step 2 – Now, Task Manager will come up on the screen and by default, Processes tab will be noticeable.
Step 3 – Inside the Processes tab, you will see a few columns with different titles. The Name column displays all the processes that are running both in the foreground as well as in the background.
Step 4 – Next, click the CPU title and it will categorize the processes depending on their CPU consumption.
Step 5 – Moving on, click on the Performance tab and it gives you an overview of how your CPU is being utilized by Windows 10 PC. So, by default, the CPU category will show a graph on its right pane.
Step 6 – The x-axis on the graph reads the time and the y-axis indicates the total utilization of CPU.
2. Resource Monitor
Step 1 – To begin this procedure, launch Taskbar search. Now, type the command resmon and then the Best match will display resmon (Desktop app), click on it.
Step 2 – Next, the Resource Monitor window will appear on the screen with several graphs on the right pane and other information on the rest of the window.
Step 3 – Well, by default, the CPU tab explores up and the first section will be of Processes. There you will notice all the running processes and other related details in the respective columns.
Step 4 – To know, which process is consuming how much CPU, then select the Average CPU column. Moreover, if any process that is not responding, then its name will appear in the red color text.
Step 5 – Moving ahead, you will notice graphs of CPU usage on the right-hand side. Now, if you have a multi-core CPU, the first two graphs represent average data for all cores. Whereas, the next graphs illustrate each core respectively.
3. Process Explorer
If you are a techie and want to explore more about CPU usage, then Process Explorer comes into action. Process Explorer is free system monitor for Windows computers, licensed by Microsoft. It provides the functionality of Task Manager and in addition, holds lots of rich features including CPU details.
Step 1 – Start this method, by downloading Process Explorer from this web page.
Step 2 – It will be a small zip file, so, right-click on ProcessExplorer and select Extract Here.
Step 3 – Now, find and double-click a file labeled as procexp.exe. Click Agree button on the window that shows up the agreement terms of Process Explorer.
Step 4 – This will launch the main window of Process Explorer on the screen. Next, locate and select the CPU column.
Step 5 – The process that lists on the top is the one that drains up the most CPU. When I took the below screenshot, the CPU was idle 81.49%. In this way, it displays the running processes that consume CPU in decreasing order.
Winding Up
By now, you will be quite sure to use any of the above monitoring tools to know about the functioning of CPU. Hence, follow any of the utilities to Check Which Process Is Using More CPU in Windows 10 as per your requirement and let us know which was more helpful to you.
Рекомендуем популярное
MSI Afterburner 4.6.5
MSI Afterburner — настоящая находка для истинного оверклокера, с помощью которой можно…
SpeedFan 4.52
SpeedFan — бесплатный и удобный в использовании инструмент для контроля за температурой и…
Speccy 1.33.079
Speccy — небольшая бесплатная программа, позволяющая узнать массу полезной информации об…
HWMonitor 1.57
HWMonitor — бесплатная утилита для мониторинга параметров работы различных компонентов ПК,…
Quick CPU 4.10.0
Бесплатная, но очень мощная программа, разработанная для настройки и мониторинга…