PMon
 

PMon 1.0

PMon : PMon : NT Gui/device driver program that watches process and thread creation and deletion



PMon is a device driver/GUI combination which logs and displays all process activity on a Windows NT 4.0 system. The device driver uses several undocumented hooking functions that cause it to be called whenever a process or thread is created or deleted. In addition, if run on the Checked build of NT or the Multiprocessing kernel, an undocumented context-swap hook is installed that has PMon optionally display all context switch activity.PMon works on all builds of NT 4.0. Installing PMon is as easy as unzipping it and typing, "ntpmon." The GUI dynamically loads the driver (based on code from the instdrv sample in the Windows NT DDK), which installs hooks for process and thread creation and deletion. The menus can be used to disable event capturing, control the scrolling of the listview, and to save the listview contents to an ASCII file.Where possible, PMon displays the name of the process that owns a thread that is part of a thread creation or deletion, or a context swap. The thread ID immediately follows the process name. In some cases the owning process does not exist anymore, in which case PMon displays "???" for the name. The "Elapsed" column indicates the time in seconds between successive events in the display. Note that many times this will be 0, which simply means that the events happened inside of one system timer clock tick. Clock ticks are normally 10 milliseconds apart, so alot can happen.The context-swap hook is only present in multiprocessor builds of NT, and is by default not enabled. To turn on context-switch monitoring when it is present, select the "Context Swap" menu entry under the "Events" menu. Note that monitoring context swaps generates many records rapidly. In order to try and minimize the amount of non-interesting context-swap noise, PMon ignores swaps between system threads 0 and 1, which occur frequently as system work items are dispatched.If you have MSDN membership, you have the checked build. You can install a minimal checked build environment by replacing NTOSKRNL.EXE with the NTOSKRNL.EXE on the checked build CD, and by replacing HAL.DLL with the appropriate version on the checked build. To determine the correct HAL to copy over to your system, search for HAL.DLL in its [winnt]repairsetup.log file. Copy the one with the same name on the checked CD to HAL.DLL in your [winnt]system32 directory. Be sure and back up your existing copies of these files so that you can go back to the free build.

Conclusion

To conclude PMon works on Windows operating system(s) and can be easily downloaded using the below download link according to Freeware license. PMon download file is only 23 KB  in size.
PMon was filed under the System category and was reviewed in softlookup.com and receive 5/5 Score.
PMon has been tested by our team against viruses, spyware, adware, trojan, backdoors and was found to be 100% clean. We will recheck PMon when updated to assure that it remains clean.

PMon user Review

Please review PMon application and submit your comments below. We will collect all comments in an effort to determine whether the PMon software is reliable, perform as expected and deliver the promised features and functionalities.

Popularity 10/10 - Downloads - 93 - Score - 5/5

Softlookup.com 2023 - Privacy Policy



Category: System 
Publisher: Mark Russinovich
Last Updated: 13/11/2023
Requirements: Windows NT
License: Freeware
Operating system: Windows
Hits: 557
File size: 23 KB 
Price: Not specified


Leave A comment
Name: *
E-Mail: *
Comment: *