Sysinternals Filemon and Regmon

[billnad]

I have decided to let you guys know about an article I put on my site a while ago teaching how to use Sysinternals Filemon and Regmon. If you have never visited Sysinternals you are really missing out on some great free software for getting down to the core of a Windows OS to troubleshoot. Here is a link to a short article letting you know how to use both Filemon and Regmon.

For those unaware Filemon will track all file accesses on your PC while you have it running so if there is a problem that you can replicate it will show up as an error in the window. Regmon does the same thing for registry accesses

Filemon Regmon article is here

[bananix]

I'd like to add that sysinternals Process Explorer is also really handy tool and many might not know that if some application is reserving a file so you can't delete or move it you can find what application has reserved a handle to that file with it and then close the handle (for example some applications erronously leave handles open even after not using the file anymore) so after that you can delete or move the file.

[KK3]

When regmon finds keys that say 'Buffer Overflow' or 'Not Found' can those keys be deleted or is it on a case by case basis?