!zombies

The !zombies extension displays all dead ("zombie") processes or threads.

!zombies [Flags [RestartAddress]]

Parameters

Flags

Specifies what will be displayed. Possible values include:

1

Displays all zombie processes. (This is the default.)

2

Displays all zombie threads.

RestartAddress

Specifies the hexadecimal address at which to begin the search. This is useful if the previous search was terminated prematurely. The default is zero.

DLL

Windows 2000

Kdextx86.dll

Windows XP and later

Unavailable

 

Additional Information

To see a list of all processes and threads, use the !process extension.

For general information about processes and threads in kernel mode, see Changing Contexts. For more information about analyzing processes and threads, see Microsoft Windows Internals, by Mark Russinovich and David Solomon. (This book may not be available in some languages and countries.)

Remarks

Zombie processes are dead processes that have not yet been removed from the process list. Zombie threads are analogous.

This extension is available only for Windows 2000.

 

 

Send comments about this topic to Microsoft

Show: