Edit

!zombies

  • Article

The !zombies extension displays all dead ("zombie") processes or threads.

!zombies [Flags [RestartAddress]]

Parameters

Flags
Specifies what will be displayed. Possible values include:

1
Displays all zombie processes. (This is the default.)

2
Displays all zombie threads.

RestartAddress
Specifies the hexadecimal address at which to begin the search. This is useful if the previous search was terminated prematurely. The default is zero.

DLL

Windows XP and later - Unavailable

Additional Information

This extension is obsolete.

To see a list of all processes and threads, use the !process extension.

For general information about processes and threads in kernel mode, see Changing Contexts. For more information about analyzing processes and threads, see Microsoft Windows Internals, by Mark Russinovich and David Solomon.

Remarks

Zombie processes are dead processes that have not yet been removed from the process list. Zombie threads are analogous.