                Process Status for Windows NT
                      by Thuan-Tit Ewe
                       October 3, 1993

Reports process information on all processes in the Windows
NT system. Also reports the command that was passed to the
process whenever possible. For those processes that the user
does not have privilage to open, then only the name of the
process will be printed.

What PS output looks like:
PS - Process Status for Windows NT  Version 0.02a
Copyright (C) Thuan-Tit Ewe 1993.  All rights reserved.

Memory:20032 Kb  System boot:Sun Oct 03 10:48:50 1993

 PID  TR  %CPU VSize  WSet PRI  START %Usr %Krl Command
 130   5 72.62   35M 3268k   7  10:50 94.8  5.2 ntvdm -m -w
-fD:\winnt\system32 -a D:\winnt\system32\krnl386
 20   23 22.49   26M 3504k  13  10:49 74.5 25.5 csrss.exe
 7    20  1.34  436k   20k   8         0.0  100
 70    4  0.97   11M    0k  13  10:49 27.2 72.8 screg.exe
 28    6  0.51 7672k    0k  11  10:49 60.1 39.9 smss.exe
 88    1  0.33 5448k  492k   9  10:50 47.7 52.3
D:\WINNT\SYSTEM32\CMD.EXE
 132   2  0.28 9976k  300k  13  10:50 67.5 32.5 progman
 55    3  0.28   26M 1404k   9  11:02 26.8 73.2
D:\winnt\system32\ntvdm -fD:\winnt\system32 -a
 65    7  0.26   14M   36k  10  10:49 34.9 65.1 lsass.exe
 13    2  0.20   16M   20k  13  10:49 45.6 54.4 winlogon.exe
 63    6  0.15   12M    0k   7  10:49 33.9 66.1 spoolss.exe
 89    3  0.13 9996k  200k   7  10:49 19.6 80.4
D:\winnt\System32\lmsvcs.exe
 102   7  0.13   15M   20k   7  10:49 25.5 74.5
D:\winnt\system32\netdde.exe
 85    6  0.09   12M   20k   7  10:49 25.7 74.3
D:\winnt\System32\MsgSvc.exe
 43    4  0.09   11M   20k   7  10:49 68.6 31.4
D:\winnt\system32\EventLog.exe
 94    2  0.05 9540k   20k   7  10:49 28.6 71.4
D:\winnt\system32\clipsrv.exe
 77    1  0.05 8356k   20k  13  10:50 35.0 65.0 nddeagnt.exe
 117   1  0.03 5496k  492k   9  11:02 45.5 54.5 ..\ps
 61    1  0.02 5448k  496k   7  10:49 40.0 60.0 cmd.exe

The total of VSize will be deceptive as a number of well
known DLLs like KERNEL32.DLL will be mapped to multiple
process. And each mapping of such a DLL will take up virtual
memory of different process causing it to be counted
multiple times.

Keys of fields:
  PID          Process Id
  TR           Number of threads
  %CPU         Percentage of total CPU used by this process.
               This is the percentage of CPU time to the
               total CPU time of all the current processes.
               This does not take into account processes
               that have started and ended before PS is
               executed. Therefore the %CPU reported is
               different from the UN*X ps' %CPU field.
  VSize        Virtual size of memory (in KBytes or Mbytes)
  WSet         Working set memory (in KBytes or Mbytes)
  PRI          Base priority. The higher the number, the
               higher the priority.
  START        Date or time process started
  %Usr         Percentage of user time of this process to
               the total of User+Kernel time.
  %Krl         Percentage of privilaged (kernel) time of
               this process to the total of User+Kernel
               time.
  EX           Number of threads waiting in the Executive (-
               v option only)
  UR           Number of threads waiting in User Request (-v
               option only)
  V            Number of threads waiting on LPC receiVe (-v
               option only)
  P            Number of threads in rePly (-v option only)
  H            LPC port High (-v option only)
  L            LPC port Low (-v option only)
  Command      Command line used to execute the process

Options:
The '-' character preceding the options are required.
  -s           Short output   (Default: normal output)
               Prints out PID, TR, %CPU and Command fields.
               Useful for long command lines.
  -n           Do not sort    (Default: sorts according to
               %CPU field)
  -v           Verbose output (Default: does not include
               verbose thread information)
  -l           License information

Updates from previous versions:
Version 0.01   Simple PS command
Version 0.02   Added %CPU time, total memory, boot time and
               sorted according to CPU field
Version 0.02a  Added %User and %Kernel time, -s option and
               start time. Moved %CPU field.

kill.exe:
Included is kill.exe which kills the process. The source of
a similar program written by Ron Cox of Informative Graphics
(rjc@infograph.com) was posted to the net sometime ago. This
version was independently developed and will take multiple
PIDs and generate error messages when appropriate. Other
than that, they do the same things.

License information.
PS - Windows NT Process Status  Version 0.02a
Copyright (C) Thuan-Tit Ewe 1993.  All rights reserved.

You are free to use, copy and distribute PS v0.02a for
noncommercial
use IF:
        NO FEE IS CHARGED FOR USE, COPYING OR DISTRIBUTION.
        IT IS NOT MODIFIED IN ANY WAY.
        IT IS ACCOMPANIED BY ITS PROPER DOCUMENTATION.

This program is provided AS IS without any warranty,
expressed or implied,
including but not limited to fitness for a particular
purpose.

If you have any questions or comments about PS, drop me a
note in
CompuServe or send them to:

    Thuan-Tit Ewe
    Compuserve: 70324,3557
    70324.3557@compuserve.com
PS and the accompanying documentation is
Copyright (C) 1993 by Thuan-Tit Ewe.
