Process Explorer: How to find out what System PID 4 is

2

Using Process Explorer I can see that a certain file is locked by "System, PID: 4". This blocks the VB.NET VS2012 IDE from recreating the file. I am getting the "Permission denied" error. It always takes a few minutes until the file is released.

I have tried to disable just anything that might lock my file... Application compatibility, Backups, Windows Defender, Windows Indexer, just anything I could think of.

How could I find out which application "System, PID: 4" really is?

Thank you.

I know that my question sounds very much like this one: How do I find out any more information about file handles held open by the System process?

But in my case I do not have a network, so that can not be the problem.

Susan Hermfeld

Posted 2014-04-02T09:26:57.783

Reputation: 21

@and31415 yeah and for me a a bug in MBAM(malware bytes), was causing it to say "stopping". Not sure if a restart worked, as I had lots of unsaved notepad windows open. I didn't rush to do that.. I did uninstall malware bytes. and maybe restarted, and that fixed it – barlop – 2020-01-17T04:28:50.140

Have you tried rebooting? – EliadTech – 2014-04-02T12:58:29.587

1Make sure the Application Experience Lookup Service (AeLookupSvc) is not disabled. By default, it should be set to Manual. – and31415 – 2014-04-02T13:15:27.090

Answers

3

It's the Windows Kernel. This virtual process contains all running kernel-mode drivers. This also includes Windows File Sharing, HTTP.SYS and probably all virus scanners.

Unfortunately, file handle accounting is only done at process level, so you won't be able to get additional information.

Daniel B

Posted 2014-04-02T09:26:57.783

Reputation: 40 502