How can I find out which processes on my computer are accessing the microphone?

5

2

After reading this interesting Lifehacker post and reading the comments on the page, one person was wondering if it would be possible to use the Physical Device Object Names of other hardware such as the microphone to find out the names of processes using that device.

I tried the same approach, but so far it only seems to work for the webcam. Is there any other way I could get this to work in Process Explorer?

UPDATE:

The Lifehacker post was about finding out which Windows process is currently using your webcam. This is how they went about doing it:

  1. Start Device Manager
    (WIN+R → "devmgmt.msc" → OK)
  2. Find your webcam among the list of devices (check under Imaging Devices)
  3. Open the properties window of the device and switch to the Details tab
    (Right click → Properties → Details)
  4. In the dropdown menu, select Physical Device Object Name and copy the string
    (Right click → Copy)
  5. Download Process Explorer
  6. Make sure you have opened Process Explorer in Administrator Mode
    (File → Show Details for All Processes)
  7. Hit CTRL+F and enter the string you copied earlier
    (it should be something like \Device\000000XX)
  8. Hit the Search button and you should see a list of processes using the webcam
    (if there are any)
    PsExec Handle Search

Vinayak

Posted 2014-05-29T15:33:38.767

Reputation: 9 310

You can search for audioses.dll which is used for most of the audio sessions. – Parth Parikh – 2014-05-29T18:00:07.543

@ParthParikh I tried searching for audioses.dll, and it brings up a lot of processes. Even if a process isn't recording any sound it still shows up (e.g. Sound Recorder, Skype, etc.) I need a way to only show the processes that are currently using the microphone. – Vinayak – 2014-05-29T21:46:28.347

Answers

0

I can indeed confirm this works with the same thing, altho device manager / Audio devices doesn't work the same for me.

To clarify:

  1. Right click your Volume icon on the lower right hand on the task bar.
  2. Click 'Recording Devices'
  3. Right click your current / Default Device and go to 'Properties'.
  4. Under where it says Controller Information click 'Properties' and under the 'Details' tab when it pops up, under Property, go to Physical Device Object Name.
  5. Right-click and copy the Device path. After this you can find it in Process Explorer or wherever necessary.

Notes: For me it's not the device name (Headset Microphone) but rather Bluetooth Hands-free Audio. Huh. It may be different depending on your hardware. I was able to find all processes using my mic, including the audiodg.exe (Where you open it up to test if your mic is working.)

Good luck guys!

Screenshot

Daniel Heusburgh

Posted 2014-05-29T15:33:38.767

Reputation: 1

http://i.stack.imgur.com/tvH7p.png – Daniel Heusburgh – 2015-06-15T15:56:07.063

Are you sure that it works? Your screenshot doesn't look convincing. I've tried the exact same thing and it won't work for me. I'd be convinced if by this method you can find processes like skype.exe or audacity.exe. If you could test further and let me know what you get, that'd be helpful. Thanks. – Vinayak – 2015-06-16T00:04:29.117

In my case search results show many svchost.exe lines, which is still not very informative, since each svchost process actually hosts a different running program. What are these programs, and which of them is a recording spy is still not clear. So the next step is to open each listed svchost PID, and check what program it hosts. However, such program can mask under the name of any legit Windows or 3rd party program component, so more research will still be needed. – sambul35 – 2018-09-04T21:18:37.497

Asked: 2014-05-29T15:33:38.767

Viewed: 8 601 times

Active: 2019-12-13T05:02:25.370