The !zombies extension displays all dead ("zombie") processes or threads.
!zombies [Flags [RestartAddress]]
Specifies what will be displayed. Possible values include:
Displays all zombie processes. (This is the default.)
Displays all zombie threads.
Specifies the hexadecimal address at which to begin the search. This is useful if the previous search was terminated prematurely. The default is zero.
Windows XP and later
To see a list of all processes and threads, use the !process extension.
For general information about processes and threads in kernel mode, see Changing Contexts. For more information about analyzing processes and threads, see Microsoft Windows Internals, by Mark Russinovich and David Solomon. (This book may not be available in some languages and countries.)
Zombie processes are dead processes that have not yet been removed from the process list. Zombie threads are analogous.
This extension is available only for Windows 2000.