Jump to content

Recommended Posts

Posted (edited)
Process Explorer

Introduction

Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

The Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you’ll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you’ll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.

The unique capabilities of Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.

Process Explorer works on Windows 9x/Me, Windows NT 4.0, Windows 2000, Windows XP, Server 2003, and 64-bit versions of Windows for x64 processors, and Windows Vista.

What's new in Version 10.0:

  • The process column is locked on the left side so that it doesn't scroll horizontally out of view
  • You can configure custom column selections and save them as easy-to-access column sets
  • Image verification option now verifies images in the background
  • More refresh intervals
  • Runas menu entry in the File menu
  • Run as Limited User menu entry in the File menu to run a process without administrative privileges and group membership
  • Process menu includes Restart item to kill and then restart a selected process
  • Can suspend individual threads on Threads page of Process Properties dialog
  • The Find Window target moves Process Explorer's main window to the back to get it out of the way
  • Close Window command uses same End Task functionality as Task Manager
  • Show New Processes option scrolls display to make new processes visible
  • Heuristics to detect more image packers
  • User name of account in which Process Explorer is running is shown in the title bar
  • Services can be stopped, resumed, and paused from the Services tab of the Process Properties dialog
  • The DLLs that host SvcHost processes are listed in the Services tab of the Process Properties dialog
  • Services running within a process display on the process' tooltip
  • As a parallel to the CPU Usage History column there's now a Private Bytes Usage History column
  • The Process view includes columns that show the working set breakdown of the process in shared, shareable and private pages
  • New delta private-bytes column to show changes in private virtual memory usage
  • Can copy lines from the Process, DLL and Handle views to the clipboard
  • Option to show pagefile-backed (unnamed) sections in DLL view
  • DLL and handle searching consolidated
  • The DLL view includes columns that show the working set contributions in shared, shareable, and private pages
  • The DLL a Rundll32 process hosts is shown in its process tooltip
  • Packed DLL highlighting in DLL view
  • Image signing verification available for DLLs
  • Better DLL properties dialog
  • Object address shown in Object Properties dialog
  • File object share flags column for Handle view
Download Process Explorer (x86 - 640 KB) - you plan on using Process Explorer on Win9x/Me
Download Process Explorer (x86 - 640 KB) - you plan on using Process Explorer on 32-bit NT/2K/XP/Server 2003
Download Process Explorer (x64 - 640 KB) - you plan on using Process Explorer on 64-bit XP/Server 2003

Edited by alsiladka

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...