Process Explorer
Copyright
© 1996-2007 Mark Russinovich
Process
Explorer is an advanced process management utility that picks up where
Task Manager leaves off. It will show you detailed information about a
process including its icon, command-line, full image path, memory statistics,
user account, security attributes, and more. When you zoom in on a particular
process you can list the DLLs it has loaded or the operating system resource
handles it has open. A search capability enables you to track down a process
that has a resource opened, such as a file, directory or Registry key,
or to view the list of processes that have a DLL loaded.
The Process Explorer display consists of
two sub-windows. The top always shows a list of the currently active processes,
including the names of their owning accounts, whereas the information
displayed in the bottom window, which you can close, depends on the mode
that Process Explorer is in: if it is in handle mode you will see the
handles that the process selected in the top window has opened; if Process
Explorer is in DLL mode you will see the DLLs and memory-mapped files
that the process has loaded.
Process Explorer also has a powerful search
capability that will quickly show you which processes have particular
handles opened or DLLs loaded. The unique capabilities of Process Explorer
make it useful for tracking down DLL-version problems or handle leaks,
and provide insight into the way Windows and applications work.
You can obtain equivalent command-line tools,
Handle and ListDLLs, at the Sysinternals
Web site.
Process Explorer does not require administrative
privileges to run and works on Windows
9x/Me, Windows NT 4.0, Windows 2000, Windows XP, Server 2003, Windows
Vista, Windows Server 2008 and on the x64 version of 64-bit Windows XP,
Windows Vista, Windows Server 2003, and Windows Server 2008.
|