Microsoft Process Explorer v11.04 强大的系统进程查看器

xiaomao

Sysinternals作品,强大的系统进程查看器,特色之处之一就是可以显示一个程序调用了那些动态链接库DLL,这样可以发现一些十分隐蔽的木马!还可以查看这个进程的路径,以及
公司,版本等详细信息,多色彩表示服务进程,系统进程,目录树方式查看进程之间的归属关系,还可以替换系统自带的任务管理器.

Ever wondered which program has a particular file or
directory open? Now you can find out. Process Explorer shows you information
about which handles and DLLs processes have opened or loaded.

The
Process Explorer display consists of two sub-windows. The top window always
shows a list of the currently active processes, including the names of their
owning accounts, whereas the information displayed in the bottom window depends
on the mode that Process Explorer is in: if it is in handle mode you'll see the
handles that the process selected in the top window has opened; if Process
Explorer is in DLL mode you'll see the DLLs and memory-mapped files that the
process has loaded. Process Explorer also has a powerful search capability that
will quickly show you which processes have particular handles opened or DLLs
loaded.

The unique capabilities of Process Explorer make it useful for
tracking down DLL-version problems or handle leaks, and provide insight into the
way Windows and applications work.

Process Explorer works on Windows
9x/Me, Windows NT 4.0, Windows 2000, Windows XP, Server 2003, and 64-bit
versions of Windows for x64 and IA64 processors, and Windows Vista.


What's new in Version 11.0:
? New treelist control for better
UI responsiveness
? Asynchronous thread symbol resolution on threads tab of
process properties
? More flags on groups in security tab and SID
display
? Thread IDs on threads tab
? On-line search uses default web
browser and search engine
? Vista ASLR column for processes and DLLs
?
Vista Process and thread I/O and memory priorities in process and thread
properties
? Vista Process and thread I/O and memory columns
?
PROCESS_QUERY_LIMITED_INFORMATION support on process permissions on Vista
?
Run as limited user runs with low IL on Vista
? Reports information for all
object types on Vista
? Show details for all processes elevation menu item on
Vista
? Supports replacement of task manager on Vista
? /e to launch
elevated
? /s switch to select a process at startup
? Compiled w/ASLR,
DEP
? Faster startup
? Miscellaneous bug fixes and minor
improvements

官网：http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

官方下载：Free~

http://download.sysinternals.com/Files/ProcessExplorer.zip