May 25
What's new in Version 9.1:Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded.
The Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you’ll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you’ll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.
The unique capabilities of Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.
Process Explorer works on Windows 9x/Me, Windows NT 4.0, Windows 2000, Windows XP, Server 2003, and 64-bit versions of Windows for x64 processors.
* x64 and x86 executables are in a single binary
* x64 kernel and user-mode stack support
* New Verified Company column shows image signer information
* Strings tab in process properties dialog has in-memory image scan option
* Highlighting for images that are packed (have compressed or encrypted code, which is common in malware)
* Window menu on process context menu allows for minmizing, maximizing, and restoring windows
http://www.sysintern...e/procexp.shtml
Edited by Chachazz, 26 May 2005 - 05:44 PM.