Home > System tool > View soft
Process Explorer shows you information about which handles and DLLs processes have opened or loaded. The Process Explorer display consists of two sub-windows. The top always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode youll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode youll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.
Sysinternals作品,强大的系统进程查看器,特色之处之一就是可以显示一个程序调用了那些动态链接库DLL,这样可以发现一些十分隐蔽的木马! 还可以查看这个进程的路径,以及 公司,版本等详细信息,多色彩表示服务进程,系统进程,目录树方式查看进程之间的归属关系,还可以替换系统自带的任务管理器.