SysInternal Utilities
Thursday, October 23, 2003
Mark Russinovich wrote:
"Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded.
The Process Explorer display consists of two sub-windows. The top always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you’ll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you’ll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.
The unique capabilities of Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.
What's new in Version 8.0:
.NET tab for .NET processes that shows AppDomains and .NET performance counters
When the .NET Framework is detected a .NET tab on the column selection dialog for adding .NET performance counters
Option to show only .NET processes
Option to only show your own processes
System Information dialog showing the same memory counters as Task Manager (when symbols are configured, also shows maximum paged and nonpaged pool values)
Better symbol configuration guidance
Difference highlight duration is configurable
Tray icon for CPU usage that's yellow when usage is > 70% and red when > 90%
Minimize-to-tray option
Highlight color configuration dialog
Context switch and context-switch delta columns
Run processes using the system Run dialog from the File menu
Replace task manager option so that when you run Task Manager Process Explorer runs instead
Only non-zero CPU usage, .NET counters and context-switch values are displayed to clearly highlight process activity
Search for DLLs or handles regardless of what mode the lower pane is in
Correct icons for MMC windows
Mouse hover over process names and DLL names shows full path of executable or DLL"
Download from SysInternals web site (approx 180 KB only!).
I take a short look for other utilities from SysInternals. TCPView for monitoring network connections, PortMon for monitoring COM-ports. They are really good. Must have!