TUTORIAL On How To Use Process Explorer (教程如何使用Process Explorer).pdf
文本预览下载声明
TUTORIAL On How To Use Process Explorer
This information was adapted from the help file for the program.
Process Explorer is an advanced process management utility is very similar to Task Manager.
Process Manager picks up where Task Manager leaves off. It allows you to
see detailed information about a process such as what icon it uses , command‐
line, full image path, memory statistics, user account, security attributes, and more so much more. When you
zoom in on a particular process you can list the DLLs that has been loaded or the operating system
resource handles it has open. A search capability enables you to track down a process that has a
resource opened, such as a file, directory or Registry key, or to view the list of processes that
have a DLL loaded.
The Process Explorer display uses two sub‐windows. The top always shows a list of the
currently active processes, including the names of their owning accounts, whereas the
information displayed in the bottom window, which you can close, depends on the mode that
Process Explorer is in: if it is in handle mode you will see the handles that the process selected
in the top window has opened; if Process Explorer is in DLL mode you will see the DLLs and
memory‐mapped files that the process has loaded.
Process Explorer also has a powerful search capability that will quickly show you which
processes have particular handles opened or DLLs loaded. The unique capabilities of Process
Explorer make it useful for tracking down DLL‐version problems or handle leaks, and provide
insight into the way Windows and applications work.
You can obtain equivalent command‐line tools, Handle and ListDLLs, at the Sysinternals Web
site.
Process Explorer does not require administrative privileges to run and works on Windows
9x/Me, Windows NT 4.0, Windows 2000, Windows XP, Server 2003, Windows Vista, Windows
Server 2008 and on the x64 version of 64‐bit Windows XP, Windows Vista, Windows Server
2003, and W
显示全部