:idea:
Process Explorer for Windows v10.21By Mark RussinovichPublished: November 1, 2006
IntroductionEver wondered which program has a particular file or directory open? Now you can find out.
Process Explorer shows you information about which handles and DLLs processes have opened or loaded.
The
Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that
Process Explorer is in: if it is in handle mode you'll see the handles that the process selected in the top window has opened; if
Process Explorer is in DLL mode you'll see the DLLs and memory-mapped files that the process has loaded.
Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.
The unique capabilities of
Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.
Process Explorer works on Windows 9x/Me, Windows NT 4.0, Windows 2000, Windows XP, Server 2003, and 64-bit versions of Windows for x64 processors, and Windows Vista.
What's new in Version 10.2:
•
Vista integrity level and virtualized columns and process properties
•
Signed driver for 64-bit Vista for x64 processors
What's new in Version 10.1:
•
Vista process cycle counters in process properties and as column
•
Service permissions viewing and editing
•
Workaround for .NET runtime handle leak
•
Many new I/O columns and process properties
•
System and per-process I/O bytes history graphs
•
I/O history minigraph
•
Memory commit history minigraph
•
Optional I/O history tray icon
•
Windows 64-bit for Itanium support
Top of page
InstallationSimply run
Process Explorer (procexp.exe).
The help file describes
Process Explorer operation and usage. If you have problems or questions please visit the Sysinternals Process Explorer Forum.
Top of page
Related ItemsHere are some other handle and DLL viewing tools and information available at Sysinternals:
•
TechNet On-Demand Webcast: Advanced Malware Cleaning - Learn from Mark how to use the Sysinternals tools to identify malware infestations, from standard spyware to kernel-mode rootkits, and clean them off your systems.
•
Handle - a command-line handle viewer
•
ListDLLs - a command-line DLL viewer
•
PsList - local/remote command-line process lister
•
PsKill - local/remote command-line process killer
Top of page
Microsoft Process Explorer KB ArticlesThe following Microsoft KB articles reference Process Explorer for diagnosing or troubleshooting various problems:
•
319034: FIX: Thread Handle Leak in PrintReport Method of Data Report
•
232830: HOWTO: Determine File Handle Ownership
•
242131: How to: Display a List of Processes That Have Files Open
•
216368: PRB: Access Violation During Application Setup When File in Use
•
166112: PRB: Conflict with EOF When Using #import with ADO
•
301357: PRB: DLLs Not Unloaded After Calling CoFreeUnusedLibraries
•
816683: Process Explorer from SysInternals Does Not Start
•
247957: SAMPLE: Using DUPS.exe to Resolve DLL Compatibility Problems
•
313735: XCON: The MTA Process Is Leaking Memory with a High Handle Count
•
276525: Your Computer May Stop Responding When You Monitor Open Handles
Download Process Explorer (1.5 MB)
