System process management tool process Explorer

System processes are often the "Restricted Area" operated by many readers. In fact, they can eliminate the fear of this restricted area by using some powerful tools. Process Explorer is a system process management tool. It not only allows you to conveniently view various system processes, but also allows you to view the processes executed in the background.ProgramIn particular, process Explorer can easily terminate any process, including key processes of the system, and can replace the built-in task manager.Process ExplorerDisplays information about the handles and DLL enabled or loaded by the process.Process ExplorerIs composed of two subwindows. The top window always displays the list of active processes (including the names of accounts with them), and the information displayed in the bottom window depends onProcess ExplorerMode: if it is in handle mode, you can see the handle opened by the selected process in the top window; ifProcess ExplorerIn DLL mode, you can see the DLL and memory ing files loaded by the corresponding process.Process ExplorerIt also provides powerful search functions to quickly display which processes have opened specific handles or loaded specific DLL.

Process ExplorerThe unique feature enables you to track dll version issues or handle leaks. It also gives you an insight into how Windows and applications work.

There are many ways to view processes provided by the Software. Click process, PID (process ID), CPU (CPU usage), and description at the top of the Process List in the main window) and company name (company name. If a process with an unknown source (such as a suspicious or anonymous company name) is found, double-click the entry to display its detailed attributes,

Because unknown processes are often "Not good", you can also view the memory usage of CPU threads based on the analysis of their indexes, click the performance graph tab in the window shown in Figure 3 to view the performance curve ".

For example, if the number of CPU threads and memory used by unknown programs in the performance curve are large (that is, the curve fluctuates greatly ), you can right-click the unknown process in the process list and select kill process to terminate the suspicious process.

: Http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx