📄 procexp.htm
字号:
of processes referenced by handles. For
thread handles you will be shown the corresponding
thread's process name and ID, as well as
the thread's ID. </p>
</td>
</tr>
<tr>
<td colspan="3" height="40" valign="middle"><span class='sectionheader'>DLL
Mode</span></td>
</tr>
<tr>
<td valign="TOP" colspan="3">
<p>Select the “View DLLs” menu item
or the equivalent toolbar button to switch
to DLL mode. In this mode loaded DLLs are
listed in the bottom window . If you double-click
on a DLL, or press the properties toolbar
button, <i>Process Explorer</i> will present a properties
dialog with detailed version information.
<br>
<br>
If you're running on Windows NT/2K, the
"MM" column indicates whether
the corresponding file has been memory-mapped
rather than loaded as a module. This corresponds
to an applications use of MapViewOfFile.
If a file is memory-mapped the base and
size columns indicate the virtual address
range where the file has been mapped. If
you are unable to delete a file and don’t
find any handle references to it, the file
may have been memory mapped, since WinNT/2K
does not let memory mapped files be deleted
or portions of a file that have been mapped
be truncated.</p>
<p>Select the Options|Highlight Relocated
DLLs to have Process Explorer highlight any DLLs
that were not loaded at their default base
address in yellow. This feature is intended
to help developers define base addresses
for their DLLs that result in no conflicts
and therefore provide optimal load times
and minimal memory footprints.</p>
</td>
</tr>
<tr>
<td colspan="3" height="40" valign="middle"><span class='sectionheader'>Refresh</span></td>
</tr>
<tr>
<td valign="TOP" colspan="3"> You can configure
Process Explorer to automatically refresh
at various intervals, or to pause the auto-refresh
and manually refresh the display. The F5 key
or the "Refresh" menu item will
cause <i>Process Explorer</i> to rescan process,
DLL and handle information. When you perform
a refresh <i>Process Explorer</i> highlights
entries that existed before the refresh but
not after in red. Process Explorer shows entries
that are new after the refresh in green. For
example, if you start a new process, that
process will display in green. This feature
makes it easier to see what’s changed
across a refresh, and to find handle leaks.</td>
</tr>
<tr>
<td colspan="3" height="40" valign="middle"><span class='sectionheader'>Searching</span></td>
</tr>
<tr>
<td valign="TOP" colspan="3"> You can search
for processes that have particular DLLs loaded
or handles opened. The search dialog is activated
with the search toolbar button or its menu
item. Enter a substring in the edit box of
the search dialog and select the "Search"
button. If <i>Process Explorer</i> is in handle mode
it will search for opened handles that contain
the substring, but if it is in DLL mode it
will search for loaded DLLs that have the
substring in their path name. In either case,
all handles or DLLs are scanned, not just
those of the currently selected process.<br>
<br>
Selecting an entry in the result-pane of the
find dialog causes <i>Process Explorer</i> to locate
and display in the process and handle or DLL
view (as appropriate), the lines corresponding
to the entry you select. </td>
</tr>
<tr>
<td colspan="3" height="40" valign="middle"><span class='sectionheader'>Related
Tools</span></td>
</tr>
<tr>
<td valign="TOP" colspan="3"> Here are some
other handle and DLL viewing tools available
at Sysinternals:
<ul>
<li><a
href="handle.shtml">Handle</a> - a command-line handle viewer for Win9x/Me and
NT/Win2K</li>
<li><a
href="../../ntw2k/freeware/listdlls.shtml">ListDLLs</a> - a command-line DLL viewer
for Win9x/Me and NT/Win2K</li>
<li><a href="pslist.shtml">PsList</a> -
loca/remote command-line process lister
for NT/Win2K</li>
<li><a href="pskill.shtml">PsKill</a> -
local/remote command-line process killer
for NT/Win2K</li>
</ul>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td colspan="3" height="40" valign="middle" align="center">
<p><strong>In order to help us track its use, please
download through the link that represents the
operating system on which you will use or mostly
use </strong><em><strong>Process Explorer. </strong></em><strong><br>
<br>
Note that the zip files are identical, and </strong><em><strong>Process Explorer</strong></em><strong>
runs on all Windows platforms.</strong></p>
<p><a href="../../files/procexp9x.zip"><b>Download
Process Explorer (x86 - 77KB) - you plan on using
Process Explorer on Win9x/Me</b></a></p>
<p><a href="../../files/procexpnt.zip"><b>Download
Process Explorer (x86 - 77KB) - you plan on using
Process Explorer on WinNT/2K/XP</b></a></p>
<p><a href="../../files/handaxp.zip"><b>Download
HandleExfor Compaq Alpha (69 KB)</b></a></p>
<a href="#top"><b>Back to Top</b></a> </td>
</tr>
</table>
</td>
</tr>
</table>
</TD>
</TR>
</TABLE>
<!-- #EndEditable --></td>
</tr>
</table>
</td>
</tr>
</table>
</body>
<!-- #EndTemplate --></html>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -