Process Hacker 1.3.6.5

Copied from Process Hacker Homepage:


Introduction

Process Hacker is a feature-packed tool for manipulating processes and services on your computer. It can show you the threads (with symbols), modules, memory regions, handles and token of processes. It has detailed graphs that show CPU usage, memory usage and I/O activity. It can even change the DEP status of some processes and protect/unprotect them!

It can read/write memory using a built-in hex editor and search through memory.
It has a powerful run-as tool that can run programs as almost any user, including SYSTEM, LOCAL SERVICE and NETWORK SERVICE. Finally, its kernel-mode driver enables Process Hacker to show information for any process, even if it is protected by a rootkit.

System Requirements


* .NET Framework 2.0

* Microsoft Windows XP or above

* 1GB or more of total RAM if you want to read/write or search memory

* 2 CPUs (physical or multi-core) if you want to read/write or search memory


Features:


Processes

Process Hacker can terminate, suspend, resume, restart and set the priority of processes.

Threads

It can also terminate, suspend, resume and set the priority of threads.
It can also view threads' call stacks and their usernames/privileges/groups if they are impersonating another user.

Modules

It can display the modules loaded by each process and their properties.
It can also find the address of any exported function in a module, change page protection of the module's memory region, and read the module's memory.

Token

It can display each process' primary token and its user, source, groups and privileges. It even allows you to enable and disable privileges.

Memory

It can display (using VirtualQueryEx()) the memory regions in a process' virtual memory space, and even read/write data using a built-in hex editor.

Handles

It can display the handles opened by processes and can close them.

Search

Process Hacker also supports saving search results and even intersecting (finding common items between) two sets of search results!


FAQ:

Why should I use Process Hacker? Why not Process Explorer or some other program?

Process Hacker offers some pretty unique features, like an awesome run-as tool and the ability to protect and unprotect processes. Process Explorer is (now) owned by Microsoft, and they obviously don't want to provide a tool which lets users bypass their own Digital Restrictions Management.


Changelog:


1.3.6.5


* NEW/IMPROVED:

* #2702907 - "CSR Processes: Enable termination of multiple processes"

* #2702909 - "CSR Processes: Show process name when confirming termination"

* #2702911 - "Show process name when terminating process in properties"

* #2702929 - "Add a Cancel button in Options"

* #2713088 - "Network: Ctrl+A and Ctrl+C should copy the processes' names"

* #2714130 - "Option to disable/enable all highlighting colors"

* Job information

* "Inject DLL" function

* Statistics times in System Information and process properties

* Highlighting system

* Configurable max. samples and plotter step size

* Network list with icons

* Can close multiple handles at once

* Less memory usage

* Confirmation dialogs are now consistent and use new Vista interfaces where possible

* KProcessHacker now retrieves thread start addresses

* KProcessHacker now performs memory manipulation (allowing the command lines of more processes to be displayed)

* KProcessHacker now performs process suspending/resuming on Windows Vista

* Custom module information querying; can now display the modules for protected processes

* Displays service DLL paths

* Thread list displays cycles instead of context switches on Windows Vista

* GUI threads are highlighted (with KProcessHacker)

* Suspended and GUI thread highlighting can be configured

* Special tooltip information for dllhost.exe (shows COM target)


* FIXED:

* #2642442 - "System Information label text gets clipped"

* #2694437 - "Crash when sorting the process list"

* #2713087 - "Processes: Copy should copy only the columns currently used"

* #2716815 - "PH crashes during EnumProcesses"

* Network connections would be readded if their state changed

* Integer overflows in the process provider and system statistics

* Memory leaks with various windows

* Crash when saving with the I/O or CPU History column visible

* Inconsistent Copy menu after columns are modified

* Crash when F5 (Refresh) is held down

* Resizable statusbar

* Module unloading now works properly


* REMOVED:

* Disassembler - not used very often


1.3.6.1


* NEW:

* CPU and I/O history columns

* System Cache value in System Information


* FIXED:

* #2625167 - "Commit charge limit should not be 16EB"

* #2642385 - "Maximum File Cache size should not be 16EB"

* Minimize size of the System Information window

* Settings were lost between versions

* Handle and memory leaks

* Integer overflows in System Information


Comments from the uploader (olofolleola4):
This is a really powerful application that can do much more things than the Task Manager and programs like Process Explorer and Itty Bitty Process Manager.
Try it! :D

Here is the link to the Homepage:

http://processhacker.sourceforge.net/index.php