Process Hacker 1.3.7.5

Copied from Process Hacker Homepage:


Introduction

Process Hacker is a feature-packed tool for manipulating processes and services on your computer. It can show you the threads (with symbols), modules, memory regions, handles and token of processes. It has detailed graphs that show CPU usage, memory usage and I/O activity. It can even change the DEP status of some processes and protect/unprotect them!

It can read/write memory using a built-in hex editor and search through memory.
It has a powerful run-as tool that can run programs as almost any user, including SYSTEM, LOCAL SERVICE and NETWORK SERVICE. Finally, its kernel-mode driver enables Process Hacker to show information for any process, even if it is protected by a rootkit.


Key features of Process Hacker:

A simple, customizable tree view with highlighting showing you the processes running on your computer.

Detailed performance graphs.

A complete list of services and full control over them (start, stop, pause, resume and delete).

A list of network connections.

Comprehensive information for all processes: full process performance history, thread listing and stacks with dbghelp symbols, token information, module and mapped file information, virtual memory map, environment variables, handles, ...

Full control over all processes, even processes protected by rootkits or security software. Its kernel-mode driver has unique abilities which allows it to terminate, suspend and resume all processes and threads, including software like IceSword, avast! anti-virus, AVG Antivirus, COMODO Internet Security, etc. (just to name a few).

Find hidden processes and terminate them. Process Hacker detects processes hidden by simple rootkits such as Hacker Defender and FU.

Easy DLL injection and unloading - simply right-click a process and select "Inject DLL" to inject and right-click a module and select "Unload" to unload!
Many more features...



System Requirements


* .NET Framework 2.0

* Microsoft Windows XP SP2 or above

* 1GB or more of total RAM if you want to read/write or search memory

* 2 CPUs (physical or multi-core) if you want to read/write or search memory


Features:


Processes

Process Hacker can terminate, suspend, resume, restart and set the priority of processes.

Threads

It can also terminate, suspend, resume and set the priority of threads.
It can also view threads' call stacks and their usernames/privileges/groups if they are impersonating another user.

Modules

It can display the modules loaded by each process and their properties.
It can also find the address of any exported function in a module, change page protection of the module's memory region, and read the module's memory.

Token

It can display each process' primary token and its user, source, groups and privileges. It even allows you to enable and disable privileges.

Memory

It can display (using VirtualQueryEx()) the memory regions in a process' virtual memory space, and even read/write data using a built-in hex editor.

Handles

It can display the handles opened by processes and can close them.

Search

Process Hacker also supports saving search results and even intersecting (finding common items between) two sets of search results!


FAQ:

Why should I use Process Hacker? Why not Process Explorer or some other program?

Process Hacker offers some pretty unique features, like an awesome run-as tool and the ability to protect and unprotect processes. Process Explorer is (now) owned by Microsoft, and they obviously don't want to provide a tool which lets users bypass their own Digital Restrictions Management.


Changelog:


* NEW/IMPROVED:

* #2780260 - "add key to open Proc Properties"

* #2780277 - "add to shortcut list for default action"

* #2781625 - "System Idle Process should not have network connections"

* #2784954 - "Ctrl+F find DLLs and not just Handles"

* Customizable tray icons - CPU History, CPU Usage, I/O History, Commit History and Physical Memory History

* Base Priority, Start Time, and CPU Time columns

* "Terminate Process Tree"

* Can close TCP connections

* Process tree loads instantly

* Process properties (appears to) loads faster

* Decreased CPU usage

* Significantly less memory usage, especially when opening process properties

* Thread termination now prompts

* Implemented Esc to close windows

* Cycles, Page Priority and I/O Priority in process statistics

* Integrity, I/O priority and page priority columns

* Windows are protected from being offscreen when they load

* Process property window locations are now saved

* The main window dimensions are saved when exiting minimized

* Enabled Reduce Working Set for multiple processes at a time

* Hides Process Hacker network connections by default


* FIXED:

* #2782808 - "Exception generated when CPU History is set to first column."

* #2784922 - "Hidden processes window: window location not remembered"

* #2784924 - "Network connections: process's icon not shown"

* Unhandled exception when process properties is closed within 100ms of being opened

* Handle filter took a while to start up

* Forgot to add sorting for Private WS, Shared WS and Shareable WS

* dbghelp warnings were not being shown the first time process properties opened

* Random file-object-related BSODs

* Increased PID limit in Hidden Processes to 65536

* Inaccurate I/O Total rates when using a refresh interval other than 1000ms

* Incorrect thread start addresses



Comments from the uploader (olofolleola4):
This is a really powerful application that can do much more things than the Task Manager and programs like Process Explorer and Itty Bitty Process Manager.
Try it! :D

Here is the link to the Homepage:

http://processhacker.sourceforge.net/index.php