mirror-processhacker/trunk

Process Hacker is a tool for viewing and manipulating processes. 

It supports:



 * Viewing, terminating, suspending and resuming processes

 * Viewing, controlling and deleting services

 * Viewing/enabling/disabling/removing process privileges

 * Viewing process groups

 * Inspecting PE files (exe/dll/ocx/sys files)

 * Viewing, terminating, suspending and resuming threads

 * Viewing and closing process handles

 * Viewing modules, finding the address of an exported function, 

   changing page protection, reading memory and viewing file 

   properties

 * Viewing memory regions, changing page protection and reading 

   and writing

 * Searching through process memory, either using literal data 

   or regular expressions

 * Scanning for strings inside process memory

 * Getting heap information

 * Viewing DEP status and other additional information.



Additionally, Process Hacker includes a separate tool called Injector 

which has the following capabilities:

 * Getting the command line of a process

 * Forcing a process to start another process

 * Forcing a process to terminate itself



Process Hacker has an embedded help file (accessible through 

Hacker > Help).



KNOWN ISSUES

 * Process Hacker does not display File handles on Windows XP



Process Hacker is made by wj32 and uses the following components:



 * HexBox control by Bernhard Elbl

   - http://sourceforge.net/projects/hexbox

 * VistaMenu by wyDay

   - http://wyday.com/blog/2008/vista-menu-with-icons-in-c-sharp/

 * SplitButton by wyDay

 * Silk Icons from famfamfam.com

   - http://www.famfamfam.com/lab/icons/silk/

 * The disassembler used in OllyDbg, by Oleh Yuschuk

   - http://www.ollydbg.de