Windows sysinternals

86 Part II Usage Guide
Click the Save button to save the displayed strings to a text file. To compare image and
memory strings, save the image and memory strings to separate files and then identify the
differences with a text-comparison utility.
To search for specific text in the strings list, click the Find button to display the standard Find
dialog box. To search for additional occurrences of the same text, simply press F3 or click
Find and Find Next again—the search continues from the currently selected row.
Services Tab
Windows services run in (usually noninteractive) processes that can be configured to start
independently of any user logging on and that are controlled through a standard interface
with the Service Control Manager. Multiple services can be configured to share a single
process. A common example of this can be seen in Svchost.exe, which is specifically designed
to host multiple services implemented in separate DLLs.
If the selected process hosts one or more services, the process’ Properties dialog box adds
a Services tab, as shown in Figure 3-33. Its list box lists the internal and display names for
each service, and for services hosted within a Svchost.exe process, the path to the DLL that
implements the service. Selecting a service in the list displays its description below the list
box.
FIGURE 3-33 The Services tab of the process’ Properties dialog box.
Individual services can be configured to allow or not allow stop or pause/resume operations.
Procexp enables Stop, Pause, and Resume buttons if the selected service allows those
operations.
www.it-ebooks.info