描述:NoVirusThanks Process Dumper is a freeware command-line utility to dump all commited regions of a process’ virtual memory to a .dmp file.
If you want to dump the virtual memory of a system process, it will be necessary to obtain administrative privileges to do so.
Command-Line parameters:
/pid:100
==> Dumps process with PID as 100
/savepath:C:\Users\Name\Desktop\
==> Saves the dumped process memory file in the path C:\Users\Name\Desktop\
The tool is compatible with 32/64-bit versions of Windows up to Windows 7.
下载地址: http://www.afterdawn.com/software/system_tools/misc_system_tools/novirusthanks_process_dumper.cfm