KProcView (Windows)
This program tries to enumerate all running processes using the kernel-side NT API ZwQuerySystemInformation. This is useful for trying to detect rootkits which patch the user-side Win32 APIs for detecting processes. It also enumerates lots of other information about those processes, such as loaded modules, thread information, window information and more! It also provides other additional functionality, including a technique for killing protected system processes.
Download