B
BillR
In the last month:
Autoruns v5.0 (major upgrade)
Tcpvcon (new)
Psloglist v2.52
DebugView v4.31
"What's New" for the last three months with descriptions is excerpted
at the bottom for off-line readers.
Sysinternals, the freeware version of Winternals, offers a number of
excellent utilities from Mark Russinovich and Bryce Cogswell
(primarily). Some are rather specialized; others should be evaluated
by almost everyone. Several have been Pricelessware for a few years;
others have been recommended frequently by ACF regulars. My personal
favorites:
Autoruns
BgInfo
Contig and PageDefrag
FileMon, RegMon, DiskMon, etc.
NTFSDOS
Process Explorer.
PsTools
http://www.sysinternals.com/new.shtml
Site Excerpt
------------
August 19
Autoruns v5.0
This major Autoruns update adds display of Winlogon logon
notifications, Explorer addins (including browser helper objects,
shell extensions, toolbars, and more), reporting of trusted signed
images, a Google search feature, and a command-line version useful for
inventory or scripting!
August 9
Tcpvcon
A lot of people have asked for it so here it is: a command-line
version of Tcpview that works on NT 4 and higher and shows TCP and UDP
endpoints with the owning process names.
Psloglist v2.52
PsLoglist now has an option that has it show records from the most
recent number of hours specified.
July 30
Sysinternals Newsletter
Another issue of the Sysinternals newsletter has gone out!
July 20
DebugView v4.31
This DebugView updates supports kernel-mode debug output on Windows XP
SP2, has larger kernel and user-mode capture buffers, adds 10 more
highlighting filters, allows log file wrapping, and will clear the
output when it sees the debug output string "DBGVIEWCLEAR".
July 12
Updated Boot.ini Option Documentation
Learn about the new boot.ini switches available in Windows XP and
Windows Server 2003.
July 2
The Memory Optimization Hoax
Mark's expose of the RAM-optimizer plague is now posted for access by
everyone.
Windows and .NET Magazine Article on PsExec
Check out the July issue of Windows and .NET Magazine for an article
that shows you how to get the most out of PsExec!
June 27
PsExec v1.55, PsShutdown v2.32
In order to better support multi-computer commands, PsExec and
PsShutdown now have a new option, -n, that lets you specify a timeout
when they attempt to connect to a remote computer.
Process Explorer v8.41
This Process Explorer update includes bug fixes and display of memory
tooltips on system and per-process memory usage history graphs.
Sysinternals is a Microsoft Windows XP Community Site!
Microsoft has recognized Sysinternals by adding the site to their
Windows XP community sites.
June 14
Autoruns v4.31
Autoruns includes several more auto-starting locations and now lets
you temporarily disable items like Windows Me and Windows XP's
MsConfig utility, and highlights item activation locations.
May 25
Process Explorer v8.4
A new process-properties page that shows active TCP and UDP endpoints,
64-bit process identification (in the 64-bit version) and flicker-free
display updates highlight this new version.
PsInfo v1.6
PsInfo now takes a command-line option that has it print only a
specific field of information.
May 19
PsTools v2.02
Updates to PsLoglist, PsPassword, PsShutdown and PsInfo add support
for specifying multiple computers on the command line, in a file, or
by enumerating a domain. In addition, PsLoglist now takes multiple
event IDs as a filter.
LogonSessions v1.0
Do you think that when you're logged on to a workstation there's only
one logon session active? There's probably a lot more than one. This
applet lists the logon sessions active on a system, and optionally,
the list of processes running in each session.
Autoruns v4.11
Autoruns now shows Winlogon notification DLLs that are notified when
someone logs on to a system, ActiveSetup keys that Windows uses to
configure software on a per-user basis, and Win32 autostart services,
and as you can have Autoruns show only non-Microsoft entries.
Autoruns v5.0 (major upgrade)
Tcpvcon (new)
Psloglist v2.52
DebugView v4.31
"What's New" for the last three months with descriptions is excerpted
at the bottom for off-line readers.
Sysinternals, the freeware version of Winternals, offers a number of
excellent utilities from Mark Russinovich and Bryce Cogswell
(primarily). Some are rather specialized; others should be evaluated
by almost everyone. Several have been Pricelessware for a few years;
others have been recommended frequently by ACF regulars. My personal
favorites:
Autoruns
BgInfo
Contig and PageDefrag
FileMon, RegMon, DiskMon, etc.
NTFSDOS
Process Explorer.
PsTools
http://www.sysinternals.com/new.shtml
Site Excerpt
------------
August 19
Autoruns v5.0
This major Autoruns update adds display of Winlogon logon
notifications, Explorer addins (including browser helper objects,
shell extensions, toolbars, and more), reporting of trusted signed
images, a Google search feature, and a command-line version useful for
inventory or scripting!
August 9
Tcpvcon
A lot of people have asked for it so here it is: a command-line
version of Tcpview that works on NT 4 and higher and shows TCP and UDP
endpoints with the owning process names.
Psloglist v2.52
PsLoglist now has an option that has it show records from the most
recent number of hours specified.
July 30
Sysinternals Newsletter
Another issue of the Sysinternals newsletter has gone out!
July 20
DebugView v4.31
This DebugView updates supports kernel-mode debug output on Windows XP
SP2, has larger kernel and user-mode capture buffers, adds 10 more
highlighting filters, allows log file wrapping, and will clear the
output when it sees the debug output string "DBGVIEWCLEAR".
July 12
Updated Boot.ini Option Documentation
Learn about the new boot.ini switches available in Windows XP and
Windows Server 2003.
July 2
The Memory Optimization Hoax
Mark's expose of the RAM-optimizer plague is now posted for access by
everyone.
Windows and .NET Magazine Article on PsExec
Check out the July issue of Windows and .NET Magazine for an article
that shows you how to get the most out of PsExec!
June 27
PsExec v1.55, PsShutdown v2.32
In order to better support multi-computer commands, PsExec and
PsShutdown now have a new option, -n, that lets you specify a timeout
when they attempt to connect to a remote computer.
Process Explorer v8.41
This Process Explorer update includes bug fixes and display of memory
tooltips on system and per-process memory usage history graphs.
Sysinternals is a Microsoft Windows XP Community Site!
Microsoft has recognized Sysinternals by adding the site to their
Windows XP community sites.
June 14
Autoruns v4.31
Autoruns includes several more auto-starting locations and now lets
you temporarily disable items like Windows Me and Windows XP's
MsConfig utility, and highlights item activation locations.
May 25
Process Explorer v8.4
A new process-properties page that shows active TCP and UDP endpoints,
64-bit process identification (in the 64-bit version) and flicker-free
display updates highlight this new version.
PsInfo v1.6
PsInfo now takes a command-line option that has it print only a
specific field of information.
May 19
PsTools v2.02
Updates to PsLoglist, PsPassword, PsShutdown and PsInfo add support
for specifying multiple computers on the command line, in a file, or
by enumerating a domain. In addition, PsLoglist now takes multiple
event IDs as a filter.
LogonSessions v1.0
Do you think that when you're logged on to a workstation there's only
one logon session active? There's probably a lot more than one. This
applet lists the logon sessions active on a system, and optionally,
the list of processes running in each session.
Autoruns v4.11
Autoruns now shows Winlogon notification DLLs that are notified when
someone logs on to a system, ActiveSetup keys that Windows uses to
configure software on a per-user basis, and Win32 autostart services,
and as you can have Autoruns show only non-Microsoft entries.