Sysinternals Site Discussion
Update: Autoruns v11.62
Autoruns v11.62: This release fixes a bug in version 11.61’s jump-to-image functionality.
Author: safarr_msft1 Date: 07/01/2013
Updates: Mark's TechEd Sessions, Autoruns v11.61, Strings v2.52, ZoomIt v4.5
Mark’s TechEd Sessions Available On-Demand: Mark delivered four top-rated sessions at...
Author: kebal_msft1 Date: 06/20/2013
Updates: Autoruns v11.6, Procexp v15.31, Procmon v3.05, Sigcheck v1.92
Autoruns v11.6: Autoruns is a utility for enumerating and disabling executables and DLLs configured...
Author: kebal_msft1 Date: 06/04/2013
Updates: Accesschk v5.11, Procdump v6.0, RAMMap v1.22, Strings v2.51
AccessChk v5.11: AccessChk, a command line utility fordumping the effective permissions and security...
Author: safarr_msft1 Date: 05/17/2013
Updates: Autoruns v11.5, Du (Disk Usage) v1.5, Procdump v5.14, Procmon v3.04, Ru (Registry Usage) v1.0
Autoruns v11.5: This update to Autoruns, a utility for managing autostarting applications and...
Author: safarr_msft1 Date: 03/27/2013
Updates: Pendmoves v1.2, Process Explorer v15.3, Sigcheck v1.91, Zoomit v4.42
Pendmoves v1.2: This update to Pendmoves adds support for 64-bit directories. Process Explorer...
Author: safarr_msft1 Date: 02/04/2013
Update: Autoruns v11.42
Autoruns v11.42: This release fixes a bug in the parsing of network file paths introduced in...
Author: safarr_msft1 Date: 01/30/2013
Updates: Autoruns v11.41, Handle v3.51, Movefile v1.01, Procdump v5.13, Sigcheck v1.9
Autoruns v11.41: This Autoruns update reports the hosting image target of link shortcut references....
Author: safarr_msft1 Date: 01/24/2013
Updates: Autoruns v11.4, ProcDump v5.12, SDelete v1.61
Autoruns v11.4: Autoruns v11.4 adds additional startup locations, fixes several bugs related to...
Author: safarr_msft1 Date: 01/10/2013
Update: ZoomIt v4.41
ZoomIt v4.41: This update fixes a bug in ZoomIt v4.4 that prevented it from running on 32-bit...
Author: safarr_msft1 Date: 12/06/2012
Updates: DebugView v4.81, ProcDump v5.11, ZoomIt v4.4
DebugView v4.81: Version 4.81 of DebugView, a utility that logs user and kernel-modedebug output...
Author: safarr_msft1 Date: 12/04/2012
Updates: AdExplorer v1.44, Contig v1.7, Coreinfo v3.2, Procdump v5.1
AdExplorer v1.44: This release fixes a bug that caused AdExplorer to crash when it encountered...
Author: safarr_msft1 Date: 11/16/2012
Updates: Coreinfo v3.1, Desktops v2.0, Livekd v5.3, PsPasswd v1.23, Testlimit v5.22, Whois v1.11
Coreinfo v3.1: This update to Coreinfo, a command line utility that reports detailed information...
Author: safarr_msft1 Date: 10/19/2012
Windows Internals 6th Edition Part 2 Published, and Mark Talks Sysinternals History on Defrag Tools
Windows Internals 6th Edition, Part 2 Published: Part 2 of Windows Internals 6th Edition, is now...
Author: safarr_msft1 Date: 10/05/2012
New: PsPing v1.0; Updates: DebugView v4.8, Process Explorer v15.23, Sigcheck v1.81
PsPing v1.0: PsPing is a new Sysinternals PsTools command-line utility for measuring network...
Author: safarr_msft1 Date: 10/03/2012
Updates: Autoruns v11.34, ProcDump v5.0, Sigcheck v1.8, VMMap v3.11
Autoruns v11.34: This release of Autoruns fixes a bug that caused it to not show some Internet...
Author: safarr_msft1 Date: 09/11/2012
Updates: AccessChk v5.1, Autoruns v.11.33, Coreinfo v3.05, Whois v1.1
AccessChk v5.1: This update to AccessChk, a command-line utility that shows the security settings...
Author: safarr_msft1 Date: 08/03/2012
Update: ZoomIt v4.31
ZoomIt v4.31: This release fixes a bug that caused ZoomIt to sometimes report an error when...
Author: safarr_msft1 Date: 07/18/2012
Updates: Handle v3.5, Process Explorer v15.22, Process Monitor v3.03, RAMMap v1.21, ZoomIt v4.3
Handle v3.5: This update to Handle, a command-line utility that lists open handles, uses the most...
Author: safarr_msft1 Date: 07/16/2012
Updates: Autoruns v11.32, Process Explorer v15.21, Process Monitor v3.02, PSKill v1.15, RAMMap v1.2
Autoruns v11.32: This update fixes a bug that prevented Autoruns from correctly elevating when the...
Author: safarr_msft1 Date: 06/28/2012
Updates: Process Explorer v15.2, Testlimit v5.21, Pskill v1.14
Process Explorer v15.2: This major update to Process Explorer, a Task Manager replacement, merges...
Author: BethBr Date: 06/07/2012
Updates: Autoruns v11.31, DebugView 4.79
Autoruns v11.31: This fixes a bug that caused Autoruns to not automatically refresh when relaunched...
Author: BethBr Date: 05/23/2012
Updates: Autoruns v 11.3, LiveKd v 5.2, Strings v 2.5 and Trojan Horse, Mark's sequel to Zero Day, available for pre-order
Autoruns v11.3: This update to Autoruns, a utility that shows the executables, drivers, and DLLs...
Author: BethBr Date: 05/14/2012
Updates: NotMyFault, ProcMon v 3.01, TestLimit v 5.2, Mark's Webcasts and Windows Internals 6th Edition, Part 1
NotMyFault: Notmyfault is a tool used in the Windows Internals books to show how common device...
Author: BethBr Date: 04/16/2012
Updates: AccessChk v 5.03, Autoruns & Autorunsc v 11.22, ProcMon v 3.0, PsList v 1.3
Accesschk v5.03: The -l switch, which has AccessChk show detailed security descriptor information,...
Author: BethBr Date: 03/26/2012
Updates: Autoruns v11.21, Coreinfo v3.03, PortMon v 3.03, Process Explorer v15.12, Mark’s Blog and Mark at RSA 2012
Autoruns v11.21: This update to Autoruns fixes a number of minor bugs, including one that could...
Author: BethBr Date: 01/12/2012
Update: Process Explorer v15.11
Process Explorer v15.11: This minor update fixes several bugs, including the fleeting appearance of...
Author: BethBr Date: 12/16/2011
Updates: Autoruns v11.2, Disk Usage (DU) v1.4, Process Explorer v15.1, Strings v2.42 and Mark’s Blog: Case of the Installer Service Error
Autoruns v11.2: This update fixes a bug in the jump-to-folder function when executed on disabled...
Author: BethBr Date: 12/05/2011
Updates: Autoruns v11.1, Coreinfo v3.02, AccessChk v5.02, and Microsoft Security Intelligence Report v11
Autoruns v11.1: This update to Autoruns adds several new autostartlocations, reports the active...
Author: Karl Seng Date: 11/10/2011
Updates: Autoruns v11, Coreinfo v3.01, ProcDump v4.01, Process Explorer v15.05, and Mark at BUILD.
Autoruns v11: This update to Autoruns, a GUI and command-line tool that lists executables configured...
Author: Karl Seng Date: 09/20/2011
Updates: Coreinfo v3, DebugView v4.77, SDelete v1.6, and Process Explorer v15.04
Coreinfo v3: Coreinfo is a command-line utility that reports detailed information about processor...
Author: Karl Seng Date: 09/01/2011
Update: Process Explorer v15.03
Process Explorer v15.03: This fixes a bug introduced in v15.02 that would result in a crash of...
Author: Karl Seng Date: 08/18/2011
Updates: Process Explorer v15.01 and TCPView v3.05
Process Explorer v15.01: This update adds the ability to select a custom graph background color,...
Author: Karl Seng Date: 07/25/2011
Updates: release of The Windows Sysinternals Administrator's Reference, Process Explorer v15, Listdlls v3.1, new utility Findlinks v1, and Mark to Speak at Black Hat US 2011
The Windows Sysinternals Administrator's Reference: We are excited and proud to announce the release...
Author: Karl Seng Date: 07/18/2011
Updates: VMMap v3.1, RAMMap v1.11, Handle v3.46, Process Explorer v14.12 and Mark’s Blog: Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 3
? VMMap v3.1: VMMap, a process virtual and physical memory analyzer, now shows the ASLR status of...
Author: Karl Seng Date: 05/18/2011
Updates: ZoomIt v4.2, Process Explorer v14.11, and ProcDump v3.04
ZoomIt v4.2: This update to ZoomIt, a screen magnification and annotation utility, now adjusts the...
Author: Karl Seng Date: 05/03/2011
Mark’s Tech·Ed North America Session Schedule Posted
Mark’s Tech·Ed North America Session Schedule Posted: Mark is delivering four sessions...
Author: Karl Seng Date: 04/19/2011
Updates: Process Monitor v2.95, TCPView v3.04, Autoruns v10.07, and a new blog post and webcast from Mark.
Process Monitor v2.95: This update to Process Monitor reports the write-through flag on file I/O,...
Author: Karl Seng Date: 04/13/2011
Updates: Process Explorer v14.1, VMMap v3.03, ProcDump v3.03, and Zero Day is now Available!
Zero Day is Now Available! Mark’s first novel, a cyberthriller called Zero Day, is now...
Author: curtismetz Date: 03/15/2011
Update: Autologon v3.01
Autologon v3.01: This version enables the /accepteula swtich.
Author: curtismetz Date: 02/23/2011
Updates: VMMap v3.02, WinObj v2.22 and an Interview - Mark on Channel 9 Cloud Cover
Mark on Channel 9 Cloud Cover: Check out the most recent Cloud Cover episode, where Mark is the...
Author: curtismetz Date: 02/14/2011
Mark’s Blog Nominated for “Niney Award”
Mark’s Blog Nominated for “Niney Award”: The first annual Niney Awards nominations...
Author: curtismetz Date: 02/03/2011
Updates: ProcDump v3.02, Contig v1.6, TCPView v3.03 and a New Mark's Blog Post
ProcDump v3.02: This update to ProcDump, a command-line utility that can capture process dumps based...
Author: curtismetz Date: 02/01/2011
Update Handle v3.45
Handle v3.45: This release fixes a bug that could in some cases cause a system crash.
Author: curtismetz Date: 01/25/2011
Update: Handle v3.44
Handle v3.44: This updates the driver to the newest version used by Process Explorer.
Author: curtismetz Date: 01/19/2011
Announcing Zero Day: A Novel by Mark Russinovich
Announcing Zero Day: A Novel: Mark’s first novel, Zero Day, is a cyberthriller that presents a...
Author: curtismetz Date: 01/18/2011
Updates: ListDLLs v3.0, Handle v3.43, and Process Monitor v2.94
ListDLLs v3.0: This update to ListDLLs, a command-line utility for listing the DLLs that processes...
Author: curtismetz Date: 01/17/2011
New Mark's Blog post: Happy Holidays with a Festive Bluescreen of Death
Mark's Blog: Happy Holidays with a Festive Bluescreen of Death: Mark's latest blog post shows you...
Author: curtismetz Date: 12/16/2010