Vital
18.07.2008, 21:51
Sysinternals Suite
http://nash-forum.itaec.ru/gallery/displayimage.php?imageid=4747
Ìàðê Ðóññèíîâè÷, èçâåñòíûé òåõíè÷åñêèé ñïåöèàëèñò, â íàñòîÿùåå âðåìÿ óêðàøàþùèé ñîáîé êîðïîðàöèþ Microsoft, ïðîäîëæàåò ïîä êðûøåé ñîôòâåðíîãî ãèãàíòà ïðåäîñòàâëÿòü ñîîáùåñòâó ýíòóçèàñòîâ ñâîè áåñïëàòíûå è âåñüìà ïîëåçíûå óòèëèòû äëÿ äèàãíîñòèêè è ïî÷èíêè ñèñòåìû, ðàñøèðÿþùèå âàøè âîçìîæíîñòè è ïîâûøàþùèå óäîáñòâî ðàáîòû ñ êîìïüþòåðîì (â ïåðâóþ î÷åðåäü ýòî êàñàåòñÿ àäìèíèñòðèðîâàíèÿ).
The Sysinternals Troubleshooting Utilities have been rolled up into a single Suite of tools. This file contains the individual troubleshooting tools and help files. It does not contain non-troubleshooting tools like the BSOD Screen Saver or NotMyFault.
Íà ñåé ðàç íàøåìó âíèìàíèþ ïðåäëàãàåòñÿ íàáîð Sysinternals Suite, â êîòîðûé ñîáðàí öåëûé ðÿä ïîëåçíåéøèõ óòèëèò îò Ìàðêà Ðóññèíîâè÷à è åãî êîìàíäû:
• AccessChk v4.2 - July 16, 2008
This tool shows you the accesses the user or group you specify has to files, Registry keys or Windows services.
• AccessEnum v1.32 - November 1, 2006
This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions.
• AdExplorer v1.01 - November 5, 2007
Active Directory Explorer is an advanced Active Directory (AD) viewer and editor.
• AdInsight v1.01
An LDAP (Light-weight Directory Access Protocol) real-time monitoring tool aimed at troubleshooting Active Directory client applications.
• AdRestore v1.1 - November 1, 2006
Undelete Server 2003 Active Directory objects.
• Autologon v2.10 - November 1, 2006
Bypass password screen during logon.
• Autoruns v9.3 - July 16, 2008
See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings.
• BgInfo v4.13 - June 24, 2008
This fully-configurable program automatically generates desktop backgrounds that include important information about the system including IP addresses, computer name, network adapters, and more.
• CacheSet v1.0 - November 1, 2006
CacheSet is a program that allows you to control the Cache Manager's working set size using functions provided by NT. It's compatible with all versions of NT.
• ClockRes v1.0 - November 1, 2006
View the resolution of the system clock, which is also the maximum timer resolution.
• Contig v1.54 - March 21, 2007
Wish you could quickly defragment your frequently used files? Use Contig to optimize individual files, or to create new files that are contiguous.
• Ctrl2cap v2.0 - November 1, 2006
This is a kernel-mode driver that demonstrates keyboard input filtering just above the keyboard class driver in order to turn caps-locks into control keys. Filtering at this level allows conversion and hiding of keys before NT even "sees" them. Ctrl2cap also shows how to use NtDisplayString() to print messages to the initialization blue-screen.
• DebugView v4.74 - November 27, 2007
Another first from Sysinternals: This program intercepts calls made to DbgPrint by device drivers and OutputDebugString made by Win32 programs. It allows for viewing and recording of debug session output on your local machine or across the Internet without an active debugger.
• DiskExt v1.1 - May 14, 2007
Display volume disk-mappings.
• Diskmon v2.01 - November 1, 2006
DiskMon is an application that logs and displays all hard disk activity on a Windows system. You can also minimize DiskMon to your system tray where it acts as a disk light, presenting a green icon when there is disk-read activity and a red icon when there is disk-write activity.
• DiskView v2.21 - November 1, 2006
DiskView shows you a graphical map of your disk, allowing you to determine where a file is located or, by clicking on a cluster, seeing which file occupies it. Double-click to get more information about a file to which a cluster is allocated.
• Disk Uasge (DU) v1.31 - November 1, 2006
Du (disk usage) reports the disk space usage for the directory you specify. By default it recurses directories to show the total size of a directory and its subdirectories.
• EFSDump v1.02 - November 1, 2006
View information for encrypted files.
• Filemon v7.04 - November 1, 2006
This monitoring tool lets you see all file system activity in real-time.
• Handle v3.4 - May 28, 2008
This handy command-line utility will show you what files are open by which processes, and much more.
• Hex2dec v1.0 - November 1, 2006
Tired of running Calc everytime you want to convert a hexadecimal number to decimal Now you can convert hex to decimal and vice versa with this simple command-line utility.
• Junction v1.05 - July 24, 2007
Create Win2K NTFS symbolic links.
• LDMDump v1.02 - November 1, 2006
Dump the contents of the Logical Disk Manager's on-disk database, which describes the partitioning of Windows 2000 Dynamic disks.
• ListDLLs v2.25 - November 1, 2006
List all the DLLs that are currently loaded, including where they are loaded and their version numbers. Version 2.0 prints the full path names of loaded modules.
• LiveKd v3.0 - November 1, 2006
Use Microsoft kernel debuggers to examine a live system.
• LoadOrder v1.0 - November 1, 2006
See the order in which devices are loaded on your WinNT/2K system.
• LogonSessions v1.1 - November 1, 2006
If you think that when you logon to a system there's only one active logon session, this utility will surprise you. It lists the currently active logon sessions and, if you specify the -p option, the processes running in each session. LogonSessions works on Windows 2000 and higher.
• MoveFile v1.0 - November 1, 2006
Allows you to schedule move and delete commands for the next reboot.
• NewSID v4.10 - November 1, 2006
Learn about the computer SID problem everybody has been talking about and get a free computer SID changer, NewSID.
• NTFSInfo v1.0 - November 1, 2006
Use NTFSInfo to see detailed information about NTFS volumes, including the size and location of the Master File Table (MFT) and MFT-zone, as well as the sizes of the NTFS meta-data files.
• PageDefrag v2.32 - November 1, 2006
Defragment your paging files and Registry hives!
• PendMoves v1.1 - November 1, 2006
Enumerate the list of file rename and delete commands that will be executed the next boot.
• Portmon v3.02 - November 1, 2006
Monitor serial and parallel port activity with this advanced monitoring tool. It knows about all standard serial and parallel IOCTLs and even shows you a portion of the data being sent and received. Version 3.x has powerful new UI enhancements and advanced filtering capabilities.
• Process Explorer v11.20 - May 28, 2008
Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process.
• Process Monitor v1.35 - June 26, 2008
Monitor file system, Registry, process, thread and DLL activity in real-time.
• ProcFeatures v1.10 - November 1, 2006
This applet reports processor and Windows support for Physical Address Extensions and No Execute buffer overflow protection.
• PsExec v1.94 - January 4, 2008
Execute processes with limited-user rights.
• PsFile v1.02 - December 4, 2006
See what files are opened remotely.
• PsGetSid v1.43 - December 4, 2006
Displays the SID of a computer or a user.
• PsInfo v1.75 - July 9, 2007
Obtain information about a system.
•PsKill v1.12 - December 4, 2006
Terminate local or remote processes.
• PsList v1.28 - December 4, 2006
Show information about processes and threads.
• PsLoggedOn v1.33 - December 4, 2006
Show users logged on to a system.
• PsLogList v2.64 - December 4, 2006
Dump event log records.
• PsPasswd v1.22 - December 4, 2006
Changes account passwords.
• PsService v2.21 - January 11, 2008
View and control services.
• PsShutdown v2.52 - December 4, 2006
Shuts down and optionally reboots a computer.
• PsSuspend v1.06 - December 4, 2006
Suspend and resume processes.
• RegDelNull v1.10 - November 1, 2006
Scan for and delete Registry keys that contain embedded null-characters that are otherwise undeleteable by standard Registry-editing tools.
• RegHide v1.0
Creates a key called "HKEY_LOCAL_MACHINESoftwareSysinternalsCan't touch me!" using the Native API, and inside this key it creates a value.
• Regjump v1.01 - November 1, 2006
Jump to the registry path you specify in Regedit.
• Regmon v7.04 - November 1, 2006
This monitoring tool lets you see all Registry activity in real-time.
• RootkitRevealer v1.71 - November 1, 2006
Scan your system for rootkit-based malware.
• SDelete v1.51 - November 1, 2006
Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program.
• ShareEnum v1.6 - November 1, 2006
Scan file shares on your network and view their security settings to close security holes.
• ShellRunas v1.01 - February 28, 2008
The command-line Runas utility is handy for launching programs under different accounts, but it’s not convenient if you’re a heavy Explorer user. ShellRunas provides functionality similar to that of Runas to launch programs as a different user via a convenient shell context-menu entry.
ShellRunas works on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008
• Sigcheck v1.53 - May 28, 2008
Dump file version information and verify that images on your system are digitally signed.
• Streams v1.56 - April 27, 2007
Reveal NTFS alternate stream.
• Strings v2.40 - April 24, 2007
Search for ANSI and UNICODE strings in binaryimages.
• Sync v2.0 - November 1, 2006
Flush cached data to disk.
• TCPView v2.53 - January 11, 2008
Active socket command-line viewer.
• VolumeId v2.0 - November 1, 2006
Set Volume ID of FAT or NTFS drives.
• Whois v1.01 - November 1, 2006
See who owns an Internet address.
• Winobj v2.15 - November 1, 2006
The ultimate Object Manager namespace viewer is here.
• ZoomIt v2.10 - June 24, 2008
ZoomIt is screen zoom and annotation tool for technical presentations that include application demonstrations. ZoomIt runs unobtrusively in the tray and activates with customizable hotkeys to zoom in on an area of the screen, move around while zoomed, and draw on the zoomed image. I wrote ZoomIt to fit my specific needs and use it in all my presentations.
http://nash-forum.itaec.ru/gallery/displayimage.php?imageid=4747
Ìàðê Ðóññèíîâè÷, èçâåñòíûé òåõíè÷åñêèé ñïåöèàëèñò, â íàñòîÿùåå âðåìÿ óêðàøàþùèé ñîáîé êîðïîðàöèþ Microsoft, ïðîäîëæàåò ïîä êðûøåé ñîôòâåðíîãî ãèãàíòà ïðåäîñòàâëÿòü ñîîáùåñòâó ýíòóçèàñòîâ ñâîè áåñïëàòíûå è âåñüìà ïîëåçíûå óòèëèòû äëÿ äèàãíîñòèêè è ïî÷èíêè ñèñòåìû, ðàñøèðÿþùèå âàøè âîçìîæíîñòè è ïîâûøàþùèå óäîáñòâî ðàáîòû ñ êîìïüþòåðîì (â ïåðâóþ î÷åðåäü ýòî êàñàåòñÿ àäìèíèñòðèðîâàíèÿ).
The Sysinternals Troubleshooting Utilities have been rolled up into a single Suite of tools. This file contains the individual troubleshooting tools and help files. It does not contain non-troubleshooting tools like the BSOD Screen Saver or NotMyFault.
Íà ñåé ðàç íàøåìó âíèìàíèþ ïðåäëàãàåòñÿ íàáîð Sysinternals Suite, â êîòîðûé ñîáðàí öåëûé ðÿä ïîëåçíåéøèõ óòèëèò îò Ìàðêà Ðóññèíîâè÷à è åãî êîìàíäû:
• AccessChk v4.2 - July 16, 2008
This tool shows you the accesses the user or group you specify has to files, Registry keys or Windows services.
• AccessEnum v1.32 - November 1, 2006
This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions.
• AdExplorer v1.01 - November 5, 2007
Active Directory Explorer is an advanced Active Directory (AD) viewer and editor.
• AdInsight v1.01
An LDAP (Light-weight Directory Access Protocol) real-time monitoring tool aimed at troubleshooting Active Directory client applications.
• AdRestore v1.1 - November 1, 2006
Undelete Server 2003 Active Directory objects.
• Autologon v2.10 - November 1, 2006
Bypass password screen during logon.
• Autoruns v9.3 - July 16, 2008
See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings.
• BgInfo v4.13 - June 24, 2008
This fully-configurable program automatically generates desktop backgrounds that include important information about the system including IP addresses, computer name, network adapters, and more.
• CacheSet v1.0 - November 1, 2006
CacheSet is a program that allows you to control the Cache Manager's working set size using functions provided by NT. It's compatible with all versions of NT.
• ClockRes v1.0 - November 1, 2006
View the resolution of the system clock, which is also the maximum timer resolution.
• Contig v1.54 - March 21, 2007
Wish you could quickly defragment your frequently used files? Use Contig to optimize individual files, or to create new files that are contiguous.
• Ctrl2cap v2.0 - November 1, 2006
This is a kernel-mode driver that demonstrates keyboard input filtering just above the keyboard class driver in order to turn caps-locks into control keys. Filtering at this level allows conversion and hiding of keys before NT even "sees" them. Ctrl2cap also shows how to use NtDisplayString() to print messages to the initialization blue-screen.
• DebugView v4.74 - November 27, 2007
Another first from Sysinternals: This program intercepts calls made to DbgPrint by device drivers and OutputDebugString made by Win32 programs. It allows for viewing and recording of debug session output on your local machine or across the Internet without an active debugger.
• DiskExt v1.1 - May 14, 2007
Display volume disk-mappings.
• Diskmon v2.01 - November 1, 2006
DiskMon is an application that logs and displays all hard disk activity on a Windows system. You can also minimize DiskMon to your system tray where it acts as a disk light, presenting a green icon when there is disk-read activity and a red icon when there is disk-write activity.
• DiskView v2.21 - November 1, 2006
DiskView shows you a graphical map of your disk, allowing you to determine where a file is located or, by clicking on a cluster, seeing which file occupies it. Double-click to get more information about a file to which a cluster is allocated.
• Disk Uasge (DU) v1.31 - November 1, 2006
Du (disk usage) reports the disk space usage for the directory you specify. By default it recurses directories to show the total size of a directory and its subdirectories.
• EFSDump v1.02 - November 1, 2006
View information for encrypted files.
• Filemon v7.04 - November 1, 2006
This monitoring tool lets you see all file system activity in real-time.
• Handle v3.4 - May 28, 2008
This handy command-line utility will show you what files are open by which processes, and much more.
• Hex2dec v1.0 - November 1, 2006
Tired of running Calc everytime you want to convert a hexadecimal number to decimal Now you can convert hex to decimal and vice versa with this simple command-line utility.
• Junction v1.05 - July 24, 2007
Create Win2K NTFS symbolic links.
• LDMDump v1.02 - November 1, 2006
Dump the contents of the Logical Disk Manager's on-disk database, which describes the partitioning of Windows 2000 Dynamic disks.
• ListDLLs v2.25 - November 1, 2006
List all the DLLs that are currently loaded, including where they are loaded and their version numbers. Version 2.0 prints the full path names of loaded modules.
• LiveKd v3.0 - November 1, 2006
Use Microsoft kernel debuggers to examine a live system.
• LoadOrder v1.0 - November 1, 2006
See the order in which devices are loaded on your WinNT/2K system.
• LogonSessions v1.1 - November 1, 2006
If you think that when you logon to a system there's only one active logon session, this utility will surprise you. It lists the currently active logon sessions and, if you specify the -p option, the processes running in each session. LogonSessions works on Windows 2000 and higher.
• MoveFile v1.0 - November 1, 2006
Allows you to schedule move and delete commands for the next reboot.
• NewSID v4.10 - November 1, 2006
Learn about the computer SID problem everybody has been talking about and get a free computer SID changer, NewSID.
• NTFSInfo v1.0 - November 1, 2006
Use NTFSInfo to see detailed information about NTFS volumes, including the size and location of the Master File Table (MFT) and MFT-zone, as well as the sizes of the NTFS meta-data files.
• PageDefrag v2.32 - November 1, 2006
Defragment your paging files and Registry hives!
• PendMoves v1.1 - November 1, 2006
Enumerate the list of file rename and delete commands that will be executed the next boot.
• Portmon v3.02 - November 1, 2006
Monitor serial and parallel port activity with this advanced monitoring tool. It knows about all standard serial and parallel IOCTLs and even shows you a portion of the data being sent and received. Version 3.x has powerful new UI enhancements and advanced filtering capabilities.
• Process Explorer v11.20 - May 28, 2008
Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process.
• Process Monitor v1.35 - June 26, 2008
Monitor file system, Registry, process, thread and DLL activity in real-time.
• ProcFeatures v1.10 - November 1, 2006
This applet reports processor and Windows support for Physical Address Extensions and No Execute buffer overflow protection.
• PsExec v1.94 - January 4, 2008
Execute processes with limited-user rights.
• PsFile v1.02 - December 4, 2006
See what files are opened remotely.
• PsGetSid v1.43 - December 4, 2006
Displays the SID of a computer or a user.
• PsInfo v1.75 - July 9, 2007
Obtain information about a system.
•PsKill v1.12 - December 4, 2006
Terminate local or remote processes.
• PsList v1.28 - December 4, 2006
Show information about processes and threads.
• PsLoggedOn v1.33 - December 4, 2006
Show users logged on to a system.
• PsLogList v2.64 - December 4, 2006
Dump event log records.
• PsPasswd v1.22 - December 4, 2006
Changes account passwords.
• PsService v2.21 - January 11, 2008
View and control services.
• PsShutdown v2.52 - December 4, 2006
Shuts down and optionally reboots a computer.
• PsSuspend v1.06 - December 4, 2006
Suspend and resume processes.
• RegDelNull v1.10 - November 1, 2006
Scan for and delete Registry keys that contain embedded null-characters that are otherwise undeleteable by standard Registry-editing tools.
• RegHide v1.0
Creates a key called "HKEY_LOCAL_MACHINESoftwareSysinternalsCan't touch me!" using the Native API, and inside this key it creates a value.
• Regjump v1.01 - November 1, 2006
Jump to the registry path you specify in Regedit.
• Regmon v7.04 - November 1, 2006
This monitoring tool lets you see all Registry activity in real-time.
• RootkitRevealer v1.71 - November 1, 2006
Scan your system for rootkit-based malware.
• SDelete v1.51 - November 1, 2006
Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program.
• ShareEnum v1.6 - November 1, 2006
Scan file shares on your network and view their security settings to close security holes.
• ShellRunas v1.01 - February 28, 2008
The command-line Runas utility is handy for launching programs under different accounts, but it’s not convenient if you’re a heavy Explorer user. ShellRunas provides functionality similar to that of Runas to launch programs as a different user via a convenient shell context-menu entry.
ShellRunas works on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008
• Sigcheck v1.53 - May 28, 2008
Dump file version information and verify that images on your system are digitally signed.
• Streams v1.56 - April 27, 2007
Reveal NTFS alternate stream.
• Strings v2.40 - April 24, 2007
Search for ANSI and UNICODE strings in binaryimages.
• Sync v2.0 - November 1, 2006
Flush cached data to disk.
• TCPView v2.53 - January 11, 2008
Active socket command-line viewer.
• VolumeId v2.0 - November 1, 2006
Set Volume ID of FAT or NTFS drives.
• Whois v1.01 - November 1, 2006
See who owns an Internet address.
• Winobj v2.15 - November 1, 2006
The ultimate Object Manager namespace viewer is here.
• ZoomIt v2.10 - June 24, 2008
ZoomIt is screen zoom and annotation tool for technical presentations that include application demonstrations. ZoomIt runs unobtrusively in the tray and activates with customizable hotkeys to zoom in on an area of the screen, move around while zoomed, and draw on the zoomed image. I wrote ZoomIt to fit my specific needs and use it in all my presentations.