See all products »
Curah! curation service
Microsoft Tech Companion App
Microsoft Technical Communities
Microsoft Virtual Academy
Server and Tools Blogs
TechNet Flash Newsletter
Cloud and Datacenter
Windows Server 2012 R2
System Center 2012 R2
Microsoft SQL Server 2012 SP1
Windows 8.1 Enterprise
See all trials »
Microsoft Download Center
TechNet Evaluation Center
Microsoft Virtual Academy
Free Windows Server 2012 courses
Free Windows 8 courses
SQL Server training
MCSA: Windows 8
Windows Server Certification (MCSE)
Private Cloud Certification (MCSE)
SQL Server Certification (MCSE)
Second shot for certification
Born To Learn blog
Find technical communities in your area
For small and midsize businesses
For IT professionals
For technical support
For home users
Microsoft Premier Online
Microsoft Fix It Center
Security Bulletins & Advisories
International support solutions
Log a support ticket
Not an IT pro?
Microsoft Customer Support
Microsoft Community Forums
Sysinternals Site Discussion
mark Russinovich live
sysinternals administrator's reference
TechEd North America
Zero Day Malware Cleaning
Browse by Tags
Sysinternals Site Discussion
Updates: Autoruns v9.32
Autoruns v9.32: This fixes a 32-bit parsing bug introduced in the v9.31 update.
25 Jul 2008
Updates: ZoomIt v2.10, Process Monitor v1.34, BgInfo v4.13
ZoomIt v2.10: Includes a zoom-out effect when you exit zoom mode and enables you to specify a background bitmap for the break timer. Process Monitor v1.34: This update adds the ability to filter on result values. BgInfo v4.13: Now displays correct version information for Windows Server 2008.
24 Jun 2008
Updates: Autoruns v9.41
Autoruns v9.41: This release fixes a bug with the hide-Microsoft images options when the signature verification option is enabled.
7 Apr 2009
Updates: Autoruns v11.34, ProcDump v5.0, Sigcheck v1.8, VMMap v3.11
Autoruns v11.34 : This release of Autoruns fixes a bug that caused it to not show some Internet Explorer extensions. ProcDump v5.0 : Procdump is an advanced utility for capturing process memory dumps based on a variety of triggers including CPU usage, memory usage, performance counter values, and...
12 Sep 2012
Updates: Process Explorer v11.20, ZoomIt v2.0, Sigcheck v1.53, Handle v3.4 and introducing Sysinternals Live beta.
Sysinternals Live: We're excited to announce the beta of Sysinternals Live, a service that enables you to execute Sysinternals tools directly from the Web without hunting for and manually downloading them. Simply enter a tool's Sysinternals Live path into Windows Explorer or a command prompt as \\live...
28 May 2008
Updates: Process Monitor v1.37, Handle v3.41, Process Explorer v11.21, DebugView 4.75 | Mark's Events: Keynote speaker at Virtualization Congress
Process Monitor v1.37: Process Monitor, a system monitoring utility, now prevents you from inadvertently closing the filter dialog without saving edits and fixes a subtle race condition bug in the driver. Handle v3.41: Handle, a command-line tool for dumping information on open operating system handles...
8 Aug 2008
Updates: Autoruns v9.3, AccessChk v4.2
Autoruns v9.3: This Autoruns update adds support for several additional shell extension points, including copy hook, property sheet, and drag and drop handlers, fixes a bug in the Vista gadget parsing code and better handles malformed paths. AccessChk v4.2: This update reports non-canonical security...
16 Jul 2008
Updates: Autoruns v9.2, Process Monitor v1.33, AccessChk v4.1
Autoruns v9.2: In order to better support assisted troubleshooting, Autoruns - an autostart analyzer - now exports and imports scan results to enable viewing results on other systems, adds support for enabling and deleting Winsock notification DLLs, and fixes a number of 64-bit Windows issues. Process...
12 May 2008
Updates: ProcDump v4.0, Process Monitor v2.96, Process Explorer v15.02, Mark’s Blog: The Case of the Hung Game Launcher, and Zero Day Malware Cleaning with the Sysinternals Tools
ProcDump v4.0 : This update for ProcDump, a trigger-based process dump capture utility, enables you to control the contents of the dump with your own minidump callback DLL and adds a new switch, -w, that has ProcDump wait for a specified process to start. Process Monitor v2.96 : This release changes...
17 Aug 2011
Updates: Autoruns v9.34
Autoruns v9.34: This update fixes a bug that caused Autoruns to exit immediately after finishing a scan when passed the accepteula command line argument.
29 Aug 2008
Updates: AdExplorer v1.44, Contig v1.7, Coreinfo v3.2, Procdump v5.1
AdExplorer v1.44 : This release fixes a bug that caused AdExplorer to crash when it encountered corrupted extended rights schemas. Contig v1.7 : Contig is a command-line file defragmentation and fragmentation analysis utility. v1.7 has more detailed fragmentation analysis reporting, fixes a bug that...
16 Nov 2012
Updates: Coreinfo v3, DebugView v4.77, SDelete v1.6, and Process Explorer v15.04
Coreinfo v3 : Coreinfo is a command-line utility that reports detailed information about processor cores and topology, including cache sizes, core-to-socket mappings and NUMA memory latencies. It now shows the processor features supported by the system’s processors. For example, Coreinfo will show...
2 Sep 2011
Updates: release of The Windows Sysinternals Administrator's Reference, Process Explorer v15, Listdlls v3.1, new utility Findlinks v1, and Mark to Speak at Black Hat US 2011
The Windows Sysinternals Administrator's Reference : We are excited and proud to announce the release of the official Sysinternals book, The Windows Sysinternals Administrator's Reference, from Microsoft Press. Written by Sysinternals founder and tool author Mark Russinovich, and Windows expert Aaron...
18 Jul 2011
Updates: Autoruns v9.21
Autoruns v9.21: This corrects the version number in the about box.
14 May 2008
New Tool: Coreinfo v1.0; A new blog post from Mark - Where in the world is Mark Russinovich?
Coreinfo v1.0: This is a new command-line utility that shows you the mapping between logical processors and the physical processor, NUMA node, and socket on which they reside, as well as the cache's assigned to each logical processor. Mark's Blog: Where in the world is Mark Russinovich? - Check out...
12 Sep 2008
Updates: Autoruns v9.35, Process Monitor v2.01, DebugView v4.76, AccessChk v4.21
Autoruns v9.35: This Autoruns update adds additional autostart locations, including lsastart, s0initialization, savedumpstart, and servicecontrollerstart, and fixes serveral bugs. Process Monitor v2.01: This release fixes several bugs, including compatibility with Windows 2000, excessive exit delays...
17 Oct 2008
Updates: Process Explorer v15.2, Testlimit v5.21, Pskill v1.14
Process Explorer v15.2 : This major update to Process Explorer, a Task Manager replacement, merges Autoruns functionality by adding a new Autostart Location column and property to the process and DLL views that indicates where an image is configured to automatically start or load. It also adds .NET stack...
7 Jun 2012
Mark's Webcasts: Windows Security Boundries
Windows Security Boundries : Mark’s session from TechEd US on what constitutes a security boundary is now available for on-demand viewing. Get the real story on Windows security-related features like Kernel Patch Protection (KPP), Kernel Mode Code Integrity, User sessions, UAC, Protected Mode IE, and...
30 Jul 2008
Sysinternals wishes Channel 9 a Happy Birthday!
Channel 9, Microsoft’s direct connection to developers, turned five a few days ago. Mark frequently gives interviews on Channel 9, including his latest on Windows 7 kernel changes , which is Channel 9’s most viewed interview of all time at 550,000 views. Mark was one of the Niners to give Channel 9 a...
8 Apr 2009
Updates: Process Explorer v15.01 and TCPView v3.05
Process Explorer v15.01 : This update adds the ability to select a custom graph background color, adds paged and nonpaged pool quota columns to the process view, fixes incorrect information on the disk and network process properties dialog on 32-bit Windows, and fixes a GPU tray icon bug. TCPView...
25 Jul 2011
Updates: Autoruns v11.32, Process Explorer v15.21, Process Monitor v3.02, PSKill v1.15, RAMMap v1.2
Autoruns v11.32 : This update fixes a bug that prevented Autoruns from correctly elevating when the Run as Administrator option is selected. Process Explorer v15.21 : This update fixes a bug related to the autostart functionality introduced in v15.2, a tooltip display bug, and a bug that prevented...
28 Jun 2012
Updates: Process Monitor v1.35
Process Monitor v1.35: This fixes a bug introduced in v1.34 that prevented Process Monitor's driver from loading on Windows 2000.
26 Jun 2008
Updates: Process Explorer v11.12, Process Monitor v1.30, Handle v3.31, and a new blog post from Mark
Process Explorer v11.12: This update includes a number of minor enhancements and bug fixes, including support for tracking commit and non-paged pool limits. Process Monitor v1.30: This major update adds support for importing and exporting filters, records system information in log files, presents...
8 Apr 2008
Updates: Process Monitor v2.03, Autoruns v9.36, Disk Usage v1.33, Process Explorer v11.31
Process Monitor v2.03: This update to Process Monitor, a real-time file, registry, process and network monitor, adds the ability to import and export configuration settings, shows an icon in the operations column depicting the event class of the operation, and fixes a symbol configuration bug on Windows...
11 Dec 2008
New Tool: ProcDump v1.0 | Updates: Autoruns v9.51, VMMap v2.1, PsExec v1.96 | Book released: Windows Internals 5th Edition Released!| Webcast: Case of the Unexplained 2009
Windows Internals 5th Edition Released! The 5 th Edition of Windows Internals , the official book on the architecture and internals of the Windows operating system, is now available. This release is 25% larger than the 4 th Edition and is updated to cover Windows Vista and Windows Server 2008. Visit...
1 Jul 2009
© 2015 Microsoft Corporation.
Privacy & Cookies