Process Monitor (v1.01) and Web Site Updates

EULA is weird - what technical limits?

db — Fri, 10 Nov 2006 06:54:34 GMT

ok - normally I'm not paranoid but now that the source code has been hidden by Microsoft I have to wonder what is behind this term in the EULA

>You may not:

>* work around any technical limitations in the

>binary versions of the software

Kudos to anyone who proves whether or not process monitor is written to NOT report certain processes. Before the Sony rootkit I would have scoffed at suggestions of any legit company doing this. But now ... well what technical limitations could they be talking about with freely released software?

Yes - proving a negative is hard. But I have yet to gauge the extent to which Mark has sold out. The source code issue troubles me greatly.

re: Process Montor (v1.01) and Web Site Updates

Martin — Fri, 10 Nov 2006 10:14:06 GMT

Yes: I'd appreciate too the sourcecode to be made available again

BR,

Martin

re: Process Montor (v1.01) and Web Site Updates

sebutzu — Fri, 10 Nov 2006 11:51:06 GMT

Me too!

Loved the source code.

And still love it!

So please, Microsoft, let Mark publish the source code.

It's heaven for developers, and you WANT more experienced developers for the windows platform, don't you?

re: Process Montor (v1.01) and Web Site Updates

sebutzu — Fri, 10 Nov 2006 11:54:43 GMT

And one more thing...

If would be quite NICE to have Network monitoring included too in this MORE THAN NICE tool!

Once again Congratulations for this WONDERFUL JOB!

re: Process Montor (v1.01) and Web Site Updates

Alain — Fri, 10 Nov 2006 15:45:51 GMT

Is there some mirror of the old programms/source before the purchase by microsoft?

Thanks

re: Process Montor (v1.01) and Web Site Updates

Gary Rowe — Fri, 10 Nov 2006 21:00:03 GMT

Great program! But I tried to exclude a process from logging (only file mon active) when a lot was happening... Basically, Process Mon took over 2GB of my 1GB ram, and the system slowed to a standstill as the last 4mb of ram was fought over by the other processes via the swap file :-( ... Could you rein in its memory desires when adding exclusions/whatever to the filter?

re: Process Montor (v1.01) and Web Site Updates

ottoh — Fri, 10 Nov 2006 22:30:36 GMT

Thanks Gary. Would you repost your finding in the forum? http://forum.sysinternals.com/

re: Process Montor (v1.01) and Web Site Updates

ottoh — Sat, 11 Nov 2006 00:03:06 GMT

Hello Martin and Sebutzu,

Regarding the source code. Is there a particular piece of source code you're most interested in? In other words, if I can deliver some but not all, which would you like to see first?

Thanks for the site feedback as well.

re: Process Montor (v1.01) and Web Site Updates

soma — Sun, 12 Nov 2006 07:24:30 GMT

So a few questions:

1. So are these utilities essentially the same version as were previously on the pre-Microsoft Sysinternals site? With the exception of Process Monitor, which is obviously new.

2. I would like to see a version history of what has changed for the various utilities.

3. Will Mark and Bryce be joined by others to maintain and create utilities going forward?

I am specifically interested in BGInfo, among others. This has issues with CPU detection and identification of operating systems.

re: Process Montor (v1.01) and Web Site Updates

Aaron — Sun, 12 Nov 2006 17:11:28 GMT

Changing the subject. I was wondering if Microsoft will eventually include certain Sysinterals products with Windows. MS might do good to distribute at least Process Explorer and Autoruns along with Vista or a future operating system.

Before I stumbled across Sysinternals, I had no reliable method for troubleshooting my Windows system and removing malware. Tools like Process Explorer and Autoruns have saved me countless times.

Source Code and Blog Archive

DaveK — Sun, 12 Nov 2006 18:03:18 GMT

1. For goodness sake, just release the sources under some kind of abandonware license. Put a big disclaimer on it, declare it end of life and unsupported, throw it out there to the community, and wash your hands of it. This completely solves your resourcing and support problems.

2. The 'it could help malware authors' argument is nonsense, not just because (as others have pointed out) all the knowledge is out there already anyway, but because the MAIN ITEM THAT WOULD BE OF USE TO MALWARE AUTHORS IS THE ONE AND ONLY PIECE OF SYSINTERNALS SOURCE THAT YOU **ARE** STILL DISTRIBUTING!

<sigh> I guess everone has to go and rush to download ctrl2cap before you pull it now. You'd probably better pull the DDK/WDK/WDF as well. That's completely evil too.

3. The archive postings of all the sysinternals newsletters are messed up. There's nothing there but the headers.

re: Process Montor (v1.01) and Web Site Updates

Morten — Sun, 12 Nov 2006 19:28:03 GMT

BTW: Does Process Monitor mean that the development of regmnon and filmon will be ceased?

(No problems with that...)

re: Process Montor (v1.01) and Web Site Updates

ottoh — Mon, 13 Nov 2006 19:24:10 GMT

Answers to many questions:

1. Q: So are these utilities essentially the same version as were previously on the pre-Microsoft Sysinternals site?

A: Correct. There were some other minor updates that were also mentioned in the site migration post on the blog. Updated tools will be mentioned here.

2. I would like to see a version history of what has changed for the various utilities.

A: Noted.

3. Q: Will Mark and Bryce be joined by others to maintain and create utilities going forward?

A: Hopefully. We don't have a concrete plan in place but I invision some sort of community based effort for updating and posting new tools and utilities.

4. Q: I was wondering if Microsoft will eventually include certain Sysinterals products with Windows?

A: Possibly. Don't know for sure yet.

5. Q: Does Process Monitor mean that the development of regmnon and filmon will be ceased?

A: Yes, most likely.

6. The archive postings of all the sysinternals newsletters are messed up.

A: Actually it's the way archive blogs are displayed. The title is a link to the entire newsletter. We're going to see if that can be fixed.

re: Process Montor (v1.01) and Web Site Updates

Brian — Tue, 14 Nov 2006 16:24:22 GMT

FYI process monitor has a bug on W2K/XP where it takes 99% cpu for several minutes. CSwitch delta is in the millions..

It happened when it was replacing taskman (although that may not be the reason)

re: Process Montor (v1.01) and Web Site Updates

Brian — Tue, 14 Nov 2006 16:26:56 GMT

Pardon.. i mean process explorer. (sorry didn't notice this was about process monitor

Source code still missing

Jeff Cross — Wed, 15 Nov 2006 13:03:05 GMT

When the Sysinternals acquisition was announced, the boards were full of conspiracy theories of how Microsoft just wanted to censor Sysinternals and hide everything they found embarrassing (even information which is critical for us users). I actually defended MS, and for that I now feel like an idiot. In removing the source code (and several of the tools), MS did exactly what the conspiracy theorists predicted. You can put the source code back up (and I hope you do), but neither MS nor the new Sysinternals can ever regain my trust. I hope Mark and Bryce at least made a pretty penny when they sold out.

re: Process Montor (v1.01) and Web Site Updates

KLC — Wed, 15 Nov 2006 15:49:59 GMT

OK SO HERE'S THE SCOOP!

THEY HAVE NOW HEARD HOW WE ALL FEEL ABOUT THE SOURCE CODE.

DO THEY CARE ? NO

DO WE, MOSTLY DEVELOPERS AND IT FOLKS, REALLY MATTER TO THEM? NO

WILL THEY SCREW THEIR BEST SOURCE OF PROLIFERATION? YES

WERE ALL THESE COMMENTS POINTLESS? YES

DID THESE COMMENTS FALL ON DEAF EARS? YES

HAVE YOU NOW CREATED MORE ANIMOSITY BY ONE'S YOU NEED THE MOST? YES

DID YOU LIE? ABSOLUTELY

JUST WAIT AND SEE.

REMEMBER "THE BOY WHO CRIED WOLF"

ONE DAY YOU'LL REALLY NEED US!

re: Process Montor (v1.01) and Web Site Updates

Aaron — Thu, 16 Nov 2006 15:36:20 GMT

I don't see how the removal of the source code verifies a "conspiracy" to censure things.

Microsoft has still left the articles that discuss undocumented features in Windows hasn't it? How is that a step toward "censuring" things?

It's not fun that the source code is gone. Microsoft would do good to release the source code for simpler tools, in my opinion. However, I don't blame MS for holding back some code. I don't give out my source code for large programs. I only release smaller programs.

As to Microsoft buying Sysinternals for the SOLE PURPOSE of removing the source code, that would be a pretty dumb reason to purchase a whole company. Rather, my guess would be that they liked the tools that sysinternals/winternals created. Heck, if I was MS, I would have hired Mark long before they did!

Virus in SysintanalsSuite?

Igor — Fri, 17 Nov 2006 05:38:51 GMT

When I try to download SysintenalsSuite.zip McAfee AntiVirus complains that it contains "Joke-Bluescreen.c" virus/trojan.

re: Process Montor (v1.01) and Web Site Updates

annoynimous — Fri, 17 Nov 2006 09:39:11 GMT

> Hover menus don’t work for FireFox so a Utilities Index page needs to be created

...so just take he ready menus at www.cross-browser.com and use them.

PS: i agree that removing sources for tools like PsTools and Handle is in almost the same as removing MSDN from intenernet, just by much less scale (yet?).

re: Process Montor (v1.01) and Web Site Updates

Aaron — Fri, 17 Nov 2006 17:19:26 GMT

Replying to Igor.

That is so funny (in my opinion) that Mark's prank program has been added to the database of joke programs in McAfee. Obviously, people out there have been having some fun with it.

But really, adding it to the malware database is a bit extreme. However, I can see that it could get annoying if people abused it.

re: Process Montor (v1.01) and Web Site Updates

Nicholas — Sat, 18 Nov 2006 10:36:32 GMT

Pretty please with a cherry on top, could you please archive the NT4/9x/dos utilities? Some of us still have to work with those operating systems. Also, why won't Microsoft just cave and provide full documentation for all exported symbols? I mean people have pretty much figured them out.

re: Process Montor (v1.01) and Web Site Updates

gubbagooy — Sat, 18 Nov 2006 17:20:39 GMT

Why does everything microsoft buys get so screwed up? First it was Visio, now sysinternals.

Hide the source code.

Hide everything

Take over the world.

Worthless sellouts.

re: Process Montor (v1.01) and Web Site Updates

bc — Wed, 22 Nov 2006 19:07:07 GMT

Just typical! Hiding the source code just shows you how paranoid M$ really is. I think they are just scared to show the world how good they are at screwing up perfectly good code. Keep it up, M$, it'll be your eventual downfall!!

re: Process Montor (v1.01) and Web Site Updates

José Moya — Thu, 23 Nov 2006 16:51:34 GMT

Hi!

After scheduling psshutdown at 2:00 a.m. and realizing my computer was still turned on when I woke up at 8:00 a.m., I discovered there was a "license agreement" dialog open for the (non-interactive) Admin user (yes, I scheduled it to run as Admin).

How can I use a batch utility if I have to check the license agreement every time I use it? I preferred pre-Microsoft version, without these dialogs. Maybe it could work like expiration warning in old antiviruses: display a timed message followed by "Use command -X to by pass this message"

re: Process Montor (v1.01) and Web Site Updates

Miguel — Thu, 30 Nov 2006 19:24:12 GMT

Hi,

I like a lot the new look an functionality of process monitor, and having file and reg monitoring together, however, it is SO MUCH SLOWER than FileMonitor that, for a certaint task, I had to redownload FileMonitor.

re: Process Montor (v1.01) and Web Site Updates

Guti — Sat, 02 Dec 2006 02:02:10 GMT

Really love Process Explorer and Autoruns.

Good job Mark.

re: Answers to many questions:

K.C. — Sat, 02 Dec 2006 17:23:13 GMT

You answered the other questions and skipped the question on source code.

WHY?

,Cheap pills

Tue, 06 Mar 2007 05:09:43 GMT

Unknown

Unknown — Sun, 11 Mar 2007 06:57:34 GMT

<a href='http://films.eoe1o.info/download-film-galitsin.html'>download film galitsin</a>

Unknown

Unknown — Tue, 13 Mar 2007 04:06:30 GMT

re: Process Monitor (v1.01) and Web Site Updates

... — Wed, 14 Mar 2007 23:52:03 GMT

Du musst ein Fachmann sein - wirklich guter Aufstellungsort, den du hast!

re: Process Monitor (v1.01) and Web Site Updates

... — Fri, 16 Mar 2007 23:22:41 GMT

pagine piuttosto informative, piacevoli =)

re: Process Monitor (v1.01) and Web Site Updates

... — Tue, 20 Mar 2007 05:46:39 GMT

Great site! Good luck to it's owner!

Unknown

Unknown — Tue, 20 Mar 2007 06:53:17 GMT

<a href="http://dvdfilms.jedo.info/documentaire-downloaden-film.html">documentaire downloaden film</a>

Unknown

Unknown — Tue, 20 Mar 2007 22:04:23 GMT

<a href='http://internettv.btewu.info/direct-internet-tv.html'>direct internet tv</a>

Unknown

Unknown — Tue, 20 Mar 2007 22:04:27 GMT

<a href='http://internettv.btewu.info/by-internet-tv.html'>by internet tv</a>

Web Site

Hospedagem — Mon, 26 Mar 2007 21:30:37 GMT

See who owns an Internet address.

TKS

Hospedagem

re: Process Monitor (v1.01) and Web Site Updates

... — Wed, 11 Apr 2007 08:01:25 GMT

Luogo molto buon:) Buona fortuna!

re: Process Monitor (v1.01) and Web Site Updates

... — Wed, 11 Apr 2007 14:49:42 GMT

Ich erklare meinen Freunden uber diese Seite. Interessieren!

re: Process Monitor (v1.01) and Web Site Updates

... — Fri, 13 Apr 2007 17:09:43 GMT

9 su 10! Ottenerlo! Siete buoni!

Little Known Ways to Save Your Money

ZetMaster — Mon, 16 Apr 2007 02:12:16 GMT

Hi!

We offer best prices for OEM Software. Hurry up, it's limited!

[URL=http://oem-software.myzips.org/info-Adobe_Acrobat_6_professional.html]Autodesk VIZ 2006[/URL]

Check our prices and blow your mind!

Thanks

re: Process Monitor (v1.01) and Web Site Updates

... — Mon, 16 Apr 2007 12:15:25 GMT

E grande io ha trovato il vostro luogo! Le info importanti ottenute! ))

HOSPEDAGEM DE SITES

Hospedagem — Sun, 22 Apr 2007 08:47:51 GMT

Before I stumbled across Sysinternals, I had no reliable method for troubleshooting my Windows system and removing malware. Tools like Process Explorer and Autoruns have saved me countless times.

http://www.weblocal.com.br

re: Process Monitor (v1.01) and Web Site Updates

Jony — Sun, 22 Apr 2007 08:54:33 GMT

If would be quite NICE to have Network monitoring included too in this MORE THAN NICE tool!

Once again Congratulations for this WONDERFUL JOB!