Last Updated January 29, 2001
 
 
CPUMon v2.0 Use this advanced tool to read the performance counters of Pentium, Pentium Pro and Pentium II processors. Not for the faint of heart, CPUMon is intended for those with a good familiarity of processor architecture. Version 2.0 is integrated with Perfmon.


 
 
DebugView v4.05 Another first from Sysinternals: This program intercepts calls made to DbgPrint by device drivers and OutputDebugString made by Win32 programs. It allows for viewing and recording of debug session output on your local machine or across the Internet without an active debugger.

 
Diskmon v1.1 This utility captures all hard disk activity or acts like a software disk activity light in your system tray.

 
Filemon v4.33 This monitoring tool lets you see all file system activity in real-time. It works on all versions of WinNT/2K as well as Windows 9x/Me and full source is included.

 
Handle v1.32 This handy command-line utility will show you what files are open by which processes, and much more.

 
HandleEx v3.1 Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process.

 
ListDLLs v2.23 List all the DLLs that are currently loaded, including where they are loaded and their version numbers. Version 2.0 prints the full path names of loaded modules.

 
NTFSInfo v1.0 Use NTFSInfo to see detailed information about NTFS volumes, including the size and location of the Master File Table (MFT) and MFT-zone, as well as the sizes of the NTFS meta-data files.

 
PMon v1.0 This is an NT Gui/device driver program that watches process and thread creation and deletion, as well as context swaps if running on a multiprocessing or checked kernel.

 
Portmon v3.02 Monitor serial and parallel port activity with this advanced monitoring tool. It knows about all standard serial and parallel IOCTLs and even shows you a portion of the data being sent and received. Version 3.x has powerful new UI enhancements and advanced filtering capabilities.

 
PsTools v1.2 The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, rebooting computers, dumping event logs, and more.

 
Regmon v4.32 This monitoring tool lets you see all Registry activity in real-time. It works on all versions of WinNT/2K as well as Windows 9x/Me and full source is included.

 
TCPView v1.11 See all open TCP and UDP endpoints. Full source to the command-line version of this tool, netstatp, is included.

 
TDImon v1.01 See TCP and UDP activity in real-time with this advanced network API monitoring tool.

 
Tokenmon v1.01 Watch security-related activity, including logon, logoff, privilege usage, and impersonation with this monitoring tool. Full source code included.

 
Winobj v2.13 The ultimate Object Manager namespace viewer is here. Version 2.0 has significant UI enhancements, knows about more object types, and is integrated with NT's native security editors.

 
 
CacheSet v1.0 CacheSet is a program that allows you to control the Cache Manager's working set size using functions provided by NT. It's compatible with all versions of NT and full source code is provided.

 
Contig v1.31 Wish you could quickly defragment your frequently used files? Use Contig to optimize individual files, or to create new files that are contiguous.

 
Frob v1.6a NT doesn't allow access to internal performance settings like execution quanta, which have different values on Workstation and Server. Here's an applet that will let you "frob" the foreground and background quanta on a system for experimentation, or for your liking. This update works on NT 4.0 SP 6a.

 
PageDefrag v2.01 Defragment your paging files and Registry hives!

 
 
BgInfo v1.1 This fully-configurable program automatically generates desktop backgrounds that include important information about the system including IP addresses, computer name, network adapters, and more.

 
BlueSave v1.0 Wish Windows NT would save that Blue Screen of Death (BSOD) you just got so that you wouldn't have to manually copy it down to send to your administrator or a developer? This powerful utility will automatically save Windows NT's Blue Screen crash screens as text files that you can view, print, or e-mail!

 
Ctrl2cap v2.0 This is a kernel-mode driver that demonstrates keyboard input filtering just above the keyboard class driver in order to turn caps-locks into control keys. Filtering at this level allows conversion and hiding of keys before NT even "sees" them. Full source is included. Ctrl2cap also shows how to use NtDisplayString() to print messages to the initialization blue-screen.

 
ERD Commander 2000
v2.0
Boot-floppy capability has finally been brought to Windows NT/2000! ERD Commander 2000 lets you boot off of a set of standard NT setup disks, CD-ROM, or the hard drive into a command interpreter that's almost identical to Command-Prompt. From there you can access drives on the system and perform standard file-related commands. The essential Windows NT/2000 recovery tool.

 
FAT32 for Windows NT
4.0 v1.0
Another first from Sysinternals: a FAT32 file system driver for NT 4.0. Dual booting with Windows 95OSR2 and Windows98 just got more efficient!

 
Fundelete v2.02 This utility expands the NT 4.0 Recycle Bin to catch file deleted from command prompts and within programs, and it comes with full source code. Several powerful device driver techniques, including getting a user's SID within a driver, enumerating a directory's contents, and generating IRPs, are demonstrated in source code available for download.

 
LDMDump v1.0 Dump the contents of the Logical Disk Manager's on-disk database, which desribes the partitioning of Windows 2000 Dynamic disks.

 
NewSID v3.02 Learn about the computer SID problem everybody has been talking about and get a free computer SID changer, NewSID, complete with full source code.

 
NTRecover v1.0 Finally, the utility that NT system administrators have been waiting for. With NTRecover you can access a dead x86 NT system's disks from a good system over a serial connection. You can then salvage data off of the drives using native NT commands and utilities. With the write-version you can even run chkdsk on the dead system's drives! The read-only version is freeware.

 
Locksmith v1.0 Locksmith is an add-on program to NTRecover that allows for the changing of passwords on systems where the administrative password has been lost. It works 100% of the time, and if you've forgotten the password to your machine, you can gain entry within minutes using Locksmith.

 
NTFSCHK v1.0 If you dual boot between NT 4 and Windows 2000 then your NTFS drives were upgraded to NTFS v5 and you have had to boot into Windows 2000 to check them. With NTFSCHK you can check your NTFS v5 drives from NT 4.

 
NTFSDOS v3.0 Access NTFS drives for read-only access from DOS.

 
NTFSDOS Professional v3.03 Full read/write access to NTFS drives from DOS! Download this free read-only version.

 
NTFSFlp v1.0 Ever wondered why you can't put NTFS on a floppy disk? Find out how and why NT stops you from doing it, and use NTFSFlp to bypass NT's preventative measures and create and access NTFS floppy disks.

 
NTFS for Windows 98 v1.03 Yet another first from Sysinternals: a full-blown NTFS file system driver for Windows 95/98!

 
PsTools v1.2 The PsTools suite includes utilities for listing the processes running on local or remote computers, rebooting computers, dumping event logs, and more.

 
Remote Recover v1.0 Access unbootable systems from across a LAN or WAN. With Remote Recover you can access a dead x86 NT system's disks from a good system over a TCP/IP connection. You can then salvage data off of the drives using native NT commands and utilities. With the write-version you can even chkdsk, format or partition the dead system's drives! The read-only version is freeware.

 
SDelete v1.1 Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program. Complete source code is included.

 
Sync v2.0 Force NT to flush all modified file system data to disk, insuring that it will be safe in the face of a crash.

 
VolumeID v2.0 Set volume ids on FAT and NTFS hard drives and floppy disks using this little utility.

 
 
Bluescreen v2.21 This screen saver not only accurately simulates Blue Screens, but simulated reboots as well (complete with CHKDSK). Version 2.2 is updated with an ultrarealistic simulation of Win2K Blue Screens and reboots, and also runs on Windows 9x!

 
Miscellaneous An ever-growing collection of small utilities, many with complete source code: Junction, LoggedOn, EFSDump, Streams, IsTrial, UpTime, VolumeId, Sync, AutoLogon, HostName, Strings.

 
PsTools v1.2 The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, rebooting computers, dumping event logs, and more.

 
Utilities for Compaq Alpha An index of the Sysinternals tools that are ported to the Alpha version Windows NT.

 

 

Back to Top