Download Sysinternals Suite 2009-12-01

Microsoft has released a new version of the Sysinternals Suite. This package is a collection of useful tools that can be used to manage systems and obtain extensive information about the computer. It therefore provides excellent tools for detecting and solving all kinds of problems. The individual tools are developed by Mark Russinovich and Bryce Cogswell, initially for Sysinternals and now for Microsoft. Some examples are Process Explorer, Bginfo, contig and disk mon. In total it concerns a collection of no less than 65 different tools. Since the previous entry in the Meuktracker, the following components in the Suite have been updated:

VMmap v2.5:
This update to VMMap, a process memory analysis utility, now identifies thread environment blocks (TEBs), the process environment block (PEB), and reserved memory.

Disk2vhd v1.4:
Now includes an option for Windows XP and Windows Server 2003 that directs it to fix up the kernel and HAL to make the VHDs generated for these systems bootable in Virtual PC. It also skips sectors with CRC errors to enable the conversion of systems with failing disks.

Sign check v1.63:
Instead of reporting ‘unsigned image’ for all signature check failures, Sigcheck now reports specific errors, such as the root not being trusted and the signing chain not being valid.

Autoruns v9.57:
Now reports more group policy script entries.

PSExec v1.97:
This update to PsExec fixes the interactive (-i) switch for Windows XP and a bug in the copy-to-remote (-c) switch that would sometimes prevent the copy from succeeding.

PsKill v1.13:
Fixes a bug in the process tree termination logic.

Disk2vhd v1.3:
This update to Disk2vhd makes more Windows XP and Windows Server 2003 VHDs bootable by updating their MBR and boot sectors to be compatible with Hyper-V and Virtual PC and by installing the Intelide driver if it’s not already installed. It also optimizes image creation by not copying paging and hibernation files.

Sign check v1.62:
This update to Sigcheck, a utility that displays file version and digital signature information, removes a file size limit for generating file hashes, works on 64-bit MSI files, and reports expired signatures.

Process Monitor v2.8:
Displays new Windows 7 CreateFile options, includes file-delete operations in the Category filter’s Write subcategory, and displays names for more IOCTLs and result codes.

LiveKd v3.12:
This release fixes compatibility with 64-bit Windows XP and Windows Server 2003.