RyanVM.net Discussion Board

[beats]

[Release] Sysinternals Suite 2010-01-14 x86 & x64 (ENU)

The Sysinternals Troubleshooting Utilities have been rolled up into a single Suite of tools. This file contains the individual troubleshooting tools and help files. This release does contain the infamous BSOD Screen Saver.

Platform: NT4, Win2k, WinXP, Vista, Win7 (x86 & x64)
Authors: Mark Russinovich and Bryce Cogswell
License: Freeware
Website: http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx

---

About this release:
- Custom build MSI; supports AD, Admin Installs, repairs and all that.
- Just a little gift from me.
- 7-Zip SVCPACK addon (for the switchless installer, simply extract it from the archive).

Notes:
- This package contains all 75+ Sysinternals utilities.
- Don't bug me to update the entire package for every single tiny application update. I will do so on a regular basis; I don't (and won't) keep track off every single one of them daily.
- I know there have been 'issues' redistributing this suite in the past. If it's a problem for ryanvm.net still today, I'll take it off line again.

7-Zip SFX Code:

[beats]

Updated to 2009-12-01:

VMMap v2.5:
This update to VMMap, a process memory analysis utility, now identifies thread environment blocks (TEBs), the process environment block (PEB), and reserved memory.

Disk2vhd v1.4:
Now includes an option for Windows XP and Windows Server 2003 that directs it to fix up the kernel and HAL to make the VHDs generated for these systems bootable in Virtual PC. It also skips sectors with CRC errors to enable the conversion of systems with failing disks.

Sigcheck v1.63:
Instead of reporting ‘unsigned image’ for all signature check failures, Sigcheck now reports specific errors, such as the root not being trusted and the signing chain not being valid.

Autoruns v9.57:
Now reports more group policy script entries.

PsExec v1.97:
This update to PsExec fixes the interactive (-i) switch for Windows XP and a bug in the copy-to-remote (-c) switch that would sometimes prevent the copy from succeeding.

PsKill v1.13:
Fixes a bug in the process tree termination logic.

Disk2vhd v1.3:
This update to Disk2vhd makes more Windows XP and Windows Server 2003 VHDs bootable by updating their MBR and boot sectors to be compatible with Hyper-V and Virtual PC and by installing the Intelide driver if it it’s not already installed. It also optimizes image creation by not copying paging and hibernation files.

Sigcheck v1.62:
This update to Sigcheck, a utility that displays file version and digital signature information, removes a file size limit for generating file hashes, works on 64-bit MSI files, and reports expired signatures.

Process Monitor v2.8:
Displays new Windows 7 CreateFile options, includes file-delete operations in the Category filter’s Write subcategory, and displays names for more IOCTLs and result codes.

LiveKd v3.12:
This release fixes compatibility with 64-bit Windows XP and Windows Server 2003.
_________________
Request your Switchless Installer or Addon | How to create an Avast SFX

[dumpydooby]

Thanks for maintaining this!


Gotta love Microsoft's EULAs.

[beats]

Yeah, some of them are funny indeed.

Oh, not that I know. I just forgot to remove them from the Suite.
_________________
Request your Switchless Installer or Addon | How to create an Avast SFX

[Wesmosis]

thank you beats

[Wesmosis]

Does it contain Process Explorer??

[beats]

Of course it does.
_________________
Request your Switchless Installer or Addon | How to create an Avast SFX

[Wesmosis]

[beats]

Yes, import the reg-file below at some point in your unattended installation (cmdlines.txt, RunOnce(Ex), WPI or whatever).

[Wesmosis]

[beats]

You're welcome

Oh, keep in mind that the path must be hardcoded, like the example above.
%WinDir% or %SystemRoot% doesn't work with the Debugger. Unfortunally.
_________________
Request your Switchless Installer or Addon | How to create an Avast SFX

[Wesmosis]

it didn't work
the reg tweak

[beats]

It works, just make sure that the path is correct -> "c:\\windows\\system32\\procexp.exe"
_________________
Request your Switchless Installer or Addon | How to create an Avast SFX

[dumpydooby]

You can actually leave out the path entirely since the file is already located in the system path. I do this all the time with StripMyRights.exe (which is a wrapper that removes administrative privileges from applications; great for securing web-based applications like Firefox, Thunderbird, Adobe Reader, etcetera).
_________________
Love Always,
Dumpy Dooby

PS-
RogueSpear's forums dide.

[beats]

Updated to 2010-01-14.

Changelog

ProcDump v1.71:
This fixed a bug in the exception handling dump condition logic.

ProcDump v1.7:
This update to ProcDump, a command-line utility that will generate memory dumps of processes based on various selectable criteria, now supports periodic timed dumps as well as dumps based on virtual memory thresholds.

AccessChk v4.24:
AccessChk, a utility that shows effective security permissions for files, registry keys, services, and more, now supports process tokens.

Sigcheck v1.64:
This release adds reporting for more signature verification errors.

Desktops v1.01:
This fixes a bug that prevented Desktops from launching Explorer on secondary desktops when run on 64-bit Windows 7.

LiveKd v3.13:
LiveKd works around a bug in Windbg’s analysis engine that could cause Windbg to hang for several minutes when launched from Livekd.

+

All shortcuts are now grouped under "Programs/Sysinternals" instead of "Programs/Accessories/Sysinternals".

Removed RegMon and FileMon, since both were replaced by Process Monitor. Thank you dumpydooby, for the heads up.
_________________
Request your Switchless Installer or Addon | How to create an Avast SFX

[dolivas]

beats First I would like to say thanks for this now a couple of thing I have found with this installer.

Could we get a 64bit only version the reason I ask is because these programs are only 32bit and do not work at all on the 64bit installs.

1. Portmon.exe
2. RootkitRevealer.exe
3. PageDefrag.exe

Thanks,
dolivas

[beats]

There's no need for a 64 bit only installer, I'll just make the MSI to not install those files on x64 next update.
_________________
Request your Switchless Installer or Addon | How to create an Avast SFX

[dolivas]

Ok beats that sounds great I will keep an eye out for the update and thanks again for your work much appreciated

[crashfly]

Thank you for this addon beats. Keep up the great work.
_________________
A mind is like a parachute, it only functions when it is open.
--Anonymous

How to Ask Questions the Smart Way

[prosayist]

Since the 2010-01-14 update:

AccessChk updated 4/28
AD Explorer updated 3/3
Desktops updated 1/19
Disk2vhd updated 3/3
DiskView updated 3/25
LiveKd updated 4/28
LogonSessions updated 4/28
ProcDump updated 4/15
Process Explorer updated 4/15 (with updated chm)
Process Monitor updated 4/14 (with updated chm)
PsTools 7 files udpdated 4/28 (listed below)
PsExec
PsGetSid
PsInfo
PsList
PsLoggedOn
PsLogList
PsService
Sigcheck updated 3/3
VMMap updated 3/25
_________________
WYSIWYG

[dolivas]

beats First I would like to say thanks I was wondering if you have some time could you please update this?

Thanks and hope you are well,
dolivas

[bphlpt]

I'm afraid that beats hasn't been around since his last post Tue Jan 19, 2010. I'm not sure what his status is.

Cheers and Regards