Sysinternals Freeware - Mark Russinovich & Bryce Cogswell

Utilities: Processes & Threads

Last Updated: July 13, 2006

Autoruns v8.53
See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings.

Filemon v7.03
This monitoring tool lets you see all file system activity in real-time.

Frob v1.6a
NT doesn't allow access to internal performance settings like execution quanta, which have different values on Workstation and Server. Here's an applet that will let you "frob" the foreground and background quanta on a system for experimentation, or for your liking. This update works on NT 4.0 SP 6a.

Handle v3.2
This handy command-line utility will show you what files are open by which processes, and much more.

Hostname v1.0
Convert IP address to hostname, and vice versa.

ListDLLs v2.25
List all the DLLs that are currently loaded, including where they are loaded and their version numbers. Version 2.0 prints the full path names of loaded modules.

PMon v1.0
This is an NT Gui/device driver program that watches process and thread creation and deletion, as well as context swaps if running on a multiprocessing or checked kernel.

Portmon v3.02
Monitor serial and parallel port activity with this advanced monitoring tool. It knows about all standard serial and parallel IOCTLs and even shows you a portion of the data being sent and received. Version 3.x has powerful new UI enhancements and advanced filtering capabilities.

Process Explorer v10.2
Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process.

PsExec v1.72
Execute processes remotely.

PsKill v1.11
Terminate local or remote processes.

PsList v1.26
Show information about processes and threads.

PsService v2.2
View and control services.

PsSuspend v1.04
Suspend and resume processes.

PsTools v2.34
The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more.

Regmon v7.03
This monitoring tool lets you see all Registry activity in real-time.

Tokenmon v1.01
Watch security-related activity, including logon, logoff, privilege usage, and impersonation with this monitoring tool. Full source code included.