PROGRAMS BY Mark Russinovich

The Disk Usage application has been designed to report the disk activity and usage on the directory the user specifies. It does recursive search on the directories and will show the exact directory size and its subdirectories

The LDMDump utility lets the users examine what is happening on a disk and on its partitions. LDM partitioning is useful for dynamic disks management and information display. It also includes disk replication, on disk storage

The EFSDump application uses the EFS API to show the administrator what accounts are authorized to access certain encrypted files. The EFS or Encrypting File System has been introduced with Windows 2000 as an encryption optio

The DiskExt utility is a small module developed to show the number of partitions located on the hard disks and where are they located on the hard disks. The application uses the IOCTL_VOLUME_GET_VOLUME_DISK_EXTENTS command fo

The ListDLLs utility is designed to show all the DLL’s loaded into the WINNT or Win98 systems. It will also show the full path names to the modules. It will flag different versions of the same module for the same amount of di

The PageDefrag application is designed to make special defragmentation on files opened exclusively by the windows OS. It can also show how fragmented are the files you want to defrag and also give you the chance to defragment

The Hex2dec application is a command line utility that can replace the old fashion calc at converting the values from hexadecimal to decimal and vice versa. This is a good way to speed up the conversion process as all you hav

The ProcDump application is a tool that can be ran on the command line to detect CPU spikes, generate crash dumps to allow administrators and developers to troubleshoot the cause more efficiently. You can also monitor hung wi

The ClockRes application is a small utility designed to allow the users to see the internal resolution of the system clock. It will also reveal the maximum internal resolution the clock can be set to and the minimum resolutio

CacheSet can allow the PC users to manipulate the system cache. The program will run on all the version of NT systems. You can control the maximum and minimum working set sizes of the cache as long as you have administrative

The LiveKd utility is used in conjunction with Kd and Windbg Microsoft kernel debuggers in order to allow the users to run them in a live environment and system. To install the LiveKD however will also require you install the

The Junction utility has been designed to create NTFS junctions or directory symbolic links freely. This means that for example if you would want to create D:SYMLINK to point to C:WINNTSYSTEM32 this would be the application t

The AccessChk utility is a very small and robust module that can help the windows administrators in checking the access foe specific groups of users on computer resources. The users can add certain parameters to the command l

The Autologon utility is a great way to bypass your windows logon screen by automating the process. It will allow the user to actually configure the built in logon mechanism and fill in his user and password so next time it w

The AdRestore utility allows the system administrators and users to restore deleted active directory objects. It will enumerate the objects deleted and will give the user the possibility to custom restore certain objects he c

The Ctrl2Cap utility is a great device driver to have if you are used with the UNIX style keyboards. The application will convert the caps lock characters into control characters. To run the program, just install it using the

The PsInfo tool is designed to find out information on local and remote systems based on the NT and 2000 platforms. Information includes:- Installation type- Kernel build- Registered owner and organization- Processor numb

The Process Explorer utility helps the administrators and also home users determine and troubleshoot various processes running on the computers. It can show what program has what file or folder opened and additional informati

The PsTools package contains multiple command line tools for remote and local system management. Among the tools included we have:- PsExec and PsFile- PsKill and PsInfo- PsList and PsLogList- PsService and PsShutdown

The PsKill utility is a process killing tool that can also perform the operations on remote computers except the local ones. To run the program, just browse to it in the executable path. Available parameters to use with the u

The Coreinfo utility is a processor application showing information related to the processor cores, mappings between the logical processors and the physical processor, NUMA mode and about the socket on which they reside as we

The NTFSInfo utility is an applet designed to show information about the NTFS and also the size of the metadata files contained. It will also show you where on the disk (in terms of clusters) the MFT is located and how large

The DebugView application allows the users to debug the output from the PC or the network. It can display both Win32 debug output and kernel mode so all the applications can be debugged without the need of modifying them. It

The DiskMon utility resembles the Filemon one but it is aimed at the whole HDD performance and activity. It will log and display all the events of the Windows system. If the activity on the computer is low, a green light will

The handle utility is a command line application that displays information about any opened handles for any of the system processes. This is good for programs causing issues or having multiple files opened. In order to run t

The Contig utility is a file concentrated defragmenter attempting to make the disk files continuous. Most defragmenters are focused on a more general defragmentation process and that may leave continuously fragmented files un

The PsExec application is an alternative to the more complicated and some even commercial telnet clients out there. It will let the users execute programs on remote computers without having to manually install client software

The Portmon application is designed to monitor parallel and serial port activity on the system. It disposes of advanced searching capabilities and filtering options for tracking down issues. Other features:- Remote monitorin

The BlueScreen screensaver application has been developed for the old school PC enthusiasts. It will authentically replicate the real BSOD or blue screen of death and also consequences after the crash. Other simulations inclu