Close
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Applications
    • Applications
    • Cybersecurity
    • Networking

    Microsoft Ships New Malware Hunting Utility

    By
    Ryan Naraine
    -
    November 8, 2006
    Share
    Facebook
    Twitter
    Linkedin

      On the heels of its July 2006 acquisition of Mark Russinovichs Winternals Software, Microsoft has replaced the popular Regmon and Filemon utilities with a single tool offering advanced capabilities for real-time monitoring of registry and process thread activity.

      The release of the new utility, called Process Monitor coincides with the relaunch of the Sysinternals portal as the Windows Sysinternals TechCenter on Microsoft TechNet.

      Russinovich, a respected Windows kernel guru who joined the Redmond, Wash. vendor as a Technical Fellow in the Platforms and Services Division, describes Process Monitor as “a powerful new monitoring tool that is best described as Regmon and Filemon on steroids.”

      Regmon and Filemon are hugely popular among virus and spyware researchers who use the real-time file and registry monitoring tools to determine changes made to an infected operating system.

      The new Process Monitor, which was rewritten from scratch, will also include a third utility called Process Explorer in a single interface.

      According to Microsoft, the new utility features an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, and simultaneous logging to a file.

      “[These] powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit,” the company said.

      Process Monitor, available as a free download, runs on Windows 2000 SP4 with Update Rollup 1, Windows XP SP2, Windows Server 2003, and Windows Vista as well as x64 versions of Windows XP, Windows Server 2003 and Windows Vista.

      Process Monitor can be used to track process and thread startup and exit, including exit status codes; monitor image (DLL and kernel-mode device driver) loads. It also captures data for operation input and output parameters, as well as capture thread stacks for each operation to identify the root cause of an operation.

      Microsoft also announced the release of Sysinternals Suite, a single download package that includes the entire set of SysInternals tools and utilities.

      Since closing the Winternals Software acquisition, Microsoft has completed the migration of Sysinternals content and tools to its domains. Russinovichs blog, which was used to expose Sony BMGs use of a rootkit in its copy protection scheme, has been ported to Microsofts TechNet site and the free utilities have been moved to Microsoft Download.

      However, the source code for the tools will not be migrated. “The number of source code downloads didnt justify the migration, support and possible integration problems it might cause with other Windows components down the road,” said Otto Helweg, program manager in Microsofts Windows Server and Tools division.

      Check out eWEEK.coms for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzers Weblog.

      Ryan Naraine

      MOST POPULAR ARTICLES

      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Applications

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      Applications

      Kyndryl’s Nicolas Sekkaki on Handling AI and...

      James Maguire - November 9, 2022 0
      I spoke with Nicolas Sekkaki, Group Practice Leader for Applications, Data and AI at Kyndryl, about how companies can boost both their AI and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Careers

      SThree’s Sunny Ackerman on Tech Hiring Trends

      James Maguire - June 9, 2022 0
      I spoke with Sunny Ackerman, President/Americas for tech recruiter SThree, about the tight labor market in the tech sector, and much needed efforts to...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×