This is a bit of old news, but I have not reported it. There has always been a set of amazing tools that were usable to diagnose inside Windows, they were sold from a company called WinInternals, who then produced a set of free tools on the web site http://www.sysinternals.com. These tools I normally use are below. I use them for those questions like "what file is failing to load", or "where is it looking in the registry" or "what process is using all the CPU".
This monitoring tool lets you see all file system activity in real-time.
Schedule file rename and delete commands for the next reboot. This can be useful for cleaning stubborn or in-use malware files.
Defragment your paging files and Registry hives!
See what files are scheduled for delete or rename the next time the system boots.
See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings.
Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process
See all open TCP and UDP endpoints. On Windows NT, 2000 and XP TCPView even displays the name of the process that owns each endpoint. Includes a command-line version, tcpvcon.
This monitoring tool lets you see all Registry activity in real-time.
The ultimate Object Manager namespace viewer is here.
Enjoy the tools and expect to see more as these become MS items.
Fri, Sep 15 2006 2:12 PM