What's on my USB?
Active Ports
Active Ports - easy to
use tool for Windows NT/2000/XP that enables you to monitor
all open TCP and UDP ports on the local computer. Active
Ports maps ports to the owning application so you can watch
which process has opened which port. It also displays a
local and remote IP address for each connection and allows
you to terminate the owning process. Active Ports can help
you to detect trojans and other malicious programs.
http://www.download.com/3000-2085-10062969.html?part=65960&subj=dlpage&tag=button
More Freewares: http://www.protect-me.com/freeware.html
Zip EXtractor-IZArc
IZArc is the
ultimate archive utility suports many archive formats like:
7-ZIP, A, ACE, ARC, ARJ, B64, BH, BZ2, BZA, CAB, CPIO, DEB,
ENC, GCA, GZ, GZA, HA, JAR, LHA, LIB, LZH, MBF, MIM, PAK,
PK3, RAR, RPM, TAR, TAZ, TBZ,
TGZ, TZ, UUE, WAR, XXE,
YZ1, Z, ZIP, ZOO. With a modern easy-to-use interface, IZArc
provides support for most compressed and encoded files, as
well as access to many powerful features and tools. It
allows you to drag and drop files from and to Windows
Explorer, create and extract archives directly in Windows
Explorer, create multiple archives spanning disks, creating
self-extracting archives, repair damaged zip archives,
converting from one archive type to another, view and write
comments and many more. IZArc has also build-in
multilanguage support.
http://www.izsoft.dir.bg/izarc.htm
Microsoft .NET Framework Version 1.1 Redistributable
Package
The .NET Framework version 1.1 redistributable package
includes everything you need to run applications developed
using the .NET Framework.
http://www.microsoft.com/downloads/details.aspx?FamilyID=262d25e3-f589-4842-8157-034d1e7cf3a3&displaylang=en
DiskMon
DiskMon is an application that
logs and displays all hard disk activity on a Windows
system. You can also minimize DiskMon to your system tray
where it acts as a disk light, presenting a green icon when
there is disk-read activity and a red icon when there is
disk-write activity.
http://www.sysinternals.com/ntw2k/freeware/diskmon.shtml
listdlls
A utility that will show me
which DLLs are loaded on Windows 9x or NT
http://www.sysinternals.com/ntw2k/freeware/listdlls.shtml
TaskManagerEx
This is an extension for
the Windows Task Manager (NT/2000). The features are the
following:
- Show Application icons in Processes list
(if available)
- Use different color for services
- Find a used file by any process. (Use * as file name
for showing every used file)
(The search is a full text
search, so for example you can use the extension only)
- Find a used module by any process
(The search
is a full text search, so for example you can search for
"kernel")
- Show Process ID in Applications tab
- Use different color for processes if the CPU usage
reaches a given limit ( 25%, 50%, 75% )
- Query list
of every files, handles, modules, windows used by a given
process
- Close a used file (you can unlock an
exclusively opened file, so you can delete it)
-
Unload a used module (so you can delete it)
- You can
kill services too
- Fast end process. Press DEL key!
http://www.codeguru.com/Cpp/W-P/system/taskmanager/article.php/c5763
Skype
Skype is free Internet telephony
that just works.
Skype is for calling other people on
their computers or phones. Download Skype and start calling
for free all over the world.
http://www.skype.com/
tcpview
TCPView is a Windows program
that will show you detailed listings of all TCP and UDP
endpoints on your system, including the local and remote
addresses and state of TCP connections. On Windows NT, 2000
and XP TCPView also reports the name of the process that
owns the endpoint. TCPView provides a more informative and
conveniently presented subset of the Netstat program that
ships with Windows. The TCPView download includes Tcpvcon, a
command-line version with the same functionality.
http://www.sysinternals.com/ntw2k/source/tcpview.shtml
UsesWhat
- a simple utility that scans
import tables in Win32 modules for DLLs and APIs
-
produces comma-delimited files for easy import into
spreadsheet and database programs
- useful for
scanning the system for instances of a particular API
http://www.smidgeonsoft.prohosting.com/#UsesWhat
WhoSLocking
Who'sLocking? is a a
devpt/system management tool to find which process is
locking a DLL.
http://www.codeguru.com/Cpp/W-P/dll/article.php/c3641/
Autoruns
This utility, which has the
most comprehensive knowledge of auto-starting locations of
any startup monitor (A starting list of auto-run locations
was obtained from David Solomon's "Windows Internals"
seminar), shows you what programs are configured to run
during system bootup or login, and shows you the entries in
the order Windows processes them. These programs include
ones in your startup folder, Run, RunOnce, and other
Registry keys. You can configure Autoruns to show other
locations, including Explorer shell extensions, toolbars,
browser helper objects, Winlogon notifications, auto-start
services, and much more. Autoruns goes way beyond the
MSConfig utility bundled with Windows Me and XP.
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml
J2SE Runtime Environment (JRE)
http://java.sun.com/j2se/1.5.0/download.jsp
FileMon
FileMon monitors and displays
file system activity on a system in real-time. Its advanced
capabilities make it a powerful tool for exploring the way
Windows works, seeing how applications use the files and
DLLs, or tracking down problems in system or application
file configurations. Filemon's timestamping feature will
show you precisely when every open, read, write or delete,
happens, and its status column tells you the outcome.
FileMon is so easy to use that you'll be an expert within
minutes. It begins monitoring when you start it, and its
output window can be saved to a file for off-line viewing.
It has full search capability, and if you find that you're
getting information overload, simply set up one or more
filters.
http://www.sysinternals.com/ntw2k/source/filemon.shtml
RegMon
Regmon is a Registry monitoring
utility that will show you which applications are accessing
your Registry, which keys they are accessing, and the
Registry data that they are reading and writing - all in
real-time. This advanced utility takes you one step beyond
what static Registry tools can do, to let you see and
understand exactly how programs use the Registry. With
static tools you might be able to see what Registry values
and keys changed. With Regmon you'll see how the values and
keys changed..
http://www.sysinternals.com/ntw2k/source/regmon.shtml
Process Explorer
Process Explorer
shows you information about which handles and DLLs processes
have opened or loaded.
The Process Explorer display
consists of two sub-windows. The top window always shows a
list of the currently active processes, including the names
of their owning accounts, whereas the information displayed
in the bottom window depends on the mode that Process
Explorer is in: if it is in handle mode you’ll see the
handles that the process selected in the top window has
opened; if Process Explorer is in DLL mode you’ll see the
DLLs and memory-mapped files that the process has loaded.
Process Explorer also has a powerful search capability that
will quickly show you which processes have particular
handles opened or DLLs loaded.
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
Other tools from Sys Internals
http://www.sysinternals.com/sitemap.shtml
Spybot - Search & Destroy
Spybot - Search & Destroy can detect and remove spyware
of different kinds from your computer. Spyware is a
relatively new kind of threat that common anti-virus
applications do not yet cover. If you see new toolbars in
your Internet Explorer that you didn't intentionally
install, if your browser crashes, or if you browser start
page has changed without your knowing, you most probably
have spyware. But even if you don't see anything, you may be
infected, because more and more spyware is emerging that is
silently tracking your surfing behaviour to create a
marketing profile of you that will be sold to advertisement
companies. Spybot-S&D is free, so there's no harm in
trying to see if something snooped into your computer, too
:)
http://www.safer-networking.org/en/spybotsd/index.html
WinPatrol
Scotty the Windows Watch Dog
sniffs out malicious "mysteryware" , web attacks and
parasites that may assault your computer. WinPatrol puts you
back in control of your computer so you'll know what
programs are and should be running at all times.
http://www.winpatrol.com/
xplorer2
The lightweight version of
xplorer² is not a crippled unusable salesman of the
professional version. It shares the same browsing and
management engine, and gives many rival professional file
managers a run for their money — literally! It is a complete
little file manager, albeit lacking a bit in bells and
whistles.
http://netez.com/xplorer2/x2lite.htm
Firefox
http://www.mozilla.org/products/firefox/
CWShredder & HijackThis
Tools to
keep your PC clean
http://www.spywareinfo.com/~merijn/downloads.html
Stinger
Stinger is a stand-alone
utility used to detect and remove specific viruses. It is
not a substitute for full anti-virus protection, but rather
a tool to assist administrators and users when dealing with
an infected system. Stinger utilizes next generation scan
engine technology, including process scanning, digitally
signed DAT files, and scan performance optimizations.
http://vil.nai.com/vil/stinger/
Roadkil's Unstoppable Copier
Recovers
files from disks with physical damage. Allows you to copy
files from disks with problems such as bad sectors,
scratches or that just give errors when reading data. The
program will attempt to recover every readable piece of a
file and put the pieces together. Using this method most
types of files can be made useable even if some parts were
not recoverable in the end.
http://www.roadkil.net/unstopcp.html
Dependency Walker
Dependency Walker is a free utility that scans any 32-bit
or 64-bit Windows module (exe, dll, ocx, sys, etc.) and
builds a hierarchical tree diagram of all dependent modules.
For each module found, it lists all the functions that are
exported by that module, and which of those functions are
actually being called by other modules. Another view
displays the minimum set of required files, along with
detailed information about each file including a full path
to the file, base address, version numbers, machine type,
debug information, and more.
http://www.dependencywalker.com/
MyTools: (Shameless plugging)
http://weblogs.asp.net/nleghari/archive/2004/07/31/amazonbrowser.aspx
http://weblogs.asp.net/nleghari/articles/codeshareaddin.aspx
http://weblogs.asp.net/nleghari/articles/annotate.aspx
http://weblogs.asp.net/nleghari/posts/27951.aspx
+ Demo Presentations for some services
http://weblogs.asp.net/nleghari/articles/146585.aspx
http://weblogs.asp.net/nleghari/articles/146586.aspx
I have still quite a lot of space left in my USB (around 100+MB out of 256) therefore if I missed something important, please write in the comments or here.