World Library  
Flag as Inappropriate
Email this Article


Winternals Software LP
Genre Software development
Founded 1996
Founder Bryce Cogswell and Mark Russinovich
Headquarters Austin, Texas, United States
Parent Microsoft

Windows Sysinternals is a part of the Microsoft TechNet website which offers technical resources and utilities to manage, diagnose, troubleshoot, and monitor a Microsoft Windows environment.[1] Originally, the Sysinternals website (formerly known as ntinternals[2]) was created in 1996 and was operated by the company Winternals Software LP,[1] which was located in Austin, Texas. It was started by software developers Bryce Cogswell and Mark Russinovich.[1] Microsoft acquired Winternals and its assets on July 18, 2006.[3]

The website featured several freeware tools to administer and monitor computers running Microsoft Windows. The software can now be found at Microsoft. The company also sold data recovery utilities and professional editions of their freeware tools.


  • Winternals Software LP 1
    • Source code and technology 1.1
  • Products 2
  • Licensing issue with Best Buy 3
  • See also 4
  • References 5
  • External links 6

Winternals Software LP

Winternals Software LP was founded by Bryce Cogswell and Mark Russinovich, who sparked the 2005 Sony BMG CD copy protection scandal in an October 2005 posting to the Sysinternals blog.[4]

On July 18, 2006, Microsoft Corporation acquired the company and its assets. Russinovich explained that Sysinternals will remain active until Microsoft agrees on a method of distributing the tools provided there.[5] However, NT Locksmith, a Windows password recovery utility, was immediately removed. Currently, the Sysinternals website is moved to the Windows Sysinternals website and is a part of Microsoft TechNet.[1]

In late 2010, Bryce Cogswell retired from Sysinternals.[6]

Source code and technology

Most of the utilities that were developed were usually accompanied with the source code written in C, C++, or assembly language. The code was compatible with Visual C++ v. 6.0 and could be compiled with little effort by a Windows developer. Some of the more interesting utilities did not come with source code, or a lesser version would be available with the source. In later releases, there were 64-bit versions of the utilities and even Linux versions as well.

However, since the Microsoft acquisition, none of the utilities currently available are accompanied by source code, and the Linux versions are no longer maintained or available.

Some of the coding tricks used were based on the Windows Native API (NTAPI), which was (and still is) mostly undocumented by Microsoft. Using these coding examples - with source - would enable developers to create extraordinary programs that performed operations that would otherwise have been impossible using a standard API. Examples include hiding Registry information, intercepting or hooking APIs to monitor file operations by the OS, as well as Registry operations.


Windows Sysinternals supplies users with numerous free utilities, most of which are being actively developed by Mark Russinovich and Bryce Cogswell,[7] such as Process Explorer, an advanced version of Windows Task Manager,[8] Autoruns, which Windows Sysinternals claims is the most advanced manager of startup applications,[9] RootkitRevealer, a rootkit detection utility,[10] Contig, PageDefrag and a total of 65 other utilities.[11] NTFSDOS, which allowed NTFS volumes to be read by Microsoft's MS-DOS operating system, is now discontinued and is no longer available for download.[11] A larger number of these utilities are nowadays bundled by the publishers for the sake of simpler downloading of all, or most, current versions in the so-called Sysinternals Suite.

Previously available for download was the Winternals Administrator Pak which contained ERD Commander 2005, Remote Recover 3.0, NTFSDOS Professional 5.0, Crash Analyzer Wizard, FileRestore 1.0, Filemon Enterprise Edition 2.0, Regmon Enterprise Edition 2.0, AD Explorer Insight for Active Directory 2.0, and TCP Tools.

On May 18, 2010 Sysinternals released its first new utility since its acquisition by Microsoft. Named RAMMap, it is a diagnostic utility similar to the memory tab of Windows Resource monitor, but more advanced. RAMMap runs only on Windows Vista and later.[12]

Licensing issue with Best Buy

In April 2006, Geek Squad, a tech support company working in cooperation with Best Buy, was accused of using unlicensed versions of the ERD Commander software. Winternals supplied Best Buy with copies of its software so that Best Buy could evaluate the software while conducting contract negotiations for using it on a permanent basis. When contract talks broke down Best Buy did not notify its Geek Squad Agents to stop using the software and discard all copies. A judge granted a restraining order on April 14, requiring that use of all unlicensed software be stopped, and forcing Best Buy to turn over all copies of Winternals software within 20 days.[13] After settlement, a version of the Winternals software was released to be used by Geek Squad.[14]

See also


  1. ^ a b c d "Windows Sysinternals". Microsoft Technet. Microsoft Corporation. August 12. Retrieved August 15, 2009. 
  2. ^  
  3. ^ "Microsoft Acquires Winternals Software". Company Press Releases. Winternals Software. July 18, 2006. Retrieved July 18, 2006. 
  4. ^ Mark Russinovich (October 31, 2005). "Sony, Rootkits and Digital Rights Management Gone Too Far". Sysinternals Blog. Retrieved December 18, 2006. 
  5. ^ Mark Russinovich (July 18, 2006). "On My Way to Microsoft!". Sysinternals Blog. Retrieved December 18, 2006. 
  6. ^ "Mark Russinovich Discusses Windows Azure", Windows IT Pro. Retrieved on April 16, 2011.
  7. ^ "What is new (August 5, 2009)". Windows Sysinternals. Microsoft Corporation. August 15. Retrieved August 15, 2009. 
  8. ^ "Process Explorer v11.33". Windows Sysinternals. Microsoft Corporation. February 4. Retrieved August 15, 2009. 
  9. ^ "Autoruns for Windows v9.53". Windows Sysinternals. Microsoft Corporation. August 12. Retrieved August 15, 2009. 
  10. ^ "RootkitRevealer v1.71". Windows Sysinternals. Microsoft Corporation. November 1. Retrieved August 15, 2009. 
  11. ^ a b "Sysinternals Utilities Index". Windows Sysinternals. Microsoft Corporation. August 12. Retrieved August 15, 2009. 
  12. ^ Russinovich, Mark; Cogswell, Bryce (May 18, 2011). "RAMMap v1.11". Windows Sysinternals. Microsoft. Retrieved June 12, 2011. 
  13. ^ "Best Buy's Geek Squad Accused of Pirating Software", FOX News. Retrieved on December 16, 2006.
  14. ^ "Winternals & Best Buy/Geek Squad Settle Federal Lawsuit", Winternals press release. Retrieved on December 16, 2006.

External links

  • Sysinternals page on Microsoft TechNet
    • Sysinternals Live tools directory – Directly accessible repository of utilities
  • Winternals homepage – Redirected to Microsoft Winternals announcement page
    • Web link to historical information Winternals
This article was sourced from Creative Commons Attribution-ShareAlike License; additional terms may apply. World Heritage Encyclopedia content is assembled from numerous content providers, Open Access Publishing, and in compliance with The Fair Access to Science and Technology Research Act (FASTR), Wikimedia Foundation, Inc., Public Library of Science, The Encyclopedia of Life, Open Book Publishers (OBP), PubMed, U.S. National Library of Medicine, National Center for Biotechnology Information, U.S. National Library of Medicine, National Institutes of Health (NIH), U.S. Department of Health & Human Services, and, which sources content from all federal, state, local, tribal, and territorial government publication portals (.gov, .mil, .edu). Funding for and content contributors is made possible from the U.S. Congress, E-Government Act of 2002.
Crowd sourced content that is contributed to World Heritage Encyclopedia is peer reviewed and edited by our editorial staff to ensure quality scholarly research articles.
By using this site, you agree to the Terms of Use and Privacy Policy. World Heritage Encyclopedia™ is a registered trademark of the World Public Library Association, a non-profit organization.

Copyright © World Library Foundation. All rights reserved. eBooks from Project Gutenberg are sponsored by the World Library Foundation,
a 501c(4) Member's Support Non-Profit Organization, and is NOT affiliated with any governmental agency or department.