MONITORS TRACERS


Monitors/Tracers

Advanced Registry Tracer v1.20 advrtrc.zip
(622kb)
An utility designed for analysing the changes made to Windows Registry - by making the "snapshots" of it and keeping them in the browsable database. You can compare any two snapshots and get the list of keys/data which are new, deleted or just changed. Moreover, you can create undo/redo files (for example,to rollback the changes).
Producer: Elcom Ltd
http://www.elcomsoft.com/art.html
ApiHooks 2.1c apihooks.zip
(33kb)
ApiHooks allows developers to watch intermodule communications. Suitable for unpackers, spies, patchers, trainers, file and registry monitors.
Author: ELICZ
http://members.xoom.com/EliCZ
API Spy v2.4 WIN9x ver
apis32.zip
(161kb)

APIS32 allows you to examine any known API functions call that is resolved during the program load time and is given by APIS32. APIS32 will work with Windows95/98/NT and Windows 2000 applications which will be executed under the any Win32 platform. It won`t spy upon API functions called by 16 bit programs. 
Author: Vitaly Evseenko
http://www.biosys.net/apis32
APIS32@Biosys.net

API Spy 1.4 WINNT ver
apis32nt.zip
(186kb)
ATM 2.2 atm22.zip
(57kb)
Another Task Manager. ATM allows you to completely manage the system priority of all processes and threads running. It provides a real-time capability to monitor all processes and threads, their CPU usage, execution time, etc.
Author: Enrico Del Fante
http://atm.idic.caos.it
tbenr@idic.caos.it
DebugView 4.05 dbgv98.zip
(164kb)
DebugView/EE (Enterprise Edition) is an application that lets you monitor debug output on your local system, or any computer on the network that you can reach via TCP/IP. It is capable of displaying both kernel-mode and Win32 debug output, so you don’t need a debugger to catch the debug output your applications or device drivers generate.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com
DLLView v2.03 dllview.zip
(36kb)
DllView is a Win32 program that shows you which DLLs processes have opened or loaded. Its display consists of two sub-windows. The top shows a list of the currently active processes, whereas the information displayed in bottom is the DLLs that the process has loaded. DLLView also has a powerful search capability that will quickly show you which processes have particular DLLs loaded.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com
dllViewer v1.0.127 dllviewer.zip
(147kb)
DllViewer shows list of currently running processes (including system one). For each process DllViewer shows various technical information, including list of DLLs loaded by process and memory consumption information. Overall memory usage information is also displayed. DllViewer able displays dyn amic icon in the tray area which is indicating current memory load factor.
Author: Vitas Ramanchauskas
http://soft4you.com/dllviewer
vitas@soft4you.com
ExeSpy98 v4.7 exespy98.zip
(462kb)
In fact there are two applications:
  • ProcessExplorer98 - enables you to view running processes, loaded modules, version information, imported modules and APIs, exported APIs, process information, thread information, heap allocation, and code disassembly.
  • ExeSpy98 - enables you to install system-wide hooks to monitor 32 bit APIs or 16bit APIs.

Producer: PRUDENS INC.
http://www.spywindows.com
info@spywindows.com

ExeSpy2000 v4.7 exespy2k.zip
(598kb)
The same tool as above but for Windows NT 4.0/2000.
File Monitor v4.33 (Filemon) filemon.zip
(79kb)
Filemon is a GUI/device driver combination that together monitor and display all file system activity on a system. It has advanced filtering and search capabilities that make it a powerful tool for exploring the way NT works, seeing how applications use the files and DLLs, or tracking down problems in system or application configurations.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com
ex-flk.zip
(20kb)
Filemon LOG Killer
Ever being bored of looking through like 50000 lines of File Monitor LOG files? So this tool is for you. It will automatically remove any dupes from a LOG file and it will as well save the new LOG file automatically. A backup will be done and an integrated viewer will automatically start.
Authors: Marton & R0ach
HandleEx 3.11 for Win NT/2k handleex.zip
(68kb)
HandleEx is a GUI/device driver combination that together show you information about which handles and DLLs processes have opened or loaded.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com
MemMonitor98 v4.7 mempro98.zip
(288kb)
MemMonitor can keep track on Global/Local/Virtual/Heap functions that your program calls to allocate or de-allocate memory, add up memory allocated and de-allocated based on API calls or heaps and match the de-allocation calls with the allocation calls.
Producer: PRUDENS INC.
http://www.spywindows.com
info@spywindows.com
MemMonitor2000 v4.7 mempro2k.zip
(348kb)
The same tool as above but for Windows NT 4.0/2000.
OpenList V1.11 openlist.zip
(28kb)
OpenList is a Windows program that will show you information on what files are currently open on your Windows 95 or 98 system. The information includes the file’s path, the way the file has been opened file, and the share and access modes of the open.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com
Port Monitor 3.01 portmon.zip
(114kb)
Portmon is an application that lets you monitor serial and parallel activity on your local system, or any computer on the network that you can reach via TCP/IP. It is the most powerful tool available for tracking down port-related configuration problems and analyzing application port usage.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com
Process Memory Manipulator v0.2 pmm.zip
(177kb)
Process memory manipulator is a win32 application which allows to map the memory of a specified currently running process.
Author: trainSpotter
perestroika2000@hotmail.com
RegistryMonitor98 v4.5 regmon98.zip
(469kb)
RegistryMonitor98 allows you to trace down how the registry is accessed and modified.
Producer: PRUDENS INC.
http://www.spywindows.com
info@spywindows.com
RegistryMonitor2000 v4.7 regmon2k.zip
(526kb)
The same tool as above but for Windows NT 4.0/2000.
Registry Monitor 4.32 (Regmon) regmon95.zip
(69kb)
Regmon is a GUI/device driver combination that together monitor and display all Registry activity on a system. It has advanced filtering and search capabilities that make it a powerful tool for exploring the way Win9x/NT works, seeing how applications use the Registry, or tracking down problems in system or application configurations.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com
RegMonEx 1.3.0.87 regmonex.zip
(167kb)
RegMonEx is a registry monitoring tool. Once running it captures all calls to any registry releated API function and displays them in the RegMonEx-window. It's based on Regmon created by Mark Russinovich.
Author: Jan Sultan
http://stud.fh-wedel.de/~ii6059
jsultan@tecs.de
Registry Shot for WIN95&98 v1.01j regst101j.zip
(19kb)
Thanks to this program you can take two shots of registry and compare them for differences.
Author: Tianwei
http://coobe.cs.hn.cninfo.net/~tianwei/
spring_w@263.net
RegSnap v2.7 regsnap.zip
(114kb)

RegSnap is a registry-analyzing tool. RegSnap helps you analyze changes made to the Windows system Registry. Compare saved snapshots and find out which keys have been modified, deleted, or added. RegSnap version v2.0+ is also able to analyze other sensitive system components: list of files in Windows and Windows System directories, win.ini and system.ini files, autoexec.bat and config.sys.
Author: Vitas Ramanchauskas
http://soft4you.com/dllviewer
vitas@soft4you.com

ResSpy98 v4.2a resspy98.zip
(323kb)
Using this program you can monitor the following events: loading and creation of bitmap / icon / cursor / menu, creation of brush and pen. You can also report the APIs called and their parameters.
Producer: PRUDENS INC.
http://www.spywindows.com
info@spywindows.com
Spy & Capture Version 2.70 spy.zip
(248kb)
Select any window by direct mouse positioning and get Window Properties and all it's Objects, Styles and Classes. If the window is a control you get it's Control Styles. Capture (included region capture), Color-Spy, Grabb Password Field ("***" fields) features are provided.
Author: Kobi Krichmar
http://come.to/kobik
krichmar@hotmail.com
TCPView 1.11 tcpview.zip
(36kb)
TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the remote address and state of TCP connections.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com 
TDImon 1.0 tdimon98.zip
(97kb)
TDImon is an application that lets you monitor serial and parallel activity on your local system, or any computer on the network that you can reach via TCP/IP. It is the most powerful tool available for tracking down network-related configuration problems and analyzing application network usage.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com 
TechFacts 98 v2.33 tekfct98.zip
(1,2mb)
TechFacts 98 is a powerful Windows 95/98 tool that empowers you to diagnose, solve and report Windows problems. Features:
  • A Resource \ Disk \ CPU \ Memory monitor with several unique views and individual alarms.
  • A Spy \ Trace \ Diagnostic tool that explores all aspects of Windows.
  • A powerful reporting tool that lets you transmit TechFacts information to other people or organizations.
  • much more...

Producer: Dean Software Design
http://www.winutils.com
Winutils@aol.com

TechFacts NT v1.10 tekfctnt.zip
(1,2mb)
The same tool as above but for Windows NT.
VxDCall Monitor 1.0b vxdcall.zip
(373kb)
VxDCall Monitor is a small application that allows you to spy  the call to the undocumented Api VxdCall made by applications. The VxDCall is a backdoor used by Kernel and other system DLL to call a VXD service. Designed for Windows 9x only. Sources in asm/Delphi included.
Author: GEnius
http://ringzer0.cjb.net
genius__666@hotmail.com
VxD Monitor v1.0 vxdmon.zip
(62kb)
VxDMon is a tool meant to allow for profiling of Windows 95 VxD performance and behavior. VxDMon's functionality is built on VxD service hooking. By using service hooking, VxDMon is able to monitor and time, via the Pentium's rdtsc (ReaD Time Stamp Counter) instruction, any and all VxD services including those of VxDs built into Windows and those added by a developer. In addition, VxDMon keeps track of VxD service call histories so that it can display useful information such as the list of all services that were called by a particular service during a monitoring session.
Author: Mark Russinovich
http://www.sysinternals.com
mark@sysinternals.com
Win32 Game Wizard v0.85 w32gwiz.zip
(95kb)
Is a versatile program which will allow the user to participate more intelligently in Win32 games or any programs. It permits the user to modify the Win32 games so that they can be much easier finished. It allows you to customize your Win32 games. It removes protection, adds infinite lives, infinite weapons, etc...
Author: Vitaly Evseenko
http://madmat.hypermart.net
apis32@biosys.net
Window Detective 1.0 detectiv.zip
(126kb)
This is a program designed to peek into Windows, and applications running within Windows. It can tell you different information about selected window.
Author: Jiries Alaraj
http://www.progency.com/
progency@aol.com
WinDowse 1.1 windowse.zip
(204kb)
Easy to use tool for windows analyse.
Producer: GreatisSoft
http://greatis.virtualave.net
greatis@telkom.net
Win-eXpose-I/O v3.00 wxi9x-30.zip
(1,9mb)
This Windows 95 Files I/O Tracer Gives realtime report on files I/O all over the system (even DOS BOXES). A tool for anyone who tries to find out which file an application is using or missing. A tool also for dev. tracking file operation by an external utility, and for improving windows performance.
Producer: Shetef Solutions & Consulting
http://www.shetef.com
Win-eXpose Registry v1.0 wxr95-10.zip
(1,2mb)
Registry Tracer/Debugger/Monitor for Windows 95 Gives realtime report on registry activity. A tool for anyone who tries to find out what data is stored and where in the registry.
Producer: Shetef Solutions & Consulting
http://www.shetef.com