Sysinternals updates

The latest version of RAMMAP also still contains a small bug. In the tab called "Processes" RAMMAP doesn't display the full process name. When a process name has a length of 15 or more characters then RAMMAP only displays the 1st 14 characters.

 

Windows 10 Pro x64, version 21H1 (build 19043.1237).

 

Okay, My w10 is LTSB (14393.4651). Seems like the Autoruns problem is OS/version specific.

Edit: Tried Autoruns on LTSC (17763.2183) with the same bogus results - not all tasks listed. Looks like
someone did not do enough testing.

 

Sysinternals Suite (September 30, 2021)
https://docs.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite

These applications have been updated:

 

I am happy to announce this. Eureka!!

Scheduled Tasks is back to normal again.

Mark Russinovich, if he in reality is still doing the developing on such tools and not someone else, deserves some latitude

 

Yeah, I can confirm that Scheduled Tasks is fine now. AutoRuns 14x is finally getting there! I am waiting for my friend to check if the explorer.exe issue is fixed as well.

Ok, he said that the entry is no longer showing, so this is fixed too.

 

Yeah, it looks pretty accurate now and it also seems so far that the previous risk of insufficient or missing results have been resolved.

 

I see AutorunsC (command line) did not get updated and no longer included in the Autoruns download

Also, Compare looks broken to me. Do a Save and then select Compare with the file saved. I get the images below. Selecting open file after save shows the same error. Works fine with v13. Anyone else?

 

Good catch if it's the same for everyone else. Maybe minor to some but if it's a useful feature and not living up to the same results of previous versions then THAT needs be resolved.

 

The compare function can be very helpful to determine what has been added to your system from a given point in time. I usually save the autoruns state after a clean install that includes the necessary drivers and preferred apps. Any time after that I can compare an autoruns session to the file (.arn) that I previously saved and it will show me the differences between the 2 states. It's a good way to see if anything unknowingly or unwanted was added since the clean install.

 

Shows what I know. Thanks for that. Gotta start making use of it here.

EDIT: I gone all this time completely oblivious to that handy 'feature'. Definitely using it for now on.

 

Sysinternals Suite (October 12, 2021)
https://docs.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite

These applications have been updated:

Spoiler: Applications

Autoruns for Windows v14.04
https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns
Process Monitor v3.86
https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
TCPView v4.16
https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview
WinObj v3.13
https://docs.microsoft.com/en-us/sysinternals/downloads/winobj
CacheSet v1.01
https://docs.microsoft.com/en-us/sysinternals/downloads/cacheset
Desktops v2.01
https://docs.microsoft.com/en-us/sysinternals/downloads/desktops
Disk2vhd v2.02
https://docs.microsoft.com/en-us/sysinternals/downloads/disk2vhd
DiskMon for Windows v2.02
https://docs.microsoft.com/en-us/sysinternals/downloads/diskmon
EFSDump v1.03
https://docs.microsoft.com/en-us/sysinternals/downloads/efsdump
LoadOrder v1.02
https://docs.microsoft.com/en-us/sysinternals/downloads/loadorder
PsShutdown v2.53
https://docs.microsoft.com/en-us/sysinternals/downloads/psshutdown
RegJump v1.11
https://docs.microsoft.com/en-us/sysinternals/downloads/regjump
ShareEnum v1.61
https://docs.microsoft.com/en-us/sysinternals/downloads/shareenum
ShellRunas v1.02
https://docs.microsoft.com/en-us/sysinternals/downloads/shellrunas
AccessEnum v1.33
https://docs.microsoft.com/en-us/sysinternals/downloads/accessenum
Contig v1.81
https://docs.microsoft.com/en-us/sysinternals/downloads/contig

 

thanks, @mood .

 

Autoruns 14.04 compare function is still broken and cannot load or open a saved .arn file. I tested this on three systems. Can someone verify so I know it's not only me?

 

Im sure the apps are more tuned for Windows 10 anymore but 14.04 version opens and closes almost immediately unlike the last release of ver 14.03 on Windows 8.1 where even Scheduled Tasks works again. Staying with 14.03

 

Autoruns for Windows v14.05
October 13, 2021
https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns

--------------
Autoruns: Too many bugs, too many versions (14.0/.01/.02/.03/.04/.05) lately....
--------------
https://docs.microsoft.com/en-us/an...nternals-autoruns.html?sort=active&filter=all

 

No good. Even v14.05 loads then almost immediately shuts right off/closes here- BUG

 

No problems here (v14.05).

 

Does that also apply to launching Autoruns > wait for ready status > File > Save > File > Compare > select file just saved?

 

Yes.

 

Save always works. Open and Compare working too?

I just tried it on Win11 and it's okay there. Seems like it doesn't work on older systems such as W10 LTSB.
Your Windows 10 Pro x64, version 21H1 (build 19043.1237). is newer than what I currently use.

 

Y E S.........

Windows 10 Pro x64, version 21H1 (build 19043.1288 )

 

Hello,

You are not alone as the very same issue happens here with both 14.04 and 14.05 on my Windows 11 system. 14.03 was the last version that would load/run here....

 

Oh man Thanks! @puff-m-d

I almost was of the mind it was just not going to be compatible with 8.1 as it always is been without fail. This is the first stretch where I ever experienced a series of Sysinternal failures ongoing like this with Autoruns.