SysInternals Utils discontinued Win2K support, FileMon/RegMon being pu

[Syclone0044]

I downloaded a new version of Process Explorer v11.33 and noticed the handy Tooltips that show which app was causing the CPU spike, no longer work. Turns out they changed the Tooltip code to an XP-only API that breaks them on Win2K. I reported this bug and was told that the Sysinternals tools are being developed for XP and up only now.

Check the bottom of this thread: http://forum.sysinternals.com/forum_posts....=11972&PN=1 and the response on the next page.

Here's a link to the last fully working version of Process Explorer (11.31) for Windows 2000: http://www.filehippo.com/download_process_...c4452d074fdaa8/

I was also told that RegMon and FileMon are End of Life and being removed from microsoft's site September 1st 2009, so hurry up and download them if you want a copy. They say ProcMon is the replacement. ProcMon is cool and all (it doesnt officially support Win2K at the latest version but seems work fine nonetheless), but I hate how long it takes to stop a trace with it's "Disconnecting from Event Tracing for Windows (ETW) This may take 1 minute". Why does that have to take so long? FileMon and RegMon are instant. It does that even if you record the briefest of logs.

[CoffeeFiend]

Old news for most users of those tools.

And it's not surprising they're dropping support for a 10yo OS with < 1% market share (and still dropping at an incredible speed) like Win2k, which is also 4 versions behind.

I hate how long it takes to stop a trace with it's "Disconnecting from Event Tracing for Windows (ETW) This may take 1 minute". Why does that have to take so long? FileMon and RegMon are instant.

Might be something with Win2k or your hardware. I can "disconnect" from a sample trace with ~250k entries in about a whole second (that message flashes so fast you couldn't even read it, it's there for 30ms or so)

Edit: Win2k's market share: