If you recently had a power outage in your area, and you want to find out when the power was back on, there is a small trick to discover this information – by using wireless networks !
This trick only works if you live in Densely populated area with dozens of wireless access point around you, and only if the power outage was in the last few days.

Here’s a little explanation about how it works: every wireless access point has a timer that starts from zero when the router is loaded and this timer is constantly broadcasted with the access point name and other information.
The timer is also set back to zero from time to time (Depending on router model) without restarting the router, but in the short term, it’s still possible to use this timer to detect when the router was started.

When the power comes back after a power outage, all routers are loaded almost at the same time, and this time roughly represents the time that the power was back on.

The WifiInfoView tool of NirSoft, receives the wifi timestamp of every wireless access point, calculates the time when the timer was started and displays this time under the ‘Start Time’ column.
In order to discover when power was back on, you have to click the ‘Start Time’ column header for sorting the list by the timer of every access point.
If you had a power outage recently, you should see that many access points have almost the same start time value.

In the screenshot below, which was taken a few hours after real power outage, the ‘Start Time’ of multiple routers is between 15:37 – 15:39

Wifi Access Point Timestamp

It means that the power was back on around 15:37.
The reason for the 2 minutes time-difference between the access points is their loading speed. In the slower routers, the timer started 2 minutes after the power was back on.

The new version of USBDeview  tool (2.85)  allows you to create a shortcut on your desktop to stop, disable, enable,  or disable/enable a specific USB device.
In order to create the shortcut, simply right-click on the desired USB item, and then from the ‘Create Desktop Shortcut’ sub menu choose the desired action for the shortcut – Disable Device, Enable Device, Disable+Enable Device, or Disconnect Device.

Create USB Disable-Enable Shortcut

After the shortcut is created, you can optionally right-click on the shortcut, choose ‘Properties’ and then set a shortcut key to activate the shortcut. Be aware that the shortcut will only work with the specific USB device you selected.

Desktop USB Device Shortcuts

MobileFileSearch is a new tool for Windows that allows you to search files inside your Smartphone or tablet plugged to the USB port on your computer,  with Media Transfer Protocol (MTP).
You can search files by their name (using wildcard), their modified/created time and their size.

 MobileFileSearch also allows you to activate the search from command line and then export the files list to comma-delimited/tab-delimited/html5/XML/JSON  file, or copy the found files to the desired folder on your computer.  For example, you can execute a command that automatically copies all .mp4 videos generated by the camera of your Smartphone in the last day into a folder on your computer.

Mobile Device Search Options

Mobile Device Search Result

You can download the new MobileFileSearch tool  from this Web page.

The new version of WifiInfoView (2.55) allows you to connect specific access point from the GUI and from command-line.
In order to connect the desired access point from the GUI,  simply select the access point in the main window of WifiInfoView, and then choose ‘Connect Selected Access Point’ from the right-click context menu, or press F2.

Connect Selected Access Point BSSID

Selected BSSID Connected

If you want to connect the desired access point from command-line, you can use the  /ConnectAP command-line option.
In the /ConnectAP command-line option, you have to specify the wireless network name (SSID) and the MAC address of the access point (BSSID), for example:
WifiInfoView.exe /ConnectAP “mynet” “00-25-9C-15-1C-42”

You can download the new version of WifiInfoView from this Web page.

Windows Updates History Viewer is a new tool that displays the history of windows updates installation on your system.
This tool can extract the Windows updates information in 2 modes:

  1.  Extract the installed Windows updates history from your local system, using API.
  2. Extract the installed Windows updates history by reading directly the Windows updates database (DataStore.edb) from external drive or from remote computer on your network (If you have admin access to the remote computer)

Windows Updates History Viewer

For every Windows update history record, Windows Updates History Viewer displays the following fields: Title, Description, Install Date, Update Operation (Install, Uninstall, Not Started, In Progress), Operation Result (Succeeded, Succeeded With Errors, Failed, Aborted), Category, Information URL, Support URL, Uninstall Notes, Client Application ID, Service ID, Update ID, Revision Number, Unmapped Result Code, Server Selection, hResult.

You can download this tool from this Web page.

The new version of SoundVolumeView tool (2.00) allows you to easily create shortcut on your desktop that will execute one of the following actions: Mute,Unmute,Mute/Unmute Switch,Disable,Enable,Disable/Enable Switch, Set Default Device (Console, Multimedia, Communications), Increase Volume, Decrease Volume.
For example: You can create a shortcut to disable/enable your speaker or Microphone device,  set specific audio device as default,  mute / unmute the sound of your Web browser,  decrease / increase the sound volume of your media player, and so on.
In order to create the desktop shortcut, simply select the desired items in the main window of  SoundVolumeView , and then go to File -> Create Desktop Shortcut and choose the desired action to execute when the shortcut is activated. You can also use the ‘Create Desktop Shortcut’ submenu in the right-click context menu.

Create shortcut to mute,unmute,change sound volume

After creating a shortcut, you can right-click on it, click ‘Properties’ and then in the ‘Shortcut Key’ field you can select the desired key combination to activate the shortcut.

Shortcuts to mute,unmute,change sound volume

Mute and unmute shortcut key

The new version of OutlookAttachView (3.30) allows you to scan only the attachments of unread Outlook messages. In order to activate this feature, simply select the “Scan only unread messages” check-box inside the ‘Mailbox Scan Options’ window:

Scan only unread outlook attachments

There is also new command-line option that can be used together with the above feature: /extractallsetreadflag
The /extractallsetreadflag command extracts Outlook attachments from command-line and then set the read flag, so when this command is executed again, it’ll not extract the same Outlook attachment again (Assuming the the “Scan only unread messages” feature is turned on).


The new version of BulkFileChanger supports the ‘Last Saved’ and ‘Content Created’ date properties of Microsoft Office documents (Word, Excel).
You can set the ‘Last Saved’ and ‘Content Created’ fields to specific date/time, and you can also copy the ‘Last Saved’ and ‘Content Created’ fields
into the created/modified time of the file system and vice versa.

Be aware that this feature works on Windows 7 or later, and on 64-bit systems it’s recommended to use the 64-bit version of BulkFileChanger to
ensure that it’ll work properly with the ‘Last Saved’ and ‘Content Created’ properties.

TCP Pings in PingInfoView Tool

October 14th, 2019

The new version of PingInfoView (2.00) allows you to use TCP ping at the specified port number, instead of the default ICMP ping.
In order to use the new TCP ping feature, simply specify the host name or IP address with TCP  port number, for example: ,, www.nirsoft.net:443
If you don’t specify a port number , PingInfoView  will send ICMP pings, like in the previous versions.

You can download the new version of PingInfoView from this Web page.





GetNir is a new command-line tool that allows you to easily extract the needed data from NirSoft tools and any other tool that generates output in tab-delimited or comma-delimited format.
GetNir is a console application, it’s executed inside Command-Prompt window and the requested data is sent to stdout.
GetNir receives the tab-delimited or comma-delimited data from stdin, and because most of NirSoft tools allow you to send data in tab-delimited or comma-delimited format (csv) to stdout, the combination of GetNir and other NirSoft tools works very well.



Here’s some examples for what you can do with combination of GetNir and other NirSoft tools:


Get the current brightness of your monitor, using ControlMyMonitor tool ControlMyMonitor.exe /stab “” | GetNir “Current Value” “VCPCode=10”
Get current sound volume (in percent) of Speakers device, from SoundVolumeView tool SoundVolumeView.exe /stab “” | GetNir “Volume Percent” “Name=Speakers && Type=Device”
Get current application sound volume of VLC media player (in percent) , from SoundVolumeView tool SoundVolumeView.exe /stab “” | GetNir “Volume Percent” “‘Process Path’ LIKE *vlc.exe”
Get name and device name of the default audio render device from SoundVolumeView tool SoundVolumeView.exe /stab “” | GetNir “Name,DeviceName” “Default=Render”
Get the process ID and process name of the processes that listen to TCP ports 135-139, using CurrPorts tool: cports.exe /stab “” | GetNir &quotProcess ID,Process Path&quot “LocalPort >= 135 && LocalPort <= 139 && State=Listening”
Get the serial number of plugged USB device (only if the serial number is available), using the USBDeview tool: USBDeview.exe /stab “” | GetNir “Serial Number” “Connected=Yes”
Get the drive letter of plugged USB Mass Storage device, using the USBDeview tool: USBDeview.exe /stab “” | GetNir “Drive Letter” “Connected=Yes AND ‘Device Type’=’Mass Storage'”
Get the current version of Google Chrome from the installed applications list generated by UninstallView UninstallView.exe /stab “” | GetNir “Display Version” “‘Registry Name’=’Google Chrome'”
Get the install location of Adobe Reader from the installed applications list generated by UninstallView: UninstallView.exe /stab “” | GetNir “Install Location” “‘Display Name’ Like ‘Adobe Reader*'”
Get the current download bandwidth of Firefox Web browser, using AppNetworkCounter (Requires to run the command-prompt window as Administrator) AppNetworkCounter.exe /CaptureTime 5000 /scomma “” | GetNir “ReceiveSpeed” “ApplicationName=firefox.exe”
Get the process name and path of application that uses the most download bandwidth (in the last 5 seconds).
AppNetworkCounter sorts the output so the application with the most “Received Bytes” will be in the first line and then GetNir displays the application name and path only of the first line (/TopLines 1)
AppNetworkCounter.exe /CaptureTime 5000 /Sort “~Received Bytes” /scomma “” | GetNir “ApplicationName,ApplicationPath” “” /TopLines 1
Get the email address of ‘Nir Sofer’ from the address book of Outlook, using OutlookAddressBookView tool OutlookAddressBookView.exe /stab “” | GetNir “EmailAddress” “DisplayName=’Nir Sofer'”
Get the email address of ‘Nir Sofer’ (SMTP Record) from the AutoComplete file of Microsoft Outlook, using the NK2Edit tool nk2edit.exe /AddExportHeaderLine 1 /scomma “” | GetNir “Email/Exchange String” “DisplayName=’Nir Sofer'”
Get the name of the person who has the support@nirsoft.net email address from the AutoComplete file of Microsoft Outlook, using the NK2Edit tool nk2edit.exe /AddExportHeaderLine 1 /scomma “” | GetNir “DisplayName” “Email/ExchangeString=’support@nirsoft.net’ || SMTPAddress=’support@nirsoft.net'”
Get current CPU usage of Explorer.exe from the task manager of Windows, using SysExporter tool: sysexp.exe /Title “Windows Task Manager” /class SysListView32 /Visible Yes /stab “” | GetNir “CPU” “‘Image Name’=Explorer.exe”
Get RSSI value of the MyNet wireless access point, using WifiInfoView tool: WifiInfoView.exe /stab “” | GetNir “RSSI” “SSID=MyNet”
Get the SSID, MAC Address, and RSSI of the access point you are connected at this moment WifiInfoView.exe /stab “” | GetNir “SSID,MACAddress,RSSI” “Connected=Yes”
Get the cookies of youtube.com stored in Chrome Web browser, using the ChromeCookiesView tool ChromeCookiesView.exe /stab “” | GetNir “Name, Value” “‘Host Name’ LIKE *youtube.com”
Get the number of established TCP connections of every firefox.exe process, using ProcessTCPSummary tool ProcessTCPSummary.exe /stab “” | GetNir “Process ID,TCP Established” “‘Process Name’ = firefox.exe”
Get the name of your active display adapters, using DevManView tool (Requires to run the command-prompt window as Administrator) DevManView.exe /AddExportHeaderLine 1 /stab “” | GetNir “DeviceName” “DeviceTypeCode=Display And Connected=Yes”
Get the drive letter and name of active CD-ROM/DVD devices, using DevManView tool (Requires to run the command-prompt window as Administrator) DevManView.exe /AddExportHeaderLine 1 /stab “” | GetNir “DriveLetter,DeviceName” “DeviceTypeCode=CDROM And Connected=Yes”
Get the window title of Chrome Web browser, using GUIPropView GUIPropView.exe /stab “” | GetNir “Title” “Visible=Yes && ProcessFilename Like *chrome.exe”
Scan your local network and get name, MAC address, and manufacturer name of the device in IP address, using Wireless Network Watcher: WNetWatcher.exe /stab “” | GetNir “DeviceName,MACAddress,NetworkAdapterCompany” “IPAddress=”
Get your current wireless network connection speed, using WirelessConnectionInfo tool: WirelessConnectionInfo.exe /stab “” | GetNir “Value” “Description=’Receiving rate'”
Get the process name and path of the application with most active disk-write activity in the last 5 seconds. The output is first sorted by AppReadWriteCounter so
the application with the largest “Write Bytes” is in the first line, and then GetNir takes only the first line (/TopLines 1)
AppReadWriteCounter.exe /CaptureTime 5000 /sort “~Write Bytes” /scomma “” | GetNir “ApplicationName,ApplicationPath” “” /TopLines 1
Get the next 3 tasks (Task Name and Next Run Time) that the Task Scheduler of Windows going to run. TaskSchedulerView.exe /sort “Next Run” /stab “” | GetNir “TaskName,NextRun” “NextRun != ”” /TopLines 3
Get the tasks that are currently running and their description, using TaskSchedulerView TaskSchedulerView.exe /stab “” | GetNir “TaskName,Description” “Status=Running”
Get the command-line that is used to open .mp4 files on your system, using the FileTypesMan tool. (Requires to run the command-prompt window as Administrator) FileTypesMan.exe /SelectedExt .mp4 /AddExportHeaderLine 1 /scomma “” | GetNir “Command-Line” “Name=Open”

You can download GetNir from this Web page.