SysManager for Windows

One portable app for keeping a Windows PC healthy — 58 tabs of network diagnostics, cleanup, privacy controls, app updates and hardware health, with no telemetry and no account.

A quick tour: Dashboard, Tweaks Hub, Resource History, Settings Watchdog, Scheduled Maintenance, CLI, Ping, Disk Analyzer. More below ↓

⚡ Get it in one line

winget install laurentiu021.SysManager

…or download the portable .exe — self-contained, no installer, no .NET runtime needed. Runs on Windows 10/11.

> ⭐ If SysManager saves you a reinstall or a head-scratch, please star the repo — it's the single biggest help for a solo project and how others discover it.

What it is
Why SysManager?
Features — all 58 tabs, grouped
Screenshots
Install
- Why portable, and why there is no installer
- Verifying the download
Uninstalling
Build from source
First-time flow
Documentation — including the roadmap
Reporting bugs and requesting features
Tech stack
Privacy
Contributing
Support
License

What it is

SysManager is a local-first desktop tool for keeping an eye on a Windows PC. It rolls network diagnostics, system health, Windows Update, app management (updates, bulk install, uninstall), privacy controls, context menu management, secure file shredding, driver inventory, safe deep cleanup, and a readable Event Log viewer into a single tabbed WPF app.

Everything runs on the machine itself. No cloud, no telemetry, no account.

> When SysManager uses the network. There is no background phone-home — the app > never sends usage data. Network access only happens for features you explicitly > use: the network diagnostics (ping / traceroute / speed test), and downloading an app > you chose to install via winget. App icons in the Bulk Installer are an opt-in > extra — off by default, and only when you tick "Load app icons from the web" does it > fetch them from Google's favicon service. Nothing else leaves your PC. > > The one call SysManager makes on its own is the version check: at startup it asks > GitHub's public releases page which release is newest, so it can tell you when a fix > is available. Nothing about you or your PC is sent. It runs at most once a day, and > the About tab has a checkbox — "Check GitHub for a new version when SysManager > starts" — that switches it off entirely. The Check for updates button still works > on demand either way. > > The local diagnostic log keeps 14 days of rolling files in > %LocalAppData%\SysManager\logs, and your Windows user name is replaced with [user] > in every line — including inside error messages — so a log you choose to share does > not carry your account name with it.

Built with gamers in mind — live ping overlays for CS2, FACEIT, PUBG and streaming endpoints, Steam/Epic/Battle.net/Riot/GOG/EA launcher cache cleanup, and an honest "is it my PC, my ISP, or the server?" verdict.

Beyond those, the rest of the 58 tabs cover performance tuning, DNS and hosts editing, duplicate files, battery health, processes with plain-English descriptions, startup entries, shortcut cleanup, app blocking, new-install alerts and Windows optional features. The full list is below, grouped as the sidebar groups them.

Why SysManager?

Most Windows utilities do one thing, or bundle telemetry and upsells. SysManager is a single, local-first app that covers the whole maintenance surface — and it's fully open source.

	SysManager	BleachBit	CCleaner	Wintoys	O&O ShutUp10	HWiNFO
Open source	✅	✅	❌	❌	❌	❌
No telemetry / no account	✅	✅	❌	❌	✅	✅
Fully local (no cloud)	✅	✅	❌	✅	✅	✅
Portable single `.exe`	✅	⚠️	❌	✅	✅	✅
Code-signed binary	❌	⚠️	✅	✅	✅	✅
Disk / cache cleanup	✅	✅	✅	✅	❌	❌
Privacy & telemetry toggles	✅	⚠️	⚠️	✅	✅	❌
Network diagnostics (ping / traceroute / speed)	✅	❌	❌	❌	❌	❌
Disk / RAM SMART health	✅	❌	⚠️	❌	❌	✅
App updates + bulk install (winget)	✅	❌	❌	⚠️	❌	❌
Game-server latency tools (ping presets, timer resolution)	✅	❌	❌	❌	❌	❌
Free	✅	✅	⚠️	✅	✅	✅

⚠️ = partial, paywalled, or limited. Comparison reflects the free editions as of 2026; features evolve — corrections welcome via an issue.

BleachBit is here because it is the rival that ties on the rows above. A table whose top three rows exclude the best-known open-source Windows cleaner is cherry-picked, and a reader who knows BleachBit spots that immediately. Its ⚠️ cells are specifics, not hedges: it ships a portable zip of many files rather than one .exe; it cleans tracking data thoroughly but does not toggle Windows' own telemetry settings; and its current Windows release publishes a detached GPG signature for the zip rather than stating an Authenticode signature, which is a different thing from what stops the SmartScreen warning. Licences differ — SysManager is MIT, BleachBit is GPL-3.0 — which is why that row no longer names one.

The signing row is the one where SysManager loses, and it is here on purpose — a table a project wins every row of tells you nothing. Builds are unsigned, so Windows shows a warning on first launch. Why, what that warning looks like, and how to check the download yourself: First launch · Verifying the download. Sponsorship goes toward that certificate — see Support.

Features

Sidebar navigation

The sidebar organises 58 feature tabs into 12 groups — 11 collapsible groups plus a flat top-level Dashboard entry — so you can find what you need without scrolling through a flat list. The active tab stays marked with an accent bar, selected background, and stronger label while you move between groups. Every tab row and every group header is also keyboard-operable with a visible focus cue. All 58 tabs are fully implemented:

Group	Tabs
🏠 Dashboard	Dashboard
🔧 System	System Health · Windows Update · Performance Mode · Services · Startup Manager · Windows Features · Restore Points · Task Scheduler · Boot Analyzer · System Fixes · Tweaks Hub 🔬
🎮 Gaming & Profiles	Gaming Profile 🔬 · Standby List Cleaner · Timer Resolution · CPU Core Affinity · Display Profiles
📊 Monitor	Process Manager · Resource History 🔬 · Camera/Mic/Location · New App Alerts · File Lock Detector · Settings Watchdog 🔬 · Bandwidth Monitor
🧹 Cleanup	Quick Cleanup · Deep Cleanup · Shortcut Cleaner · Scheduled Maintenance 🔬
💾 Storage	Disk Analyzer · Duplicate Finder
🌐 Network	Ping · Traceroute · Speed Test · Network Repair · DNS & Hosts
📦 Apps	App Updates · Bulk Installer · Uninstaller
🛡️ Privacy & Security	Privacy & Telemetry · File Shredder · App Blocker · Debloater & Ads · Browser Cleaner · Edge/OneDrive Remover · Defender Tweaks · Notification Blocker 🔬
🎨 Customization	Context Menu · Dark Mode Scheduler · Volume Control
ℹ️ Info	Drivers · Battery Health · System Logs · System Report · Legacy Panels · About
⚙️ Advanced	Profile Export / Import · CLI Interface 🔬 · Environment Variables

> 🔬 = Preview — fully implemented and usable, marked in-app while it settles in.

Groups expand and collapse with a click. Cleanup opens with the app — every group used to start collapsed, so the first screen showed twelve category names and not one feature. Only one group opens, because the viewport has room for exactly one: at a 820px window the twelve collapsed groups already fill almost all of it, so expanding a second pushes category headings out of sight. Collapsed groups show a child count badge, a written one-line summary of what the group covers, and a tooltip with the full list. Dashboard renders as a flat top-level entry without an expander arrow. Each tab shows a slim progress bar under its name when performing a long-running operation, so you always know which tab is working.

Theme customization

A palette button in the top-right corner opens an appearance popup with:

Dark mode — 6 curated presets (Midnight Indigo, Deep Ocean, Dark Forest, Neon Rose, Violet Night, Warm Ember)
Light mode — 6 curated presets (Clean Indigo, Sky Breeze, Warm Sand, Mint Fresh, Soft Blossom, Lavender)
Auto mode — follow the Windows light/dark setting, and keep following it. It changes with Windows while the app is open, whether you flip it by hand, on a Windows schedule, or from SysManager's own Dark Mode tab. Your colour family is kept across the switch: on Warm Ember, going light gives you Warm Sand rather than the default. Picking any preset turns Auto off
Custom mode — free hex input for accent, background, surface, and text colors
Background shade slider for fine-tuning lightness/darkness
Reset to default theme — one click back to the shipped dark theme and shade, from any mode
Settings persist between sessions

Custom colours cannot make the app unreadable. Text is adjusted to stay legible against every surface it lands on, and a panel colour that leaves no room for readable text at all — a near-white card on a near-black background, say — is nudged toward the background until it does. The twelve built-in themes are unaffected by that correction; their surfaces already sit near their backgrounds. If a result is still not what you wanted, Reset to default theme puts the shipped theme back and survives a restart.

Graph lines follow the theme rather than fighting it. The Ping, Bandwidth Monitor and Resource History charts each draw with a fixed set of colours — blue is CPU, purple is memory — and those colours were chosen against a dark card. Switching to a light theme darkens each line by exactly as much as it needs to stay at 3:1 against the card it is drawn on, so the line remains followable without a second palette to maintain and without changing which colour means what. Brightness moves, hue does not; on the six dark presets, where the original colours already clear the bar, nothing changes at all.

Keyboard navigation

The app is operable without a mouse, and the control you are on is always visible. Tab moves forward, Shift+Tab back, Space presses a button or ticks a checkbox, and the arrow keys move within a table or a row of filter chips. In the sidebar, Enter also opens the tab or group you are on, the way it opens a folder in File Explorer. Opening the appearance panel moves focus into it, Tab cycles the themes inside it, and Escape closes it and puts focus back on the button you opened it from.

Escape also stops whatever the open tab is doing — a disk scan, a cleanup, a speed test — on all fifteen tabs that can be cancelled. It only acts while something is running, and only after the control you are on has had its own chance to use the key, so it still closes a drop-down or undoes a text edit first.

F5 re-reads the tab you are on, across all forty tabs that have something to look at again — the process list, the startup entries, the event log, the installed apps. Each tab names its own refresh, so F5 runs exactly what its own toolbar button runs and nothing else: nothing that cleans, deletes, applies or uninstalls is reachable from a bare keypress. Pressing it during a refresh that is already running does nothing rather than starting a second one.

Ctrl+F jumps to the search box on the twelve tabs that have one, and selects whatever is already typed there so you can replace it straight away — the same thing the key does in a browser. On a tab with nothing to filter it does nothing at all, rather than moving your caret somewhere unexpected.

The focus outline is deliberately two thin lines of opposite shade — one light, one dark — rather than a single accent-coloured ring. A single colour cannot be visible everywhere: it has to show up on a purple primary button, a red delete button, a grey secondary button and a plain card, and any one colour disappears against at least one of those. With two, one line always contrasts whatever is underneath. Measured across all 12 themes, the outline stays at 4.5:1 or better against every surface it is drawn on — above the 3:1 WCAG asks of a non-text indicator.

Screen readers

The six controls that do something you cannot take back explain themselves, not just their label. Landing on Shred All announces the button and then "Overwrites every item in the list so it cannot be recovered, then deletes it. This cannot be undone, not even from the Recycle Bin." The same goes for Uninstall selected, Kill process, Delete preset, Delete selected shortcuts, and the Run as administrator button that appears on the 31 pages needing elevation.

Before that, the red colour and the confirmation dialog were the only warnings, and neither reaches someone who cannot see the screen — the dialog arrives after the button has already been pressed. The explanation is not a tooltip for the same reason: a tooltip needs a mouse hovering over the control, so it never reaches someone who tabbed to it, and it is not reliably handed to assistive software. It is kept to those six deliberately. An explanation on every button in the app would make it slower to navigate, not clearer.

Every tab also reads out what it is doing as it works. The line at the bottom of each tab — "Scanning…", "Removed 1,204 files", "Scan complete." — is announced on all 53 tabs that have one, as are the SFC and DISM results when a system repair finishes and Deep Cleanup's scan and clean summaries. Announcements are polite, so they wait their turn rather than cutting across whatever you are reading.

What is deliberately not announced matters just as much. Deep Cleanup's percentage changes several times a second and its current folder changes per directory; the repair ETAs tick continuously. Reading those aloud would talk over you without telling you anything, so each tab announces the coarsest line it has and leaves the fast-moving numbers on screen only. Both halves of that are enforced by a test, because a change that announced everything would look like an improvement.

Context Menu Manager

Manage Windows Explorer right-click entries — toggle them on or off without deleting anything (uses the standard LegacyDisable registry mechanism):

Presets: Win10 Default (classic full menu), Win11 Default (modern compact), Custom
The preset currently applied is marked with a tick, so you can see which style you are on without applying one
Selecting a preset resets to clean defaults, disabling third-party entries — re-enable individually
Win10/Win11 style toggle — switch between classic and modern menu (restarts Explorer)
Visual preview on hover — real screenshots of each menu style
Entry explanations — human-readable descriptions for common entries
"Applies to" column — shows whether entry affects Files, Folders, Desktop, or Directory Background
HKCU fallback — system-protected entries can be toggled via user-level registry override
Admin elevation banner with one-click restart as administrator

Environment Variables

Edit Windows environment variables without the cramped built-in dialog:

User and System scopes in one grid — filter by scope, search by name or value
In-place value editing, plus add and remove variables
Dedicated PATH editor for PATH-like variables — reorder directories, remove entries, and strip duplicates in one click
Missing folders highlighted so you can spot dead PATH entries at a glance
Local until Apply: changes are staged and each scope gets a one-time safety snapshot before its first write. New User snapshots stay under HKCU; System snapshots use access-controlled HKLM storage, and only that protected source can restore machine-wide variables
Changes broadcast to Windows, so new terminals pick them up without a reboot
System-scope edits need administrator rights (standard elevation banner); user variables can be edited without it

Dark Mode Scheduler

Switch the Windows light/dark theme instantly — apps only, or the taskbar and Start too
Schedule it — set a dark time and a light time (e.g. 19:00 / 07:00) and the theme follows automatically; handles the overnight switch correctly
Applies immediately with no sign-out, no admin needed, and is fully reversible
Honest about its limits — the schedule runs while SysManager (or its tray) is open; it's not a background Windows service

Volume Control

Per-app volume mixer — lists every app currently playing on your default playback device, each with its own volume slider, mute toggle, and a live peak meter
Live and lightweight — the app list reconciles on a ~1-second loop and the meters update on a shared timer, both paused while the tab is hidden so it costs nothing in the background
Real names and icons — resolved from each audio session's process (with a safe fallback for protected processes), including the Windows "system sounds" session
Per-app output routing — send one app to your headset and another to your speakers. Where Windows exposes the routing interface, each app gets an output-device picker in the row; on builds where it doesn't, the row shows a "Choose output device…" button that opens Windows' per-app sound settings so you're never left without a path. Plug a headset in while the tab is open and it appears on its own — the device list is re-read every ten seconds, and each app keeps the destination you picked for it. Windows does not report which device an app is currently using, so the picker says "Choose a device" rather than guessing: the override you set stays in force in Windows, but SysManager will not claim to know it after a restart
Volume presets — save the current per-app volumes and mutes as a named preset (e.g. "Gaming", "Focus") and re-apply it in one click; presets are keyed by app so they work across restarts, and are stored locally in %LocalAppData%\SysManager
Tray shortcut — a "Volume mixer" item in the system-tray menu opens the app straight to this tab

System Logs (Windows Event Log, friendly)

Browse System, Application, Security, and Setup logs
Each event gets a plain-English explanation and recommended next steps
Filter by severity and time range, plus full-text search
Mark any event with the flag button to keep it findable while you keep scrolling or change filters. "Clear marks" removes them all, including any a filter is hiding
Export to CSV, with a "search online" link for unknown events
The Security log requires administrator rights. Without them the page says so outright rather than showing an empty list that looks like "no events"

System Report

One-click, read-only snapshot of the whole machine: OS, CPU, memory (with per-slot module detail), GPU, motherboard, storage health, and active network adapters
Storage section carries SMART detail when available — temperature, wear %, and power-on time — reusing the same disk-health data as the System Health tab
Export as plain text, a styled self-contained HTML page, or structured JSON — or copy the text straight to the clipboard
Fully local: nothing on the system is changed and the report is written only to the file you choose — nothing leaves the machine

System Health

OS / CPU / RAM / storage overview
SMART data per disk: temperature, wear %, power-on hours, read/write errors
Colour-coded verdict per drive
Memory diagnostic that scans the last 30 days of WHEA events for RAM errors
Schedule the Windows Memory Diagnostic at next boot
Read-only chkdsk with auto-discovered NTFS/ReFS drives and multi-select
BIOS & firmware — BIOS version/date/vendor, motherboard model, boot mode (UEFI/Legacy), and Secure Boot status, all read-only. A Find BIOS update button opens the right manufacturer support page (ASUS, MSI, Gigabyte, ASRock, Dell, HP, Lenovo, …) for the detected board, and Copy info grabs the model + BIOS version for support searches. SysManager never flashes firmware itself.

Restore Points

List every Windows System Restore point — sequence number, date, description, and type — newest first
Create a restore point with an optional custom description (enables System Restore on the system drive first if it's off)
Restore the PC to a selected point, with a clear confirmation that warns Windows will restart and that programs/drivers added since that point are removed
Admin elevation banner — viewing the list works unprivileged; creating and restoring need administrator rights

Legacy Panels

One-click launcher for the classic Windows applets that newer releases keep hiding: Control Panel, Sound, Power Options, Network Connections, Region, System Properties, User Accounts, Device Manager, Computer Management, Programs and Features, Mouse, and Date and Time
Pure launchers — each just opens the built-in panel; nothing is modified, so no elevation or confirmation is needed
The applet list is fixed in code, so no typed input ever reaches the launcher

System Fixes

One-click repairs for common Windows breakages, each with a clear description and a confirmation before it runs:

Reset Windows Update — stop the update services, clear the SoftwareDistribution and catroot2 caches, and restart the services
Reinstall WinGet — re-register the App Installer when app installs/uninstalls fail
Set up Auto Sign-in — opens the built-in User Accounts dialog, so Windows stores the credential securely and SysManager never handles your password
Live output, honest success/failure reporting, admin elevation banner
Network-stack reset (Winsock / TCP-IP / DNS flush) lives on the Network → Network Repair tab, which offers those as individual one-click tools.

Tweaks Hub

One place for safe, reversible optimizations that are otherwise spread across tabs — review them all in a single list, tick the ones you want, and apply or undo in bulk
Essential group — low-risk, per-user tweaks that apply without administrator
Advanced group — higher-impact, machine-wide tweaks behind a caution banner (need administrator)
Apply Selected / Undo Selected with a live count of pending changes — nothing is written until you click, and each tweak is individually reversible
SysManager tries to create a System Restore point before the first change in a session (best-effort — needs administrator and Windows' once-per-24h limit); the status line tells you when one was actually created. Every tweak is also individually reversible regardless
Each row shows whether it's currently Applied or at the Windows Default; it's a front-end over the same reversible operations as the Privacy & Telemetry tab

Boot Analyzer

Shows how long your PC takes to boot — total, core (main path), and desktop ready-up time — across recent boots, read from the Windows boot-performance history (Diagnostics-Performance log)
A trend line tells you whether the last boot was faster or slower than your recent average
Lists the apps, drivers, services, and devices Windows flagged as slowing boot, with the delay attributed to each
Read-only; reading the log requires administrator (elevation banner shown)

Task Scheduler

Browse every Windows scheduled task with its state, type, last and next run, and what the task is for in Windows' own words — hovering that shows which publisher created it, which is what decides the type label
Color-coded by type — Third-party, well-known Telemetry (Compatibility Appraiser, CEIP, Feedback, Error Reporting), and System — so it's obvious what's safe to touch
Enable / disable any task; disabling is fully reversible and never deletes the task — System tasks show an extra warning before you disable them
Filter by name or path, and optionally hide system tasks to focus on the rest
Stoppable — the task scan can take a while on a machine with a full task tree, so there is a Cancel button while it runs, and whatever was already listed stays on screen. Refresh is disabled during a scan instead of stacking a second one on top
Changes need administrator and are verified by reading the task's state back
Overlaps Startup Manager on purpose: that tab lists the third-party tasks among these next to the programs that launch at boot, because that is all the shorter answer to "why is my PC slow to start" needs. It is the same task in both places, so switching it in one tab applies in the other as soon as that tab refreshes — the two lists are not kept in step live

Windows Update (Windows Update Agent COM API)

Direct Windows Update Agent COM integration (Microsoft.Update.Session) — installs everything WUA can offer, including optional drivers and firmware that PSWindowsUpdate filters out client-side
Unified DataGrid for everything in one scan — standard, feature upgrades, optional drivers, and hidden updates
Categorized with colored pills: Security, Cumulative, Defender, Driver, Servicing, .NET, Feature upgrade, Hidden — click headers to sort
Per-update checkbox selection with Select all / Deselect all — install exactly what you want, skip what you don't
Live progress per update: Connecting → Downloading → Installing → ✓ Installed streamed to the console as it happens
Per-row Status column updated in real time (Pending… → Downloading… → Installing… → Installed / Installed (reboot required) / Failed / Not applied)
Honest aggregate reporting: Installed X/Y. Failed: Z. Not applied: W.
Reboot detection — toast notification if any update requires reboot
Pending-reboot check, update history (last 30 — via PSWindowsUpdate)
Admin banner with a one-click "Run as Administrator" relaunch
PSWindowsUpdate is optional now (used only for the History view); install it from a normal, non-administrator SysManager session. The installer validates the official PowerShell Gallery endpoint and uses the current-user module directory. A Check now button confirms on demand whether the module is present, so you don't have to run Update History to find out
Update timing & deferral — defer feature updates by N days while security patches keep flowing, pause all updates for a bounded window (max 35 days, then Windows auto-resumes), or restore defaults. Uses the documented Windows Update policy keys and is fully reversible. No "disable updates forever" option by design — the strongest action is a bounded pause, so the machine is never left permanently unpatched.

App Updates (winget)

Scan for upgradable packages
Sort by name, ID, version, or source via clickable column headers
Select all or individual packages, bulk upgrade with per-package status

Quick Cleanup

Clear TEMP folders
Empty the Recycle Bin
Run SFC /scannow and DISM /RestoreHealth in the background — keep using the app while they grind
Component store (WinSxS), reported before it is touched. WinSxS routinely holds several gigabytes of superseded Windows components, and it is where the free editions of the mainstream cleaners find their biggest number. "Check component store" runs the read-only DISM /AnalyzeComponentStore and tells you what Windows itself says is reclaimable; only then does "Clean up component store" become clickable, and only behind a confirmation that states the cost — after a cleanup, updates already installed can no longer be uninstalled. /ResetBase is never used, and a test makes it impossible to add by accident

Deep Cleanup

Scan-first: every category is discovered with size + file count before a single byte is deleted. You pick what goes.
Says when administrator rights are what's stopping it. Six of the buckets live in the Windows folder — the Windows Update download cache, Delivery Optimization, the Installer patch cache, Windows\Temp, Prefetch and the blue-screen memory dumps — and without administrator they are still scanned and counted but cannot be deleted. They used to show as "skipped" with no reason given; the tab now says so at the top, and offers to restart elevated
System buckets: NVIDIA / AMD / Intel installer leftovers, Windows Update cache, Delivery Optimization cache, Windows Installer patch cache, TEMP, Prefetch, crash dumps, old CBS logs, DirectX shader cache, Recycle Bin on every drive.
The two biggest wins on a machine that has crashed, both new and both scoped to exactly the files they name: the blue-screen memory dumps (MEMORY.DMP is sized to your RAM, so it is routinely gigabytes — never ticked for you, because deleting it ends any investigation into the crash) and the Explorer thumbnail & icon cache, which Windows rebuilds and whose clearing is the standard fix for blank or wrong thumbnails. Its folder also holds your recent-files jump lists, so only thumbcache_*.db and iconcache_*.db are counted, and only those are deleted.
Gamer buckets — launcher caches only, never game files or logins: Steam (appcache, htmlcache, depotcache, shader cache), Epic Games Launcher, Battle.net, Riot / League of Legends, GOG Galaxy, EA Desktop.
Windows.old is detected and flagged as irreversible, never selected by default.
Safe by design: never touches browsers, passwords, the registry, active drivers, or actual game files. Locked files are skipped, never forced.

Large files finder (part of Deep Cleanup)

Scan Downloads, Documents, Desktop, Videos, Pictures, Music, Program Files, or a whole drive.
Configurable min-size (default 500 MB) and top-N (default 100).
Read-only — only "Show in Explorer" and "Copy path" actions. Deletion is disabled by design so a mis-click can never hurt anything.

Startup Manager

Lists the programs that run at Windows boot: the Run and RunOnce registry keys for both your account and the whole machine, including the separate location 64-bit Windows uses for programs installed by a 32-bit installer, plus both Startup folders and scheduled tasks belonging to programs you installed
Windows' own scheduled tasks are deliberately left out, so the list stays short enough to read and nothing here is something you should not touch. Task Scheduler is the tab that shows every task, Windows' included — a third-party task appears on both, and it is the same task in both places
Also reads the "policy" startup list that Task Manager does not show at all — a favourite hiding place for bundled software, since you can switch off everything visible, restart, and it still starts. Windows gives an app no way to disable these, so each one is labelled "Set by a system policy — managed elsewhere" instead of being offered a switch that would silently do nothing
Toggle on/off without deleting the original entry (same mechanism as Task Manager) — the disable flag is written to the location Windows actually reads for that kind of entry, so a disabled item really stays down
A Signature column that says whether Windows can confirm the publisher. The Publisher column next to it comes from the file's own version info — a string any program can set to "Microsoft Corporation" — so on its own it is a trust badge with nothing behind it. This checks the file's certificate instead, using the same chain validation the in-app updater uses, and shows one of three things: Verified ("Windows can confirm this really comes from Google LLC"), Unsigned, or Check failed. Programs whose command doesn't point at a readable file get no badge at all rather than a guess.
- Unsigned is grey, not a warning. Most small utilities are unsigned and so is SysManager itself; the tooltip says so in as many words. Amber is reserved for a file that is signed and whose signature does not hold up — the one case here worth a second look.
- The verdict is Windows' own, from the same check behind Explorer's Digital Signatures tab, so it agrees with what Windows tells you elsewhere. It asks for no revocation lookup and answers from your PC only, so opening the tab never waits on the network and downloads nothing.
- Windows components count as signed too. Windows signs most of its own programs through a separate catalogue file rather than inside the program, and both are read — so powershell.exe, cmd.exe and the rest are confirmed rather than listed as unsigned. Anything still marked Unsigned after that is genuinely unsigned.
Sort by name, publisher, location, safety, status, signature, or startup impact via clickable column headers
Plain-language description for recognised programs (from the built-in database) instead of a raw command line, plus a Safety chip — Windows / Known app / Not recognised — so you can tell what an entry is before deciding whether to turn it off
Shows name, publisher, and enabled/disabled status; the full command path is on hover
A Location column saying where the entry actually lives — which registry Run key and hive, which Startup folder, or Task Scheduler. This is the difference between an entry you can switch off yourself, one that needs administrator rights, and one a system policy holds in place; long paths shorten from the end, with the full value on hover
A Startup impact column — how long Windows measured that program delaying your last start-up, from Windows' own boot-performance events rather than an estimate. Sorts by the real delay, so the slowest entry comes first. A figure appears only when Windows' report matches the entry exactly, by name or by executable file name: a near-match would blame the wrong program, and this is the tab where you act on that. Blank means Windows measured nothing, never "0 s". Requires administrator rights, because reading those events does — the banner at the top of the tab says so
Open file location in Explorer

Windows Features

Lists all Windows optional features with current state (Enabled/Disabled)
Toggle enable/disable per feature with confirmation dialog
Categorized: Virtualization, Networking, Development, Media & Print, Legacy
Shows reboot-required status after toggling
A Windows restore point is attempted before the first toggle of the session, shared with the other tabs that change system settings. This is the tab where it matters most: turning a feature back on is a second servicing operation that can itself fail, and unlike removing a Store app, a restore point really does cover this kind of change. Mentioned only when Windows actually made one, and never on a toggle that failed
Search/filter across all features
Requires administrator privileges for modifications

Duplicate Finder

Three-pass scan: group by size, partial-hash pre-filter, then full SHA-256
Duplicate groups sorted by wasted space (descending)
Preset folders or custom folder selection
Configurable minimum file size filter
Suggests which copy to keep — one file per group is badged Keep, chosen as the oldest (usually the original). The rule is stated on screen rather than applied silently, each row shows its date so you can check it, and "Keep this one" moves the badge when you know better — a copy that preserved its timestamp, or a cloud-sync rewrite, will fool the heuristic
Read-only — "Show in Explorer", "Copy path" and "Keep this one" only. Nothing is deleted, moved or renamed; deciding which of five identical photos to remove is done by you, in Explorer

Disk Analyzer

Space breakdown by top-level folders with drill-down navigation
Drive usage bar with total/used/free
Preset paths (fixed drives, user profile, Program Files) or custom browse
Show in Explorer for each folder
Export CSV saves the breakdown to a file you choose the location for, with both the readable size and the raw byte count — so a spreadsheet can sort it, which it cannot do with "9.8 GB" and "10 MB" as text. Useful for comparing before and after a cleanup without running a minutes-long scan twice from memory
Says what it doesn't count — four Windows system areas ($Recycle.Bin, System Volume Information, Windows\WinSxS, Windows\CSC) are skipped because they are slow or unreadable, and junctions are never followed, since following one would double-count or lead outside the folder you asked about. WinSxS alone is often several GB, so the tab states on screen that its total can be smaller than the free space Windows reports, and names the exact folders on hover
Folders Windows wouldn't let it fully read are marked, so a partial figure never looks like a complete one
Remembers your last scan of each folder and shows what changed — "3.2 GB larger than your last scan on 12 Jul" — so a one-off number becomes an answer to "why did my disk fill up?". It is always phrased as since your last scan, never as live monitoring, because you choose when to scan. Stored only on this PC and never carried to another (folder sizes here mean nothing there)

Process Manager

Lists running Windows processes with PID, memory, threads, status, and when each one started
Real-time filter by name, description, category, or PID
Sort by memory, CPU usage, name, category, PID, or start time via clickable column headers
Export CSV saves the list as currently filtered to a file you choose the location for — someone who has typed a filter to isolate a suspect gets that list, not all ~470 rows. Both the readable and the raw values are included, so a spreadsheet can sort by size and by start time
Started column — when each process began. "Something is eating my CPU" is usually answered by when it appeared: a process that started three minutes ago is a very different suspect from one that has been running since you turned the PC on, and sorting by it groups everything that arrived recently. Processes whose start time Windows will not reveal — most system processes, unless you run as administrator — show a dash rather than a made-up date
Built-in description database — 108 common Windows processes and popular applications with plain-language descriptions and categories (System, Browser, Development, Communication, Media, Gaming, etc.). The description sits under each process name and the category has its own sortable column, so a process you don't recognise explains itself without a web search — including the Windows system processes whose own description Windows withholds unless SysManager is elevated
Safety column — every process is labelled Windows, Known app or Not recognised, with a hover explanation of what that means for ending it. Sortable, so everything unrecognised can be grouped together at a glance
Signature column — whether Windows can confirm who made the running program, read from the file's own certificate. This is a different question from Safety, and the difference is the point: Safety recognises a process by name, so a copy of svchost.exe sitting in a downloads folder inherits the real one's label. The certificate belongs to the file. Shows Verified ("Windows can confirm this really comes from Google LLC" on hover), Unsigned, or Check failed
- Unsigned is grey, not a warning — most ordinary programs are unsigned, and so is SysManager itself. Amber is kept for a file that is signed and whose signature does not hold up, which is the one case worth a second look
- Processes whose file Windows will not let SysManager read — most system processes, unless you run as administrator — get no badge at all rather than a guess
- The verdict is Windows' own — the same check behind Explorer's Digital Signatures tab. It asks for no revocation lookup and answers from your PC only, and it runs just for processes that have just appeared, so a tab refreshing every second neither re-checks the same programs nor reaches for the network
- The list appears first and this column fills in behind it. Checking a signature takes Windows about a fortieth of a second per program, which adds up over everything running, so the process list is on screen straight away and the badges arrive over the next couple of seconds rather than the tab making you wait for them
- Windows components count as signed too — Windows signs most of its own programs through a separate catalogue file rather than inside the program, and both are read, so svchost.exe, conhost.exe and the rest are confirmed rather than listed as unsigned. What is still marked Unsigned is genuinely unsigned
Kill process with confirmation dialog, and the warning matches the real cost. Processes Windows genuinely cannot survive losing (winlogon, csrss, lsass, …) are refused outright. Security and servicing processes (Defender's engine, Windows Installer) can be ended, but only after a prompt that says plainly it can switch off protection or interrupt an update part-way, and that a restart does not undo that. Other Windows components get a warning that a feature may look broken until you sign out. Everything else gets the ordinary "unsaved work may be lost" confirm
Open file location in Explorer

Resource History

Historical CPU, RAM, GPU usage and temperatures — the app samples your vitals every 10 seconds in the background (including while minimized to the tray), so you can investigate what caused a spike yesterday instead of seeing only the live moment
Scrollable timeline — pick a range (last hour, 6 hours, 24 hours, 7 days, 30 days); the usage chart (CPU / RAM / GPU %) and a separate temperature chart (CPU / GPU °C) redraw to fit, downsampled so even a 30-day view stays smooth
Configurable retention — keep 7, 14, or 30 days of history; older samples are pruned automatically
Export to CSV — save the visible range for analysis in Excel or elsewhere
Strictly local: history is stored in your %LocalAppData%\SysManager folder and nothing ever leaves the machine

Bandwidth Monitor

See your network usage at a glance — live total download and upload speed with a rolling throughput chart (the last ~2 minutes), so you can spot a sudden upload (a background sync, an update, something unexpected) the moment it starts
Who's using the network — a per-app list showing which programs are talking, how many connections each holds, and the remote ports involved. This works with no administrator rights and no setup — it reads the same connection tables Windows exposes to any user
Precise per-app speeds (optional) — for exact upload/download rates and session data totals per app (like Task Manager's Network column), enable precise mode; it uses a Windows kernel trace and so needs administrator. The tab offers it only when you're already running as administrator and falls back to the no-admin view automatically if the trace can't start — it never breaks the tab
Export CSV saves the per-app list to a file you choose the location for, with the raw bytes-per-second and byte totals beside the readable figures — a file whose only numbers are "1.2 MB/s" cannot be sorted or added up
Threshold alert — set a Mbps limit and the tab warns you when total download or upload goes over it (handy for catching a runaway background upload); set it to 0 to turn the alert off
Look back over the last hour, day, or week — pick a range and the chart shows the throughput it recorded, with how much you actually downloaded and uploaded over that period and the fastest speed you hit. That answers "where did my data cap go?" without any account or cloud service. History is recorded while the tab is open and kept for 7 days, in a plain file on your own PC
Strictly local and read-only: SysManager only observes, never throttles or blocks, and nothing about your traffic leaves the machine

File Lock Detector

Find what's holding a file — when you get a "file in use" error, enter or browse to a file/folder path and see which process(es) are using it, via the Windows Restart Manager (the same mechanism Explorer's own dialog uses)
Shows process name, PID, type, and start time for each locker
Export CSV saves the list to a file you choose the location for, including the flag that marks a process Windows will not let you safely end — the one row nobody should act on
End process — terminate a selected locker (with confirmation) to release the file; critical system processes are protected from termination
Detection works as a standard user; ending a process owned by SYSTEM or another user needs administrator rights (surfaced, not crashed)

Camera/Mic/Location

Shows which apps recently used your camera, microphone, or location, and when
Reads the Windows access history (CapabilityAccessManager consent store) — covers both Store apps and desktop programs
Devices in use right now are flagged and sorted to the top
Read-only: an Open privacy settings button hands off to Windows to grant or revoke a permission — SysManager never changes capability permissions itself
Export CSV saves the history to a file you choose the location for, so evidence about which app used the camera can be sent to whoever helps you with the PC instead of photographed off the screen. The file stays on your machine unless you move it

Settings Watchdog

Catch the settings Windows Update silently resets — feature and quality updates often flip telemetry back to Full, re-enable web search, the Widgets board, lock-screen ads, and Start-menu suggestions
See exactly what is being watched — the full list of monitored settings, each with its value right now in plain language and the reason it is watched, visible from the moment you open the tab rather than only after something has changed
Save a baseline of your current preferences with one click; the watchdog remembers exactly what each watched setting was
Check now re-reads the live values and lists any drift in plain language — e.g. "Diagnostic data: was 'Off (Security)', now 'Full'" — with the category and a before/after comparison
Export CSV saves the list of changes before you restore them. Restore overwrites the "now" column, so this file is the only record of what Windows changed — which is why the button sits to the left of Restore
Restore changed writes the drifted settings back to your baseline values in one step (HKLM-backed settings need administrator rights, surfaced not crashed)
Strictly local: the baseline lives in your %LocalAppData%\SysManager folder and the watchdog only ever reads or writes a fixed list of well-known registry values

Operation Lock

Prevents conflicting concurrent operations across tabs
Operations grouped by category (Disk, Network, SystemModification)
If a conflicting operation is already running, the UI shows which operation is blocking and refuses to start the new one
Integrated into every tab that mutates disk, network, or system state (Cleanup, Deep Cleanup, Disk Analyzer, Duplicate Finder, Speed Test, Traceroute, Network Repair, Shortcut Cleaner, Performance Mode, Gaming Profile, Environment Variables, and the Dashboard's quick actions)
Gaming Profile takes the lock before it reads your current settings, not just around the changes — it and Performance Mode set the same power plan and the same visual-effects switch, so whichever starts second would otherwise write down the other one's change as "how you had it" and restore you to that later
Undoing is never refused. If a game exits while another change is running, the optimizations are still reverted — leaving your PC on a gaming power plan because a lock was busy would be worse than the clash the lock exists to avoid

Shortcut Cleaner

Scans Desktop, Start Menu, Quick Launch, and Recent Items for broken .lnk shortcuts whose targets no longer exist
Lists results with name, location, and missing target path
Export CSV saves the list before you delete anything, naming both the shortcut and its missing target, so the change is reviewable rather than a batch of deletions nobody can audit
Select all / deselect individual items
Move to Recycle Bin or permanent delete, with confirmation dialog
COM-based IShellLink resolution for accurate target validation

Scheduled Maintenance

Automate maintenance on a schedule — register one Windows scheduled task that runs SysManager in the background (via its CLI) to clean temporary files or purge standby memory, daily or weekly at a time you pick
See the last run, next run, and last result of the task at a glance
Runs on battery too. Windows will not start a scheduled task on battery unless it is told to, so on an unplugged laptop the schedule would silently never fire — it now starts regardless, and keeps going if you unplug mid-run. Untick it if you would rather it waited for mains power.
Optional "only when I'm not using the PC" condition, off by default
The schedule you are about to save is spelled out in words, conditions included, and updates as you change the settings
Windows' own count of skipped runs is shown when it is not zero — the only signal Windows gives for a run its conditions blocked
Update or remove the schedule any time, each with a confirmation
Runs in your user context (no admin required) and only ever touches its own task at \SysManager\Scheduled Maintenance — no other scheduled tasks are affected
Built on the same safe CLI verbs; nothing destructive is automated

Privacy & Telemetry

12 registry-based toggles across 3 categories (Telemetry, UI Declutter, Features)
Telemetry: disable diagnostic data, activity history, advertising ID, feedback prompts
UI Declutter: disable Start suggestions, tips, lock screen tips, Spotlight ads
Features: disable Copilot, Cortana, web search in Start, widgets
Explicit apply — flip toggles to stage changes, press Apply to write to the registry, or Discard to revert pending changes. A live counter shows how many changes are queued, so accidental clicks never modify the system silently.
Category filter and search
Requires admin for HKLM-backed toggles
Fully reversible — re-enable any toggle with one click
A Windows restore point is attempted before the first Apply of the session — the same one Tweaks Hub takes, so the protection no longer depends on which tab you reached the toggles through. It is attempted after you confirm, so declining costs you nothing, and it is mentioned only when one was really created

File Shredder

Secure multi-pass file and folder deletion beyond recovery
Three shred methods: Quick (1 pass, zero fill), Standard (3 passes), Thorough (7 passes)
Cryptographically random overwrite data (RandomNumberGenerator)
Add files or entire folders via file picker dialogs
Progress tracking per-item with cancel support
Skips junction points and symbolic links (prevents symlink attacks)
Confirmation dialog before irreversible shred

Ping

Says WHERE the problem is, not just that there is one. Targets are tagged by role — your gateway, public DNS, game servers, streaming services — and the verdict names the layer: "Problem on your local network", "Problem at your ISP or upstream", "It's the game server, not you", "Streaming service is slow", or "Multiple layers affected". This is the point of the tab: "my internet is bad" is not actionable, "your router is fine, your ISP is not" is.
Watches several hosts at once, each with its own live latency, average, jitter and loss, and its own colour on the shared chart
Five presets for gamers and streamers, plus your own: type a hostname or IP to add a target, and only the ones you added carry a remove button
- Global — Google DNS, Cloudflare, Quad9, google.com
- CS2 Europe — Valve matchmaking relays (Vienna, Luxembourg, Warsaw, EU West/Central/East)
- FACEIT Europe — competitive CS2 servers in DE, NL, UK
- PUBG Europe — the EU matchmaking cloud regions (Frankfurt, Ireland, London)
- Streaming — YouTube, Twitch, Cloudflare, to correlate buffering with the network
Your gateway is detected and added automatically, so the first thing the chart can tell you apart is your own network from everything beyond it
Live latency chart with a pickable window (1, 5, 10 or 15 minutes) and a pingable interval, default once per second
Headline numbers across all targets: average ping, worst loss, worst jitter
Start, Stop and Clear are separate, and the status line confirms what Clear did

Traceroute

Traces every ping target on a loop, so you can see which hop the latency appears at rather than only that the destination is slow — interval 30 s to 10 min, default 60 s
Latency per hop, charted, alongside the hop table (number, address, ms)
One-off trace to any host you type, with its own status line and a Cancel button
Shares its targets and its start/stop state with the Ping tab, because it is the same monitor answering a different question

Speed Test

Two engines, and it explains why they disagree. Ookla measures raw TCP throughput to a nearby server (closest to what you pay your ISP for); the HTTP test measures through Cloudflare's CDN (closer to real browsing, usually lower). The tab says this on screen rather than leaving you to wonder which number is "wrong".
A verdict, not just numbers — each result says what that speed is actually enough for ("Comfortable for HD streaming on one or two devices, and for video calls", "Handles 4K streaming and several devices at once") plus one line comparing it with your previous test on the same engine, so a slow day is visible as a slow day rather than a number you have to interpret
Pick the Ookla server or leave it on Auto (nearest): Bucharest, London, Frankfurt, Amsterdam, Paris, New York
Separate persistent history per engine, the last 20 results each — date, download, upload, ping and server — clearable on its own, because comparing an HTTP run against an Ookla run is not a comparison
Progress bar with a time-remaining estimate and a Cancel button; the Ookla CLI is downloaded on first run
Only one engine runs at a time, so the two cards can never show conflicting progress

Network Repair

Three fixes, each explained before you press it — what it does, whether it is safe, whether it needs a reboot, and what kind of breakage it is for:
- Flush DNS Cache — clears the local resolver cache for stale entries. Safe, instant, no reboot.
- Reset Winsock Catalog — resets the socket API that every networked app uses, for damage from broken VPN drivers, malware or corrupted LSP providers. Admin + reboot.
- Reset TCP/IP Stack — rebuilds the TCP/IP registry keys from Windows defaults. The last resort, and labelled as one: it discards custom IP configuration, routes and adapter settings. Admin + reboot.
Admin elevation banner stating exactly which of the three need elevation and what unlocks once you restart elevated
A reboot warning appears only after a fix that actually needs one, rather than standing on screen permanently
Each of the three is confirmed before it runs, and the buttons disable while a repair is in flight so two resets cannot overlap

DNS & Hosts

DNS Preset Switching — one-click DNS change: plain resolvers (Google, Cloudflare, Quad9, OpenDNS) plus ad/malware/family-blocking variants (Cloudflare 1.1.1.2 malware / 1.1.1.3 family, AdGuard DNS ad-blocking + family, OpenDNS FamilyShield), each with a description of what it blocks. IPv6 resolvers are configured automatically alongside IPv4. Preset changes and reset to automatic (DHCP) are confirmed, then verify the captured adapter and DNS state again inside the mutation script. An Undo button follows that adapter's stable identity and restores its exact prior IPv4 and IPv6 automatic/static configuration without persisting DHCP-supplied addresses as static overrides.
Hosts File Editor — view, add, and remove entries from the Windows hosts file with a clean table UI. Add IP + hostname pairs, toggle entries, or remove them. Backs up hosts file before modifications.
Requires administrator privileges for both DNS and hosts operations
Admin elevation banner with one-click restart

Bulk Installer

Curated catalog of popular applications grouped by category: Browsers, Communication, Media, Development, Utilities, Gaming, Security, Office & Productivity, Creativity, Networking & VPN, Runtimes & Frameworks
Select multiple apps and install all via winget in one batch operation
Custom winget search — search the entire winget repository and add any package to your install queue
Category filter and text search across the catalog, plus a button that ticks every app in the chosen category at once
Per-package install status tracking with ETA
Live console output showing winget progress
GroupedView with visual category headers

New App Alerts

Monitors Program Files, AppData\Programs, and registry uninstall keys for new application installations
FileSystemWatcher on install directories + 30-second registry poll cycle
Shows timestamped install history with app name, publisher, path, and detection source
Export CSV saves the history to a file you choose the location for. Worth doing before Clear History, which erases it — the button sits to the left of it for that reason
Start/stop monitoring, acknowledge alerts, show all currently installed apps, clear history
Notifies you when a new install is detected, so you find out even when you are on another tab or the window is in the notification area

App Blocker

Blocks applications from executing using Image File Execution Options (IFEO) registry mechanism
Enter an exe name or browse for a file, confirm, and the app is prevented from launching
Fully reversible — unblock restores normal execution
Shows list of currently blocked apps with select/deselect and batch unblock
Requires admin privileges for registry modifications, in both directions — blocking and unblocking write the same protected setting, and each says so before asking you to confirm anything

Debloater & Ads

Remove preinstalled Windows Store apps you don't use:

Scan all installed Store apps with name, publisher, and a short description
Curated "common bloat" preset pre-selects safe, frequently-removed apps (Bing News/Weather, Clipchamp, Solitaire, Xbox apps, consumer Teams, and more)
System-critical apps are protected — the Store, frameworks, and security/shell components are denylisted and can never be selected or removed
Impact summary + confirmation before anything is uninstalled
Reversible — removal is per-user, so any app can be reinstalled from the Store
A Windows restore point is attempted before the first removal, shared with the other tabs that change system settings. Described honestly rather than reassuringly: System Restore does not bring Store apps back, so reinstalling from the Store stays the real undo and the app says exactly that
Search and per-app descriptions help you decide before removing

Browser Cleaner

Reclaim space and clear browsing traces, per browser:

Auto-detects Chrome, Edge, Brave, Opera, and Firefox
Every profile, not just the first — if you keep separate Chrome/Edge/Brave profiles (personal and work, or one per person), each is scanned and named in its own row ("Google Chrome — Profile 1"), so you can see which one you're cleaning. Cleaning one profile never touches another
Per-category with size shown: Cache, History, Cookies, Sessions
Cookies/sessions are flagged and left unticked by default — cleaning them signs you out, so it's always an explicit choice; cache and history are pre-selected
Firefox gets cache, cookies and sessions — but not history, on purpose. Firefox keeps history and your bookmarks in the same file (places.sqlite), so clearing "history" would delete your bookmarks with it. Rather than do that quietly, the tab simply doesn't offer History for Firefox. Its cookies and sessions target only their own named files — never saved logins, keys or bookmarks
Confirmation with an impact summary before anything is deleted
Per-user (no admin); locked files (browser open) are skipped, not forced, and symlinks/junctions are never followed

Edge/OneDrive Remover

Get Microsoft Edge and OneDrive out of your way — reversibly:

OneDrive: full removal for your account — stops the client, runs the official uninstaller, and clears its File Explorer sidebar entry. No admin needed. Files already synced to this PC stay on disk; cloud-only files simply aren't downloaded
Edge: disable & de-integrate, never uninstall — Windows relies on Edge (WebView2) and reinstalls it if forced out, so instead this turns off its background mode and startup boost (via the documented Group-Policy keys) and disables its automatic-update scheduled tasks, so Edge stops running on its own. You can still open it normally
A Restore button for each — reinstall OneDrive and re-pin its sidebar entry, or clear the Edge policies and re-enable its update tasks — so nothing here is one-way
Honest about the default browser — Windows hash-protects the default-browser choice, so no app can switch it for you; the tab opens Windows' default-apps settings and guides you instead of pretending to change it
Every action confirms first with a plain-language impact summary; disabling Edge needs administrator (the tab explains why and what it unlocks), removing OneDrive does not
A Windows restore point is attempted before the first change of the session — shared with the other tabs that change system settings, so at most one is made no matter how many tabs you use. It is mentioned only when one was really created: System Restore is switched off on many PCs and Windows allows roughly one point a day, so silence means "no snapshot", never a promise

Defender Tweaks

Manage Microsoft Defender without digging through Windows Security:

Status at a glance — real-time protection, cloud protection (MAPS), PUA protection, and Controlled Folder Access
Toggle PUA protection and Controlled Folder Access (ransomware protection)
Scan exclusions — add or remove folders Defender should skip (handy for big game libraries); paths are validated and additions never replace your existing exclusions
Honest about Tamper Protection — if it's on, Windows can silently ignore changes, so the tab detects it, warns you, and only reports a change as done after reading it back and confirming Windows actually applied it
Changes need administrator and are confirmed first; lowering a protection is always an explicit, reversible choice
A Windows restore point is attempted before the first change of the session, shared with the other tabs that change system settings. All four changes run through one path, so none of them can quietly skip it, and it is mentioned only when Windows really made one — never on a change that was rejected

Notification Blocker

Mute the apps that nag you with pop-up notifications — update reminders, trial offers, "rate us" prompts:

Lists every app that has shown a notification, most recently active first, with how many notifications it sent recently so the noisy ones stand out
Mute per app with a switch — it flips the same per-app setting as Windows Settings > Notifications, so nothing is hooked or hacked, and Windows itself honors it
Master switch to silence everything at once (with a clear warning that it also mutes calendar and reminder alerts)
Pending-changes flow — flips stay local until you press Apply, with a confirmation and a Discard to back out
Fully reversible (flip the switch back), per-user, no administrator needed

Battery Health

Charge %, health %, wear level, cycle count, chemistry
Design vs full-charge capacity via WMI
Estimated runtime display
Gracefully shows "No battery detected" on desktops
Health and wear need administrator rights (Windows only reports capacity to an elevated process). Without it they read "Not available" and the page explains why, instead of showing a number that isn't a measurement.

Uninstaller

Lists all installed applications via winget with size from registry
Filter by name or package ID
Sort by name, size, or publisher via clickable column headers
Select/deselect all, batch uninstall with confirmation dialog
Local app support — uninstalls apps not in winget via registry UninstallString
Runs uninstall actions only from an unelevated SysManager session; each package requests its own UAC elevation when required
Live console output from winget

Gaming Profile 🔬

One-click "game mode" — apply a bundle of reversible optimizations together, then restore them automatically when the game exits (or with a single Stop)
Optionally target a running game — its CPU priority is raised to High and it's pinned to the performance cores, and its exit is what triggers the automatic revert
System-wide optimizations — Ultimate Performance power plan, reduced visual effects, finest (~0.5 ms) timer resolution, freeing standby memory, pausing Windows Search indexing, and silencing notifications — each ticked individually
Fully reversible & snapshot-based — the original state (power plan, visual effects, indexing, notifications) is captured before any change and restored exactly; SysManager also tries a System Restore point first (best-effort, needs administrator)
Your own changes win — if you switch notifications back on yourself while a profile is running (from Privacy & Security → Notifications, which is the same switch), the restore leaves your choice alone instead of silencing them again when the game exits
Crash-safe — the session is recorded on disk, so if SysManager closes mid-game the system-wide changes are offered for restore on next launch
Honest about admin — freeing standby memory and pausing indexing need administrator; without it they're clearly skipped, not silently failed
🔬 Preview — fully reversible today; closing background apps and saved per-game profiles are planned for a later update

Timer Resolution

Lower input latency for games — requests the finest Windows timer resolution (≈0.5 ms) instead of the ~15.6 ms default, via the ntdll NtSetTimerResolution API
Live current/finest/default readout — always re-queries the effective resolution (Windows 11 may stop honoring a request while the window is minimized), so the number shown is the real one
One-click enable / restore — fully reversible; the request is released when you restore it or simply close the app. No admin required
Power-cost warning — a finer timer wakes the CPU more often, increasing power draw and battery drain on laptops

Display Profiles

Quick-switch resolution + refresh rate — pick a mode (e.g. 165 Hz for gaming, 60 Hz for work) from the list of everything your display supports, using only the Windows display APIs (no NVIDIA/AMD tool conflict)
Safe by design — applies for the session, so a reboot reverts; on top of that a 15-second auto-revert restores the previous mode unless you confirm "Keep", so a bad mode can never strand you on a blank screen
Per-display — choose which monitor to configure; shows the current mode
Validates each mode (CDS_TEST) before applying; no admin required

CPU Core Affinity

Pin a process to specific CPU cores — pick a running process and choose which logical CPUs it may run on, then Apply (or Restore the original)
Filter the process list by name or ID, so finding your game isn't a scroll through hundreds of svchost entries — the same filter the Services, Task Scheduler and Windows Features lists have
See what's already pinned — a process running on a subset of cores shows it in the list ("chrome (1234) — 4 of 16 cores"), so you can tell at a glance what you've already tuned instead of selecting each one to find out
Hybrid-CPU aware — on Intel 12th-gen+ CPUs, P-cores and E-cores are detected and labelled (via GetLogicalProcessorInformationEx), with one-click P-cores / All cores presets
Safe and temporary — affinity is per-running-process and reverts when the process exits; no admin for your own processes (changing another user's process is surfaced as needing admin, not a crash)
An empty selection is rejected — Windows treats an empty mask as "let the OS decide", so the app never silently does the opposite of what you picked

Standby List Cleaner

Frees cached standby memory — the built-in equivalent of ISLC, to reduce stutter when RAM runs low in games
Live stats — total RAM, available, and memory load %, refreshed every 2s
Purge on demand or auto-purge when available RAM drops below a threshold you set with a slider
Safe and non-destructive — the standby list is clean, disk-backed file cache, so clearing it loses nothing; Windows reloads from disk on next use
Reading stats needs no admin; purging requires administrator (it enables the same privilege RAMMap and ISLC use) and reports cleanly if not elevated
The auto-purge switch and its threshold are remembered between sessions, so arming it once is enough

Performance Mode

Per-tweak Apply buttons — each setting is independent
Power Plan: Balanced / High Performance / Ultimate Performance
Visual Effects: reduce animations via P/Invoke (instant, no logout)
Game Mode: enable/disable via registry
Xbox Game Bar: disable overlay and Game DVR via registry
NVIDIA GPU: force max performance with auto-detected GPU subkey (reboot required)
Processor State: force CPU min state to 100%
Overlays info: manual instructions for Discord, Steam, NVIDIA GFE, EA App
OriginalSnapshot: captures the exact system state before the first change, persists it locally, and reloads it when the tab opens so Restore All remains available after an app restart; persisted fields are validated before use and the confirmation shows when the baseline was captured
It will not record your settings while a game profile is running — those are the profile's power plan and visual effects, not yours, and saving them as your baseline would restore you to them later. It asks you to stop the profile first. A baseline saved before the profile started is still used normally
Confirmation dialog before every change
Restore point creation: create a Windows System Restore point before making changes (requires admin)
RAM working set trim: free physical RAM by trimming all process working sets — same as RAMMap's "Empty Working Set" (useful before launching a game)
Hibernation toggle: enable/disable hibernation to free disk space (deletes hiberfil.sys when disabled)

Services

Lists all Windows services with current status and startup type
Gaming recommendations: services tagged as "safe to disable", "advanced", or "keep enabled" — hover a row's description to read why, in plain language instead of Microsoft's own wording
Filter by status (Running/Stopped), safety level (Safe/Caution/Critical), gaming recommendation (Safe to disable / Keep enabled / Advanced), or free-text search — each chip shows how many services it matches, so you know before pressing it
Mark any row with the flag button to keep it findable while you keep filtering or searching. "Clear marks" removes them all, including any a filter is hiding
Start, stop, disable, or enable services with confirmation dialogs
Requires admin for all mutations

Drivers

Sortable DataGrid table of all installed system drivers
Columns: Device Name, Manufacturer, Version, Date, Signature — click headers to sort
Signature — whether Windows reports the driver as digitally signed. Manufacturer is a name the driver package supplies about itself, so it proves nothing; this column comes from Windows. It says "Signed", not "Safe" — a signature identifies the publisher, and Windows will load a signed driver from anyone with a valid certificate. Blank means Windows reported nothing, which is not the same as unsigned
Hide built-in Windows drivers — tick the filter to leave only the drivers your hardware maker installed (graphics, audio, network, …), which is usually what you care about when checking whether something needs updating. The count shows both totals, so nothing looks like it vanished
Data parsed from Get-CimInstance Win32_PnPSignedDriver

Dashboard

One-line OS / CPU / RAM / disk summary
Live uptime counter
Real-time vitals — CPU, RAM, and GPU usage refreshed at 300 ms while the tab is visible (polling pauses automatically when it isn't), with live indicator dots.
Recent Activity — what SysManager actually changed on this PC, with timestamps: cleanups, deletes, uninstalls, privacy and DNS changes, restore points, shredded files. Counts and sizes only — never file names, since the log is plain text on your own disk. Opening a tab isn't an action, so it isn't listed.
Quick Tune-Up — one-click wizard that cleans temp files, optionally empties the Recycle Bin, scans for broken shortcuts, checks disk SMART health, flags high uptime (14+ days) and high RAM usage (85%+). Displays a summary card with freed space, warnings, and links to relevant tabs. Non-destructive, no admin required.
Health Score — overall system health gauge (0–100) combining disk SMART, free space on the system drive, RAM usage, uptime, and battery wear. Free space counts for a quarter of it, because a full drive is the commonest reason a PC feels slow and the one thing on that list you can fix today — so a machine that is out of room cannot score green, and the recommendation says how many GB are left and points at Deep Cleanup. Color-coded ring (green / amber / red) with up to 3 actionable recommendations. Auto-computes on load and refreshes with "Scan system".
System Tray — background health monitoring (60s polling), CPU/RAM tooltip, Windows notifications when RAM > 90%, uptime > 14 days, or disk health degrades. Context menu: Show SysManager / Volume mixer / Exit.
Closing is your choice — the first time you close the window, SysManager asks whether it should keep running in the notification area or close completely, and remembers the answer. If you pick the notification area, it tells you where the window went so it doesn't look like it vanished. Right-click the tray icon to reopen or exit at any time.
Progress on the taskbar button — a long job keeps reporting while the window is minimised. The SysManager button on the taskbar fills up as an SFC scan, a bulk install or a deep cleanup progresses, and shows a moving bar for the tabs that know they are working but not how far along. It follows the tab you have open, and it goes blank when the job finishes rather than sitting at an empty bar

About

Version, build, license and source in one place, with the update controls beside them rather than buried in a settings page
What's new, pulled live from GitHub — every release with its version, date and full changelog, and a badge marking the one you are running, so you can see what you skipped without leaving the app
Go back to the previous version — the build you updated from is kept, and this button restores it. It appears only when that build is actually on disk, and refuses with a reason rather than half-doing it when the swap would not be safe.
Export or copy a full system report, and a separate "Copy environment info" for pasting into a bug report
Report a problem and Ask a question open the right GitHub page directly; View license and What's new open the licence and the changelog
The startup version check is a checkbox here — "Check GitHub for a new version when SysManager starts" — and switching it off does not disable the Check for updates button, which still works on demand. What that check does and does not send is described under Privacy.

Updates (for SysManager itself)

Auto-check on startup against the GitHub Releases API, plus a manual "Check for updates" button in the About tab.
Discreet banner in the main window when a newer version is available.
Background download of the new build with a progress bar. If the download is blocked, a "Manual download" button opens GitHub in the browser.
SHA256 hash verification before install — the downloaded build is checked against the published .sha256, so a damaged or truncated download is blocked. Both files come from the same release, so this catches a corrupted download rather than a substituted release asset — see Verifying the download for the stronger check, the build attestation, which you run yourself.
The build is also inspected for an Authenticode signature, and the check fails closed if a signature is present but cannot be read. SysManager ships unsigned today and no publisher is pinned yet, so a signature is not currently an integrity gate; the publisher-and-certificate-chain check is written and switches on with a one-line change the day a signing certificate exists.
One-click "Install" replaces the running executable in-place and restarts automatically (no manual file copying needed).
"Go back to the previous version" — the build being replaced is kept, so an update that installs cleanly but turns out to be broken is not a dead end. The button appears in the About tab only when a retained copy exists, asks for confirmation, and notes that whatever the newer version fixed will come back too. One generation is kept, so it never accumulates copies of the app.
Full release-note history pulled live from GitHub — the notes for the newest version appear under the update check, the last ten releases below it, and each card links to its release on GitHub. If GitHub cannot be reached, the section says so instead of going blank.
"Report a problem" opens the GitHub bug-report form with your SysManager version and administrator state already filled in — the two fields reports most often miss — and "Ask a question" opens Discussions for anything that is not a bug. Both are in the About tab; a browser tab opens only when you press them.

Profile Export / Import

Export your SysManager settings to a single portable JSON file and import them on another PC: theme and appearance, dark-mode schedule, gaming profiles, volume presets, close-button behaviour, standby-memory preference, update-check preference, app-icon fetching preference, and speed-test history
Selective export (tick which sections to include) and selective import (confirm what a profile contains before anything is overwritten)
Version-aware — refuses profiles created by a newer, incompatible build
What it deliberately leaves out — anything that describes this PC rather than your choices: the undo baselines behind Performance Mode and Environment Variables, the Settings Watchdog's record of this machine's registry, the service-startup ledger, and the local activity log. Carrying those to another PC would restore it to settings it was never on, or report differences that are only "a different computer"
Only SysManager's own config is ever touched (never system settings), so an import is fully reversible — just import a different profile

CLI Interface

Automate the safe actions from scripts, Task Scheduler, or deployment tools — SysManager accepts command-line flags and runs headless (no window), writing its output to the launching console
Commands: --health (read-only health score), --cleanup (temp-file cleanup, never follows junctions), --purge-standby (purge the standby list), plus --version, --help, and --list. --trim-ram still works as an alias for --purge-standby, so an existing scheduled task keeps running; new scripts should use the current name, which says which of the two memory operations it is
--json emits machine-readable output; --silent suppresses chatter for scripting; conventional exit codes (0 success · 1 error · 2 usage) let a script branch on the result
Only read-only or non-destructive actions are exposed on the CLI — anything that changes the system irreversibly stays in the GUI behind a confirmation dialog
The in-app CLI Interface tab is a reference: it lists every command with a one-click copy button. Example: SysManager.exe --cleanup --silent

Screenshots

> Click any thumbnail to view full size. Screenshots live under > docs/screenshots/ — see > docs/screenshots/README.md for capture > conventions.

In motion

> The feature tour GIF is at the top of this README. Here's a > second one focused on cleanup & maintenance tools:

Cleanup & tools: Quick/Deep Cleanup, Disk Analyzer, Dark Mode Scheduler, Defender Tweaks, Privacy & Telemetry.

🏠 Dashboard

🔧 System — Health · Windows Update · Performance · Windows Features · Restore Points · Boot Analyzer · System Fixes · Tweaks Hub

🎮 Gaming & Profiles — Gaming Profile · Standby Cleaner · Timer Resolution · CPU Affinity · Display Profiles

📊 Monitor — Resource History · New App Alerts · File Lock · Settings Watchdog

Bandwidth Monitor is implemented but its screenshot is still being recaptured — the previous one showed the tab while it was a placeholder, which no longer reflects the app.

🧹 Cleanup — Quick Cleanup · Deep Cleanup · Shortcut Cleaner · Scheduled Maintenance

💾 Storage — Disk Analyzer

Duplicate Finder is implemented and has no screenshot yet — a shot of it would be a list of real file paths, which needs redacting before it can ship.

🌐 Network — Ping · Traceroute · Speed Test · Repair

📦 Apps — App Updates · Bulk Installer

🛡️ Privacy & Security — Privacy & Telemetry · File Shredder · App Blocker · Debloater · Browser Cleaner · Defender

🎨 Customization — Dark Mode Scheduler

ℹ️ Info — Drivers · Battery · Logs · System Report · About

⚙️ Advanced — Profile Export / Import · CLI Interface

Install

Via winget (recommended)

SysManager is published to the Windows Package Manager community repository. Install or update with a single command:

winget install laurentiu021.SysManager

Updates are delivered automatically with each release — run winget upgrade to stay on the latest version.

Direct download

Grab SysManager-v.exe (the `` shown on the latest release) from the latest release and double-click it. The executable is self-contained — no installer, no .NET runtime required.

> About the download counter. The badge above counts release-asset downloads, not > people. Most of that number is machinery: SysManager's own in-app updater fetches the > exe, winget installs fetch it, and Microsoft's manifest validation fetches it for every > submitted version. Across all releases the exe has been fetched roughly 88 times for > every checksum file — and a human verifying a download takes both. Treat the badge as > traffic, not as an install base.

Why portable, and why there is no installer

The only build is a portable .exe. That is a decision, not an omission, and it has a cost worth stating alongside the benefit.

What you get. Nothing is written outside %LocalAppData%\SysManager unless you ask for it. There is no service, no scheduled task you did not create, no uninstaller to trust, and no registry footprint to clean up — delete the exe and the app is gone. You can run it from a USB stick on a machine you are fixing for someone else, which is a large part of what this tool is for.

What it costs. A portable exe lives in a user-writable location, so another process running under your account could replace it on disk. That is inherent to any portable app and has nothing to do with SysManager's update flow. If you run SysManager elevated, run a build you got from the Releases page and verified. A machine-scope build under Program Files, which is not user-writable, is on the roadmap alongside code signing — the two belong together, because an installed build people trust should be a signed one.

No Microsoft Store build. The Store sandbox forbids most of what this app does: reading other processes' working sets, writing the hosts file, changing services and scheduled tasks, purging the standby list. A Store version would be a different, much smaller app wearing the same name.

Unsigned, for now. Windows shows a warning on first launch and some antivirus engines flag an unknown publisher. Both are explained below, along with how to check the download yourself: First launch · Verifying the download · If your antivirus flags the download · Code signing.

Verifying the download

Each release ships a matching SysManager-v.exe.sha256. Verify before running (replace `` with the version you downloaded):

Get-FileHash .\SysManager-v.exe -Algorithm SHA256
# Compare the output to the contents of SysManager-v.exe.sha256.

That check confirms the file downloaded intact. To also confirm where the file came from, each release carries a GitHub build attestation — a signed record, kept in a public transparency log outside this repository, tying that exact binary to the commit and workflow that produced it. With the GitHub CLI:

gh attestation verify .\SysManager-v.exe --repo laurentiu021/SystemManager

This is the stronger of the two checks. The .sha256 file is generated in the same job and published onto the same release as the binary it describes, so both come from one source — enough to catch a corrupted download, but not a substituted release asset. The attestation is signed by GitHub's own infrastructure at build time and logged publicly, so it also records which commit and workflow produced the file, and that record cannot be rewritten after the fact. Each release also ships SysManager-v.sbom.json, a CycloneDX inventory of every NuGet package resolved for that build — useful for checking the dependency set against a vulnerability feed.

First launch: Windows will warn you

The first time you run it, Windows shows a blue box titled "Windows protected your PC". This is expected, and it is worth knowing what it does and does not mean.

It means Windows does not recognise the publisher. Code-signing certificates cost money and require a registered identity, and SysManager is a free one-person project without one yet, so every build is "unknown publisher" to Windows regardless of what it contains. It is not a virus warning — Windows has not found anything wrong with the file.

The dialog only offers a Don't run button. To continue:

Verify the SHA256 first, using the command above. Do this before anything else — it is what makes the next step safe rather than blind.
Click More info — a small link in the dialog, easy to miss.
The file name and publisher appear, along with a Run anyway button. Click it.

Windows remembers the choice, so this only happens once per downloaded version.

If you would rather avoid the warning altogether, install through winget instead:

winget install laurentiu021.SysManager

winget fetches and validates the package outside the browser download path, so the first-launch prompt does not appear.

> Only click through this warning for a file you downloaded from > the official releases page > and whose hash you verified. The same dialog protects you from genuinely malicious > files, so it is worth reading rather than reflexively dismissing.

If your antivirus flags the download

Windows Defender or another antivirus may flag or quarantine the .exe — sometimes days after it ran fine, because these tools also score a file on how widely it has been seen before. This is the second-most-likely thing to happen after the SmartScreen box above, so it is worth explaining rather than leaving you to guess.

Why it happens. Two reasons, and neither is about what the code does:

The shape of the file. SysManager ships as one large executable that carries everything it needs inside it, compressed, and unpacks itself into a temporary folder when you launch it. That is a legitimate way to ship a portable app with no installer — and it is also what some malware does to hide, so a scanner that judges structure rather than behaviour treats it as suspicious. Add an unknown publisher and no signature, and a heuristic engine has every reason to be cautious.
What the app genuinely does. It deletes files, changes registry settings and stops processes. That is the job of a maintenance tool, and it is also a fair description of something you would not want running unasked.

How to check, instead of guessing. Take the SHA-256 from the release page and open

https://www.virustotal.com/gui/file/

VirusTotal addresses files by hash, so if that exact build has been scanned this shows the report — including which engines flagged it and which did not. If nobody has submitted that build yet the page will say so, and you can upload it there yourself.

Then read the Verifying the download section above and run the build attestation. That is the check that actually settles the question: it proves the file you hold is the output of a public workflow, built from a public commit in this repository.

> Be honest about what a scan proves. A couple of hits out of ~70 engines on an unsigned, > compressed, self-extracting build is the ordinary pattern for this kind of file — it is not > by itself evidence of a problem. Equally, a completely clean sheet is not proof that a file > is safe; plenty of malware is clean on the day it is released. The attestation is stronger > than either, because it ties the binary to source you can read.

If it has already been quarantined, restore it or add an exclusion only after the SHA-256 matches and gh attestation verify succeeds. If either check fails, delete the file and download it again from the releases page — do not add an exclusion for a file you have not verified.

Code signing

Releases are currently unsigned, which is why the warning above appears. The intention is to sign them through the SignPath Foundation — a programme that provides free code-signing certificates to open-source projects, with the signing performed by SignPath.io — and an application there is the plan for this project. It has not happened yet: the Foundation asks for a level of public visibility (stars, external write-ups, independent references) that a three-month-old project does not have, which is a fair bar for a certificate issued in their name. Until a certificate is actually in place, this section says so plainly rather than implying one exists.

Until a certificate is in place, the two checks above — the published SHA-256 and the GitHub build-provenance attestation — are what establish that a download is the genuine, unmodified build. The attestation is the stronger of the two, and it will remain useful after signing arrives: it records which commit and workflow produced a given binary, which a signature alone does not.

The update path is already written for signing, but not yet armed. The publisher it compares against is a single constant that is deliberately empty until a certificate exists, so today a signed build is accepted on the strength of the SHA-256 check alone; a signature that is present but unreadable is still refused. On the day signing is switched on, filling in that one constant turns on the publisher match and the certificate-chain validation together — the point of writing them now is that the check cannot quietly become a formality later. See SECURITY.md for the detail.

Code signing policy

> Not yet in effect. This policy is written in advance of any certificate, because the > SignPath Foundation programme the project hopes to sign through > requires the roles and approval process below to be documented and public before an > application is considered. Nothing here describes a signing arrangement that exists today — > releases are unsigned, and the SHA-256 plus build attestation above are what verify a > download. The provider attribution that belongs in this section will be added on the day a > certificate is actually issued, and not a day earlier.

Team roles. SysManager is maintained by a single developer, so all three roles below are held by the same person. That is stated plainly rather than dressed up as a team, because it is the honest description of who can change the code and who approves a release.

Authors (may commit to the repository): laurentiu021
Reviewers (must review any change proposed by a non-committer): laurentiu021
Approvers (decide whether a given release may be signed): laurentiu021

Every change reaches main through a pull request whose build-and-test check has passed; main is protected, requires branches to be up to date before merging, and force-pushes and deletions are disabled. Releases are built only by GitHub Actions from this public repository — no binary is ever built or uploaded from a developer machine — and each carries a SHA-256 checksum, a CycloneDX SBOM, and a GitHub build-provenance attestation recording the exact commit and workflow that produced it. That attestation is the load-bearing guarantee here: because a single maintainer necessarily holds administrative rights, the meaningful assurance is not "the rules cannot be bypassed" but "every published binary is verifiably the output of a public workflow run against a public commit", which anyone can check with gh attestation verify.

Privacy policy. This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it. The full policy — including a table of every file the app writes on your own machine, and the four situations in which it uses the network at all — is in SECURITY.md.

Third-party components are listed in the SBOM published with every release. The network features that contact anything outside your machine do so only against a destination you choose (ping, traceroute and speed-test targets; app installs through winget), plus one optional daily version check against the GitHub Releases API that can be switched off.

Uninstalling

SysManager is a single portable executable. There is no installer, nothing is copied into Program Files, and no system-wide registry keys are created for the app itself.

To remove it completely:

Delete the executable — SysManager-vX.Y.Z.exe, wherever you saved it. That is the whole program.
Delete its settings and logs (optional, a few hundred kilobytes):
- %LocalAppData%\SysManager
- %AppData%\SysManager
Remove the scheduled task, if you created one. Only applies if you used Scheduled Maintenance: open that tab and remove the schedule, and the app unregisters the task for you. It is the only thing SysManager registers with Windows, and only ever when you explicitly ask for it.

If you installed through winget, winget uninstall laurentiu021.SysManager covers step 1.

Changes you asked SysManager to make to Windows — privacy toggles, context-menu entries, services, tweaks — are Windows settings rather than part of the app, so they stay as you set them. Every tab that changes something offers the reverse action, so undo anything you want reverted before deleting the executable.

Build from source

Prerequisites: Windows 10 or newer and the .NET 10 SDK.

git clone https://github.com/laurentiu021/SystemManager.git
cd SystemManager
dotnet run --project SysManager/SysManager/SysManager.csproj

Produce a single-file exe

From the repo root:

.\publish.ps1

Or manually:

dotnet publish SysManager/SysManager/SysManager.csproj `
  -c Release -r win-x64 --self-contained true `
  -p:PublishSingleFile=true -p:IncludeNativeLibrariesForSelfExtract=true `
  -o publish

The resulting SysManager.exe lands in publish/ and runs standalone on any Windows 10 / 11 x64 machine.

First-time flow

Launch the app — it opens on the Dashboard.
Go to Network and press Start — live ping begins.
For anything in Windows Update, Cleanup (SFC/DISM), or system-wide App updates, click the yellow "Run as Administrator" banner when it appears. The app relaunches elevated.

Documentation

ROADMAP.md — what is being worked towards, and what is deliberately not
ARCHITECTURE.md — project structure and key design decisions
TESTING.md — how the test suite is organised and run
CHANGELOG.md — release notes
CONTRIBUTING.md — how to build, test, and open a PR
SUPPORT.md — where to ask questions and get help
SECURITY.md — reporting vulnerabilities, security model
CODE_OF_CONDUCT.md — community standards

Reporting bugs and requesting features

Found something broken? Missing a feature you'd love to have?

🐛 Bugs — open an issue using the bug report template.
💡 Features — open an issue using the feature request template, or post in Discussions › Ideas if it's still a rough idea rather than a concrete request.
💬 Questions and how-to's — use Discussions › Q&A instead of issues for anything open-ended.
🔒 Security vulnerabilities — please report privately via the Security tab. See SECURITY.md for the full policy.

The About tab inside the app has a "Copy environment info" helper that dumps your SysManager version, Windows build, CPU, RAM, GPU, storage, display, and elevation state in a format ready to paste into a bug report.

Tech stack

.NET 10 (WPF, C# 14)
CommunityToolkit.Mvvm for MVVM plumbing
Microsoft.Extensions.DependencyInjection for IoC
WPF-UI (lepoco/wpfui) for Fluent Design theme and controls
LiveCharts2 for the real-time latency chart
H.NotifyIcon.Wpf for system tray integration
LibreHardwareMonitor and NvAPIWrapper for CPU/GPU/disk temperature sensors
Serilog for structured logging
xUnit, NSubstitute, and FlaUI for unit, integration, and UI-automation tests

Privacy

SysManager runs entirely on your machine. It does not phone home, does not collect telemetry, and does not require an account. Network features only contact the hosts you explicitly configure (ping targets, speed-test servers, Windows Update / winget endpoints).

Contributing

PRs welcome! Please read CONTRIBUTING.md for the build setup, coding conventions, and pull-request workflow. New contributors are expected to follow the Code of Conduct.

Project health — the badges a contributor looks for, kept here rather than at the top, where they told a visitor nothing about the app:

Support

SysManager is free and open source, built by one person in their spare time. If it saved you a reinstall or a clean-up headache, you can back its development:

Sponsorships go toward a code-signing certificate — which makes Windows show the publisher's name instead of "unknown publisher", and reduces the SmartScreen warning as the signed builds accumulate reputation — plus the build pipeline and time to fix bugs and finish the tools that are still half-built. The app stays free either way.

License

MIT — see LICENSE.

Crafted by laurentiu021.

SysManager for Windows

One portable app for keeping a Windows PC healthy — 58 tabs of network diagnostics, cleanup, privacy controls, app updates and hardware health, with no telemetry and no account.

A quick tour: Dashboard, Tweaks Hub, Resource History, Settings Watchdog, Scheduled Maintenance, CLI, Ping, Disk Analyzer. More below ↓

⚡ Get it in one line

winget install laurentiu021.SysManager

…or download the portable .exe — self-contained, no installer, no .NET runtime needed. Runs on Windows 10/11.

> ⭐ If SysManager saves you a reinstall or a head-scratch, please star the repo — it's the single biggest help for a solo project and how others discover it.

What it is
Why SysManager?
Features — all 58 tabs, grouped
Screenshots
Install
- Why portable, and why there is no installer
- Verifying the download
Uninstalling
Build from source
First-time flow
Documentation — including the roadmap
Reporting bugs and requesting features
Tech stack
Privacy
Contributing
Support
License

What it is

Everything runs on the machine itself. No cloud, no telemetry, no account.

Why SysManager?

Most Windows utilities do one thing, or bundle telemetry and upsells. SysManager is a single, local-first app that covers the whole maintenance surface — and it's fully open source.

	SysManager	BleachBit	CCleaner	Wintoys	O&O ShutUp10	HWiNFO
Open source	✅	✅	❌	❌	❌	❌
No telemetry / no account	✅	✅	❌	❌	✅	✅
Fully local (no cloud)	✅	✅	❌	✅	✅	✅
Portable single `.exe`	✅	⚠️	❌	✅	✅	✅
Code-signed binary	❌	⚠️	✅	✅	✅	✅
Disk / cache cleanup	✅	✅	✅	✅	❌	❌
Privacy & telemetry toggles	✅	⚠️	⚠️	✅	✅	❌
Network diagnostics (ping / traceroute / speed)	✅	❌	❌	❌	❌	❌
Disk / RAM SMART health	✅	❌	⚠️	❌	❌	✅
App updates + bulk install (winget)	✅	❌	❌	⚠️	❌	❌
Game-server latency tools (ping presets, timer resolution)	✅	❌	❌	❌	❌	❌
Free	✅	✅	⚠️	✅	✅	✅

⚠️ = partial, paywalled, or limited. Comparison reflects the free editions as of 2026; features evolve — corrections welcome via an issue.

Features

Sidebar navigation

Group	Tabs
🏠 Dashboard	Dashboard
🔧 System	System Health · Windows Update · Performance Mode · Services · Startup Manager · Windows Features · Restore Points · Task Scheduler · Boot Analyzer · System Fixes · Tweaks Hub 🔬
🎮 Gaming & Profiles	Gaming Profile 🔬 · Standby List Cleaner · Timer Resolution · CPU Core Affinity · Display Profiles
📊 Monitor	Process Manager · Resource History 🔬 · Camera/Mic/Location · New App Alerts · File Lock Detector · Settings Watchdog 🔬 · Bandwidth Monitor
🧹 Cleanup	Quick Cleanup · Deep Cleanup · Shortcut Cleaner · Scheduled Maintenance 🔬
💾 Storage	Disk Analyzer · Duplicate Finder
🌐 Network	Ping · Traceroute · Speed Test · Network Repair · DNS & Hosts
📦 Apps	App Updates · Bulk Installer · Uninstaller
🛡️ Privacy & Security	Privacy & Telemetry · File Shredder · App Blocker · Debloater & Ads · Browser Cleaner · Edge/OneDrive Remover · Defender Tweaks · Notification Blocker 🔬
🎨 Customization	Context Menu · Dark Mode Scheduler · Volume Control
ℹ️ Info	Drivers · Battery Health · System Logs · System Report · Legacy Panels · About
⚙️ Advanced	Profile Export / Import · CLI Interface 🔬 · Environment Variables

> 🔬 = Preview — fully implemented and usable, marked in-app while it settles in.

Theme customization

A palette button in the top-right corner opens an appearance popup with:

Dark mode — 6 curated presets (Midnight Indigo, Deep Ocean, Dark Forest, Neon Rose, Violet Night, Warm Ember)
Light mode — 6 curated presets (Clean Indigo, Sky Breeze, Warm Sand, Mint Fresh, Soft Blossom, Lavender)
Auto mode — follow the Windows light/dark setting, and keep following it. It changes with Windows while the app is open, whether you flip it by hand, on a Windows schedule, or from SysManager's own Dark Mode tab. Your colour family is kept across the switch: on Warm Ember, going light gives you Warm Sand rather than the default. Picking any preset turns Auto off
Custom mode — free hex input for accent, background, surface, and text colors
Background shade slider for fine-tuning lightness/darkness
Reset to default theme — one click back to the shipped dark theme and shade, from any mode
Settings persist between sessions

Keyboard navigation

Screen readers

Context Menu Manager

Manage Windows Explorer right-click entries — toggle them on or off without deleting anything (uses the standard LegacyDisable registry mechanism):

Presets: Win10 Default (classic full menu), Win11 Default (modern compact), Custom
The preset currently applied is marked with a tick, so you can see which style you are on without applying one
Selecting a preset resets to clean defaults, disabling third-party entries — re-enable individually
Win10/Win11 style toggle — switch between classic and modern menu (restarts Explorer)
Visual preview on hover — real screenshots of each menu style
Entry explanations — human-readable descriptions for common entries
"Applies to" column — shows whether entry affects Files, Folders, Desktop, or Directory Background
HKCU fallback — system-protected entries can be toggled via user-level registry override
Admin elevation banner with one-click restart as administrator

Environment Variables

Edit Windows environment variables without the cramped built-in dialog:

User and System scopes in one grid — filter by scope, search by name or value
In-place value editing, plus add and remove variables
Dedicated PATH editor for PATH-like variables — reorder directories, remove entries, and strip duplicates in one click
Missing folders highlighted so you can spot dead PATH entries at a glance
Local until Apply: changes are staged and each scope gets a one-time safety snapshot before its first write. New User snapshots stay under HKCU; System snapshots use access-controlled HKLM storage, and only that protected source can restore machine-wide variables
Changes broadcast to Windows, so new terminals pick them up without a reboot
System-scope edits need administrator rights (standard elevation banner); user variables can be edited without it

Dark Mode Scheduler

Switch the Windows light/dark theme instantly — apps only, or the taskbar and Start too
Schedule it — set a dark time and a light time (e.g. 19:00 / 07:00) and the theme follows automatically; handles the overnight switch correctly
Applies immediately with no sign-out, no admin needed, and is fully reversible
Honest about its limits — the schedule runs while SysManager (or its tray) is open; it's not a background Windows service

Volume Control

Per-app volume mixer — lists every app currently playing on your default playback device, each with its own volume slider, mute toggle, and a live peak meter
Live and lightweight — the app list reconciles on a ~1-second loop and the meters update on a shared timer, both paused while the tab is hidden so it costs nothing in the background
Real names and icons — resolved from each audio session's process (with a safe fallback for protected processes), including the Windows "system sounds" session
Per-app output routing — send one app to your headset and another to your speakers. Where Windows exposes the routing interface, each app gets an output-device picker in the row; on builds where it doesn't, the row shows a "Choose output device…" button that opens Windows' per-app sound settings so you're never left without a path. Plug a headset in while the tab is open and it appears on its own — the device list is re-read every ten seconds, and each app keeps the destination you picked for it. Windows does not report which device an app is currently using, so the picker says "Choose a device" rather than guessing: the override you set stays in force in Windows, but SysManager will not claim to know it after a restart
Volume presets — save the current per-app volumes and mutes as a named preset (e.g. "Gaming", "Focus") and re-apply it in one click; presets are keyed by app so they work across restarts, and are stored locally in %LocalAppData%\SysManager
Tray shortcut — a "Volume mixer" item in the system-tray menu opens the app straight to this tab

System Logs (Windows Event Log, friendly)

Browse System, Application, Security, and Setup logs
Each event gets a plain-English explanation and recommended next steps
Filter by severity and time range, plus full-text search
Mark any event with the flag button to keep it findable while you keep scrolling or change filters. "Clear marks" removes them all, including any a filter is hiding
Export to CSV, with a "search online" link for unknown events
The Security log requires administrator rights. Without them the page says so outright rather than showing an empty list that looks like "no events"

System Report

One-click, read-only snapshot of the whole machine: OS, CPU, memory (with per-slot module detail), GPU, motherboard, storage health, and active network adapters
Storage section carries SMART detail when available — temperature, wear %, and power-on time — reusing the same disk-health data as the System Health tab
Export as plain text, a styled self-contained HTML page, or structured JSON — or copy the text straight to the clipboard
Fully local: nothing on the system is changed and the report is written only to the file you choose — nothing leaves the machine

System Health

OS / CPU / RAM / storage overview
SMART data per disk: temperature, wear %, power-on hours, read/write errors
Colour-coded verdict per drive
Memory diagnostic that scans the last 30 days of WHEA events for RAM errors
Schedule the Windows Memory Diagnostic at next boot
Read-only chkdsk with auto-discovered NTFS/ReFS drives and multi-select
BIOS & firmware — BIOS version/date/vendor, motherboard model, boot mode (UEFI/Legacy), and Secure Boot status, all read-only. A Find BIOS update button opens the right manufacturer support page (ASUS, MSI, Gigabyte, ASRock, Dell, HP, Lenovo, …) for the detected board, and Copy info grabs the model + BIOS version for support searches. SysManager never flashes firmware itself.

Restore Points

List every Windows System Restore point — sequence number, date, description, and type — newest first
Create a restore point with an optional custom description (enables System Restore on the system drive first if it's off)
Restore the PC to a selected point, with a clear confirmation that warns Windows will restart and that programs/drivers added since that point are removed
Admin elevation banner — viewing the list works unprivileged; creating and restoring need administrator rights

Legacy Panels

One-click launcher for the classic Windows applets that newer releases keep hiding: Control Panel, Sound, Power Options, Network Connections, Region, System Properties, User Accounts, Device Manager, Computer Management, Programs and Features, Mouse, and Date and Time
Pure launchers — each just opens the built-in panel; nothing is modified, so no elevation or confirmation is needed
The applet list is fixed in code, so no typed input ever reaches the launcher

System Fixes

One-click repairs for common Windows breakages, each with a clear description and a confirmation before it runs:

Reset Windows Update — stop the update services, clear the SoftwareDistribution and catroot2 caches, and restart the services
Reinstall WinGet — re-register the App Installer when app installs/uninstalls fail
Set up Auto Sign-in — opens the built-in User Accounts dialog, so Windows stores the credential securely and SysManager never handles your password
Live output, honest success/failure reporting, admin elevation banner
Network-stack reset (Winsock / TCP-IP / DNS flush) lives on the Network → Network Repair tab, which offers those as individual one-click tools.

Tweaks Hub

One place for safe, reversible optimizations that are otherwise spread across tabs — review them all in a single list, tick the ones you want, and apply or undo in bulk
Essential group — low-risk, per-user tweaks that apply without administrator
Advanced group — higher-impact, machine-wide tweaks behind a caution banner (need administrator)
Apply Selected / Undo Selected with a live count of pending changes — nothing is written until you click, and each tweak is individually reversible
SysManager tries to create a System Restore point before the first change in a session (best-effort — needs administrator and Windows' once-per-24h limit); the status line tells you when one was actually created. Every tweak is also individually reversible regardless
Each row shows whether it's currently Applied or at the Windows Default; it's a front-end over the same reversible operations as the Privacy & Telemetry tab

Boot Analyzer

Shows how long your PC takes to boot — total, core (main path), and desktop ready-up time — across recent boots, read from the Windows boot-performance history (Diagnostics-Performance log)
A trend line tells you whether the last boot was faster or slower than your recent average
Lists the apps, drivers, services, and devices Windows flagged as slowing boot, with the delay attributed to each
Read-only; reading the log requires administrator (elevation banner shown)

Task Scheduler

Browse every Windows scheduled task with its state, type, last and next run, and what the task is for in Windows' own words — hovering that shows which publisher created it, which is what decides the type label
Color-coded by type — Third-party, well-known Telemetry (Compatibility Appraiser, CEIP, Feedback, Error Reporting), and System — so it's obvious what's safe to touch
Enable / disable any task; disabling is fully reversible and never deletes the task — System tasks show an extra warning before you disable them
Filter by name or path, and optionally hide system tasks to focus on the rest
Stoppable — the task scan can take a while on a machine with a full task tree, so there is a Cancel button while it runs, and whatever was already listed stays on screen. Refresh is disabled during a scan instead of stacking a second one on top
Changes need administrator and are verified by reading the task's state back
Overlaps Startup Manager on purpose: that tab lists the third-party tasks among these next to the programs that launch at boot, because that is all the shorter answer to "why is my PC slow to start" needs. It is the same task in both places, so switching it in one tab applies in the other as soon as that tab refreshes — the two lists are not kept in step live

Windows Update (Windows Update Agent COM API)

Direct Windows Update Agent COM integration (Microsoft.Update.Session) — installs everything WUA can offer, including optional drivers and firmware that PSWindowsUpdate filters out client-side
Unified DataGrid for everything in one scan — standard, feature upgrades, optional drivers, and hidden updates
Categorized with colored pills: Security, Cumulative, Defender, Driver, Servicing, .NET, Feature upgrade, Hidden — click headers to sort
Per-update checkbox selection with Select all / Deselect all — install exactly what you want, skip what you don't
Live progress per update: Connecting → Downloading → Installing → ✓ Installed streamed to the console as it happens
Per-row Status column updated in real time (Pending… → Downloading… → Installing… → Installed / Installed (reboot required) / Failed / Not applied)
Honest aggregate reporting: Installed X/Y. Failed: Z. Not applied: W.
Reboot detection — toast notification if any update requires reboot
Pending-reboot check, update history (last 30 — via PSWindowsUpdate)
Admin banner with a one-click "Run as Administrator" relaunch
PSWindowsUpdate is optional now (used only for the History view); install it from a normal, non-administrator SysManager session. The installer validates the official PowerShell Gallery endpoint and uses the current-user module directory. A Check now button confirms on demand whether the module is present, so you don't have to run Update History to find out
Update timing & deferral — defer feature updates by N days while security patches keep flowing, pause all updates for a bounded window (max 35 days, then Windows auto-resumes), or restore defaults. Uses the documented Windows Update policy keys and is fully reversible. No "disable updates forever" option by design — the strongest action is a bounded pause, so the machine is never left permanently unpatched.

App Updates (winget)

Scan for upgradable packages
Sort by name, ID, version, or source via clickable column headers
Select all or individual packages, bulk upgrade with per-package status

Quick Cleanup

Clear TEMP folders
Empty the Recycle Bin
Run SFC /scannow and DISM /RestoreHealth in the background — keep using the app while they grind
Component store (WinSxS), reported before it is touched. WinSxS routinely holds several gigabytes of superseded Windows components, and it is where the free editions of the mainstream cleaners find their biggest number. "Check component store" runs the read-only DISM /AnalyzeComponentStore and tells you what Windows itself says is reclaimable; only then does "Clean up component store" become clickable, and only behind a confirmation that states the cost — after a cleanup, updates already installed can no longer be uninstalled. /ResetBase is never used, and a test makes it impossible to add by accident

Deep Cleanup

Scan-first: every category is discovered with size + file count before a single byte is deleted. You pick what goes.
Says when administrator rights are what's stopping it. Six of the buckets live in the Windows folder — the Windows Update download cache, Delivery Optimization, the Installer patch cache, Windows\Temp, Prefetch and the blue-screen memory dumps — and without administrator they are still scanned and counted but cannot be deleted. They used to show as "skipped" with no reason given; the tab now says so at the top, and offers to restart elevated
System buckets: NVIDIA / AMD / Intel installer leftovers, Windows Update cache, Delivery Optimization cache, Windows Installer patch cache, TEMP, Prefetch, crash dumps, old CBS logs, DirectX shader cache, Recycle Bin on every drive.
The two biggest wins on a machine that has crashed, both new and both scoped to exactly the files they name: the blue-screen memory dumps (MEMORY.DMP is sized to your RAM, so it is routinely gigabytes — never ticked for you, because deleting it ends any investigation into the crash) and the Explorer thumbnail & icon cache, which Windows rebuilds and whose clearing is the standard fix for blank or wrong thumbnails. Its folder also holds your recent-files jump lists, so only thumbcache_*.db and iconcache_*.db are counted, and only those are deleted.
Gamer buckets — launcher caches only, never game files or logins: Steam (appcache, htmlcache, depotcache, shader cache), Epic Games Launcher, Battle.net, Riot / League of Legends, GOG Galaxy, EA Desktop.
Windows.old is detected and flagged as irreversible, never selected by default.
Safe by design: never touches browsers, passwords, the registry, active drivers, or actual game files. Locked files are skipped, never forced.

Large files finder (part of Deep Cleanup)

Scan Downloads, Documents, Desktop, Videos, Pictures, Music, Program Files, or a whole drive.
Configurable min-size (default 500 MB) and top-N (default 100).
Read-only — only "Show in Explorer" and "Copy path" actions. Deletion is disabled by design so a mis-click can never hurt anything.

Startup Manager

Lists the programs that run at Windows boot: the Run and RunOnce registry keys for both your account and the whole machine, including the separate location 64-bit Windows uses for programs installed by a 32-bit installer, plus both Startup folders and scheduled tasks belonging to programs you installed
Windows' own scheduled tasks are deliberately left out, so the list stays short enough to read and nothing here is something you should not touch. Task Scheduler is the tab that shows every task, Windows' included — a third-party task appears on both, and it is the same task in both places
Also reads the "policy" startup list that Task Manager does not show at all — a favourite hiding place for bundled software, since you can switch off everything visible, restart, and it still starts. Windows gives an app no way to disable these, so each one is labelled "Set by a system policy — managed elsewhere" instead of being offered a switch that would silently do nothing
Toggle on/off without deleting the original entry (same mechanism as Task Manager) — the disable flag is written to the location Windows actually reads for that kind of entry, so a disabled item really stays down
A Signature column that says whether Windows can confirm the publisher. The Publisher column next to it comes from the file's own version info — a string any program can set to "Microsoft Corporation" — so on its own it is a trust badge with nothing behind it. This checks the file's certificate instead, using the same chain validation the in-app updater uses, and shows one of three things: Verified ("Windows can confirm this really comes from Google LLC"), Unsigned, or Check failed. Programs whose command doesn't point at a readable file get no badge at all rather than a guess.
- Unsigned is grey, not a warning. Most small utilities are unsigned and so is SysManager itself; the tooltip says so in as many words. Amber is reserved for a file that is signed and whose signature does not hold up — the one case here worth a second look.
- The verdict is Windows' own, from the same check behind Explorer's Digital Signatures tab, so it agrees with what Windows tells you elsewhere. It asks for no revocation lookup and answers from your PC only, so opening the tab never waits on the network and downloads nothing.
- Windows components count as signed too. Windows signs most of its own programs through a separate catalogue file rather than inside the program, and both are read — so powershell.exe, cmd.exe and the rest are confirmed rather than listed as unsigned. Anything still marked Unsigned after that is genuinely unsigned.
Sort by name, publisher, location, safety, status, signature, or startup impact via clickable column headers
Plain-language description for recognised programs (from the built-in database) instead of a raw command line, plus a Safety chip — Windows / Known app / Not recognised — so you can tell what an entry is before deciding whether to turn it off
Shows name, publisher, and enabled/disabled status; the full command path is on hover
A Location column saying where the entry actually lives — which registry Run key and hive, which Startup folder, or Task Scheduler. This is the difference between an entry you can switch off yourself, one that needs administrator rights, and one a system policy holds in place; long paths shorten from the end, with the full value on hover
A Startup impact column — how long Windows measured that program delaying your last start-up, from Windows' own boot-performance events rather than an estimate. Sorts by the real delay, so the slowest entry comes first. A figure appears only when Windows' report matches the entry exactly, by name or by executable file name: a near-match would blame the wrong program, and this is the tab where you act on that. Blank means Windows measured nothing, never "0 s". Requires administrator rights, because reading those events does — the banner at the top of the tab says so
Open file location in Explorer

Windows Features

Lists all Windows optional features with current state (Enabled/Disabled)
Toggle enable/disable per feature with confirmation dialog
Categorized: Virtualization, Networking, Development, Media & Print, Legacy
Shows reboot-required status after toggling
A Windows restore point is attempted before the first toggle of the session, shared with the other tabs that change system settings. This is the tab where it matters most: turning a feature back on is a second servicing operation that can itself fail, and unlike removing a Store app, a restore point really does cover this kind of change. Mentioned only when Windows actually made one, and never on a toggle that failed
Search/filter across all features
Requires administrator privileges for modifications

Duplicate Finder

Three-pass scan: group by size, partial-hash pre-filter, then full SHA-256
Duplicate groups sorted by wasted space (descending)
Preset folders or custom folder selection
Configurable minimum file size filter
Suggests which copy to keep — one file per group is badged Keep, chosen as the oldest (usually the original). The rule is stated on screen rather than applied silently, each row shows its date so you can check it, and "Keep this one" moves the badge when you know better — a copy that preserved its timestamp, or a cloud-sync rewrite, will fool the heuristic
Read-only — "Show in Explorer", "Copy path" and "Keep this one" only. Nothing is deleted, moved or renamed; deciding which of five identical photos to remove is done by you, in Explorer

Disk Analyzer

Space breakdown by top-level folders with drill-down navigation
Drive usage bar with total/used/free
Preset paths (fixed drives, user profile, Program Files) or custom browse
Show in Explorer for each folder
Export CSV saves the breakdown to a file you choose the location for, with both the readable size and the raw byte count — so a spreadsheet can sort it, which it cannot do with "9.8 GB" and "10 MB" as text. Useful for comparing before and after a cleanup without running a minutes-long scan twice from memory
Says what it doesn't count — four Windows system areas ($Recycle.Bin, System Volume Information, Windows\WinSxS, Windows\CSC) are skipped because they are slow or unreadable, and junctions are never followed, since following one would double-count or lead outside the folder you asked about. WinSxS alone is often several GB, so the tab states on screen that its total can be smaller than the free space Windows reports, and names the exact folders on hover
Folders Windows wouldn't let it fully read are marked, so a partial figure never looks like a complete one
Remembers your last scan of each folder and shows what changed — "3.2 GB larger than your last scan on 12 Jul" — so a one-off number becomes an answer to "why did my disk fill up?". It is always phrased as since your last scan, never as live monitoring, because you choose when to scan. Stored only on this PC and never carried to another (folder sizes here mean nothing there)

Process Manager

Lists running Windows processes with PID, memory, threads, status, and when each one started
Real-time filter by name, description, category, or PID
Sort by memory, CPU usage, name, category, PID, or start time via clickable column headers
Export CSV saves the list as currently filtered to a file you choose the location for — someone who has typed a filter to isolate a suspect gets that list, not all ~470 rows. Both the readable and the raw values are included, so a spreadsheet can sort by size and by start time
Started column — when each process began. "Something is eating my CPU" is usually answered by when it appeared: a process that started three minutes ago is a very different suspect from one that has been running since you turned the PC on, and sorting by it groups everything that arrived recently. Processes whose start time Windows will not reveal — most system processes, unless you run as administrator — show a dash rather than a made-up date
Built-in description database — 108 common Windows processes and popular applications with plain-language descriptions and categories (System, Browser, Development, Communication, Media, Gaming, etc.). The description sits under each process name and the category has its own sortable column, so a process you don't recognise explains itself without a web search — including the Windows system processes whose own description Windows withholds unless SysManager is elevated
Safety column — every process is labelled Windows, Known app or Not recognised, with a hover explanation of what that means for ending it. Sortable, so everything unrecognised can be grouped together at a glance
Signature column — whether Windows can confirm who made the running program, read from the file's own certificate. This is a different question from Safety, and the difference is the point: Safety recognises a process by name, so a copy of svchost.exe sitting in a downloads folder inherits the real one's label. The certificate belongs to the file. Shows Verified ("Windows can confirm this really comes from Google LLC" on hover), Unsigned, or Check failed
- Unsigned is grey, not a warning — most ordinary programs are unsigned, and so is SysManager itself. Amber is kept for a file that is signed and whose signature does not hold up, which is the one case worth a second look
- Processes whose file Windows will not let SysManager read — most system processes, unless you run as administrator — get no badge at all rather than a guess
- The verdict is Windows' own — the same check behind Explorer's Digital Signatures tab. It asks for no revocation lookup and answers from your PC only, and it runs just for processes that have just appeared, so a tab refreshing every second neither re-checks the same programs nor reaches for the network
- The list appears first and this column fills in behind it. Checking a signature takes Windows about a fortieth of a second per program, which adds up over everything running, so the process list is on screen straight away and the badges arrive over the next couple of seconds rather than the tab making you wait for them
- Windows components count as signed too — Windows signs most of its own programs through a separate catalogue file rather than inside the program, and both are read, so svchost.exe, conhost.exe and the rest are confirmed rather than listed as unsigned. What is still marked Unsigned is genuinely unsigned
Kill process with confirmation dialog, and the warning matches the real cost. Processes Windows genuinely cannot survive losing (winlogon, csrss, lsass, …) are refused outright. Security and servicing processes (Defender's engine, Windows Installer) can be ended, but only after a prompt that says plainly it can switch off protection or interrupt an update part-way, and that a restart does not undo that. Other Windows components get a warning that a feature may look broken until you sign out. Everything else gets the ordinary "unsaved work may be lost" confirm
Open file location in Explorer

Resource History

Historical CPU, RAM, GPU usage and temperatures — the app samples your vitals every 10 seconds in the background (including while minimized to the tray), so you can investigate what caused a spike yesterday instead of seeing only the live moment
Scrollable timeline — pick a range (last hour, 6 hours, 24 hours, 7 days, 30 days); the usage chart (CPU / RAM / GPU %) and a separate temperature chart (CPU / GPU °C) redraw to fit, downsampled so even a 30-day view stays smooth
Configurable retention — keep 7, 14, or 30 days of history; older samples are pruned automatically
Export to CSV — save the visible range for analysis in Excel or elsewhere
Strictly local: history is stored in your %LocalAppData%\SysManager folder and nothing ever leaves the machine

Bandwidth Monitor

See your network usage at a glance — live total download and upload speed with a rolling throughput chart (the last ~2 minutes), so you can spot a sudden upload (a background sync, an update, something unexpected) the moment it starts
Who's using the network — a per-app list showing which programs are talking, how many connections each holds, and the remote ports involved. This works with no administrator rights and no setup — it reads the same connection tables Windows exposes to any user
Precise per-app speeds (optional) — for exact upload/download rates and session data totals per app (like Task Manager's Network column), enable precise mode; it uses a Windows kernel trace and so needs administrator. The tab offers it only when you're already running as administrator and falls back to the no-admin view automatically if the trace can't start — it never breaks the tab
Export CSV saves the per-app list to a file you choose the location for, with the raw bytes-per-second and byte totals beside the readable figures — a file whose only numbers are "1.2 MB/s" cannot be sorted or added up
Threshold alert — set a Mbps limit and the tab warns you when total download or upload goes over it (handy for catching a runaway background upload); set it to 0 to turn the alert off
Look back over the last hour, day, or week — pick a range and the chart shows the throughput it recorded, with how much you actually downloaded and uploaded over that period and the fastest speed you hit. That answers "where did my data cap go?" without any account or cloud service. History is recorded while the tab is open and kept for 7 days, in a plain file on your own PC
Strictly local and read-only: SysManager only observes, never throttles or blocks, and nothing about your traffic leaves the machine

File Lock Detector

Find what's holding a file — when you get a "file in use" error, enter or browse to a file/folder path and see which process(es) are using it, via the Windows Restart Manager (the same mechanism Explorer's own dialog uses)
Shows process name, PID, type, and start time for each locker
Export CSV saves the list to a file you choose the location for, including the flag that marks a process Windows will not let you safely end — the one row nobody should act on
End process — terminate a selected locker (with confirmation) to release the file; critical system processes are protected from termination
Detection works as a standard user; ending a process owned by SYSTEM or another user needs administrator rights (surfaced, not crashed)

Camera/Mic/Location

Shows which apps recently used your camera, microphone, or location, and when
Reads the Windows access history (CapabilityAccessManager consent store) — covers both Store apps and desktop programs
Devices in use right now are flagged and sorted to the top
Read-only: an Open privacy settings button hands off to Windows to grant or revoke a permission — SysManager never changes capability permissions itself
Export CSV saves the history to a file you choose the location for, so evidence about which app used the camera can be sent to whoever helps you with the PC instead of photographed off the screen. The file stays on your machine unless you move it

Settings Watchdog

Catch the settings Windows Update silently resets — feature and quality updates often flip telemetry back to Full, re-enable web search, the Widgets board, lock-screen ads, and Start-menu suggestions
See exactly what is being watched — the full list of monitored settings, each with its value right now in plain language and the reason it is watched, visible from the moment you open the tab rather than only after something has changed
Save a baseline of your current preferences with one click; the watchdog remembers exactly what each watched setting was
Check now re-reads the live values and lists any drift in plain language — e.g. "Diagnostic data: was 'Off (Security)', now 'Full'" — with the category and a before/after comparison
Export CSV saves the list of changes before you restore them. Restore overwrites the "now" column, so this file is the only record of what Windows changed — which is why the button sits to the left of Restore
Restore changed writes the drifted settings back to your baseline values in one step (HKLM-backed settings need administrator rights, surfaced not crashed)
Strictly local: the baseline lives in your %LocalAppData%\SysManager folder and the watchdog only ever reads or writes a fixed list of well-known registry values

Operation Lock

Prevents conflicting concurrent operations across tabs
Operations grouped by category (Disk, Network, SystemModification)
If a conflicting operation is already running, the UI shows which operation is blocking and refuses to start the new one
Integrated into every tab that mutates disk, network, or system state (Cleanup, Deep Cleanup, Disk Analyzer, Duplicate Finder, Speed Test, Traceroute, Network Repair, Shortcut Cleaner, Performance Mode, Gaming Profile, Environment Variables, and the Dashboard's quick actions)
Gaming Profile takes the lock before it reads your current settings, not just around the changes — it and Performance Mode set the same power plan and the same visual-effects switch, so whichever starts second would otherwise write down the other one's change as "how you had it" and restore you to that later
Undoing is never refused. If a game exits while another change is running, the optimizations are still reverted — leaving your PC on a gaming power plan because a lock was busy would be worse than the clash the lock exists to avoid

Shortcut Cleaner

Scans Desktop, Start Menu, Quick Launch, and Recent Items for broken .lnk shortcuts whose targets no longer exist
Lists results with name, location, and missing target path
Export CSV saves the list before you delete anything, naming both the shortcut and its missing target, so the change is reviewable rather than a batch of deletions nobody can audit
Select all / deselect individual items
Move to Recycle Bin or permanent delete, with confirmation dialog
COM-based IShellLink resolution for accurate target validation

Scheduled Maintenance

Automate maintenance on a schedule — register one Windows scheduled task that runs SysManager in the background (via its CLI) to clean temporary files or purge standby memory, daily or weekly at a time you pick
See the last run, next run, and last result of the task at a glance
Runs on battery too. Windows will not start a scheduled task on battery unless it is told to, so on an unplugged laptop the schedule would silently never fire — it now starts regardless, and keeps going if you unplug mid-run. Untick it if you would rather it waited for mains power.
Optional "only when I'm not using the PC" condition, off by default
The schedule you are about to save is spelled out in words, conditions included, and updates as you change the settings
Windows' own count of skipped runs is shown when it is not zero — the only signal Windows gives for a run its conditions blocked
Update or remove the schedule any time, each with a confirmation
Runs in your user context (no admin required) and only ever touches its own task at \SysManager\Scheduled Maintenance — no other scheduled tasks are affected
Built on the same safe CLI verbs; nothing destructive is automated

Privacy & Telemetry

12 registry-based toggles across 3 categories (Telemetry, UI Declutter, Features)
Telemetry: disable diagnostic data, activity history, advertising ID, feedback prompts
UI Declutter: disable Start suggestions, tips, lock screen tips, Spotlight ads
Features: disable Copilot, Cortana, web search in Start, widgets
Explicit apply — flip toggles to stage changes, press Apply to write to the registry, or Discard to revert pending changes. A live counter shows how many changes are queued, so accidental clicks never modify the system silently.
Category filter and search
Requires admin for HKLM-backed toggles
Fully reversible — re-enable any toggle with one click
A Windows restore point is attempted before the first Apply of the session — the same one Tweaks Hub takes, so the protection no longer depends on which tab you reached the toggles through. It is attempted after you confirm, so declining costs you nothing, and it is mentioned only when one was really created

File Shredder

Secure multi-pass file and folder deletion beyond recovery
Three shred methods: Quick (1 pass, zero fill), Standard (3 passes), Thorough (7 passes)
Cryptographically random overwrite data (RandomNumberGenerator)
Add files or entire folders via file picker dialogs
Progress tracking per-item with cancel support
Skips junction points and symbolic links (prevents symlink attacks)
Confirmation dialog before irreversible shred

Ping

Says WHERE the problem is, not just that there is one. Targets are tagged by role — your gateway, public DNS, game servers, streaming services — and the verdict names the layer: "Problem on your local network", "Problem at your ISP or upstream", "It's the game server, not you", "Streaming service is slow", or "Multiple layers affected". This is the point of the tab: "my internet is bad" is not actionable, "your router is fine, your ISP is not" is.
Watches several hosts at once, each with its own live latency, average, jitter and loss, and its own colour on the shared chart
Five presets for gamers and streamers, plus your own: type a hostname or IP to add a target, and only the ones you added carry a remove button
- Global — Google DNS, Cloudflare, Quad9, google.com
- CS2 Europe — Valve matchmaking relays (Vienna, Luxembourg, Warsaw, EU West/Central/East)
- FACEIT Europe — competitive CS2 servers in DE, NL, UK
- PUBG Europe — the EU matchmaking cloud regions (Frankfurt, Ireland, London)
- Streaming — YouTube, Twitch, Cloudflare, to correlate buffering with the network
Your gateway is detected and added automatically, so the first thing the chart can tell you apart is your own network from everything beyond it
Live latency chart with a pickable window (1, 5, 10 or 15 minutes) and a pingable interval, default once per second
Headline numbers across all targets: average ping, worst loss, worst jitter
Start, Stop and Clear are separate, and the status line confirms what Clear did

Traceroute

Traces every ping target on a loop, so you can see which hop the latency appears at rather than only that the destination is slow — interval 30 s to 10 min, default 60 s
Latency per hop, charted, alongside the hop table (number, address, ms)
One-off trace to any host you type, with its own status line and a Cancel button
Shares its targets and its start/stop state with the Ping tab, because it is the same monitor answering a different question

Speed Test

Two engines, and it explains why they disagree. Ookla measures raw TCP throughput to a nearby server (closest to what you pay your ISP for); the HTTP test measures through Cloudflare's CDN (closer to real browsing, usually lower). The tab says this on screen rather than leaving you to wonder which number is "wrong".
A verdict, not just numbers — each result says what that speed is actually enough for ("Comfortable for HD streaming on one or two devices, and for video calls", "Handles 4K streaming and several devices at once") plus one line comparing it with your previous test on the same engine, so a slow day is visible as a slow day rather than a number you have to interpret
Pick the Ookla server or leave it on Auto (nearest): Bucharest, London, Frankfurt, Amsterdam, Paris, New York
Separate persistent history per engine, the last 20 results each — date, download, upload, ping and server — clearable on its own, because comparing an HTTP run against an Ookla run is not a comparison
Progress bar with a time-remaining estimate and a Cancel button; the Ookla CLI is downloaded on first run
Only one engine runs at a time, so the two cards can never show conflicting progress

Network Repair

Three fixes, each explained before you press it — what it does, whether it is safe, whether it needs a reboot, and what kind of breakage it is for:
- Flush DNS Cache — clears the local resolver cache for stale entries. Safe, instant, no reboot.
- Reset Winsock Catalog — resets the socket API that every networked app uses, for damage from broken VPN drivers, malware or corrupted LSP providers. Admin + reboot.
- Reset TCP/IP Stack — rebuilds the TCP/IP registry keys from Windows defaults. The last resort, and labelled as one: it discards custom IP configuration, routes and adapter settings. Admin + reboot.
Admin elevation banner stating exactly which of the three need elevation and what unlocks once you restart elevated
A reboot warning appears only after a fix that actually needs one, rather than standing on screen permanently
Each of the three is confirmed before it runs, and the buttons disable while a repair is in flight so two resets cannot overlap

DNS & Hosts

DNS Preset Switching — one-click DNS change: plain resolvers (Google, Cloudflare, Quad9, OpenDNS) plus ad/malware/family-blocking variants (Cloudflare 1.1.1.2 malware / 1.1.1.3 family, AdGuard DNS ad-blocking + family, OpenDNS FamilyShield), each with a description of what it blocks. IPv6 resolvers are configured automatically alongside IPv4. Preset changes and reset to automatic (DHCP) are confirmed, then verify the captured adapter and DNS state again inside the mutation script. An Undo button follows that adapter's stable identity and restores its exact prior IPv4 and IPv6 automatic/static configuration without persisting DHCP-supplied addresses as static overrides.
Hosts File Editor — view, add, and remove entries from the Windows hosts file with a clean table UI. Add IP + hostname pairs, toggle entries, or remove them. Backs up hosts file before modifications.
Requires administrator privileges for both DNS and hosts operations
Admin elevation banner with one-click restart

Bulk Installer

Curated catalog of popular applications grouped by category: Browsers, Communication, Media, Development, Utilities, Gaming, Security, Office & Productivity, Creativity, Networking & VPN, Runtimes & Frameworks
Select multiple apps and install all via winget in one batch operation
Custom winget search — search the entire winget repository and add any package to your install queue
Category filter and text search across the catalog, plus a button that ticks every app in the chosen category at once
Per-package install status tracking with ETA
Live console output showing winget progress
GroupedView with visual category headers

New App Alerts

Monitors Program Files, AppData\Programs, and registry uninstall keys for new application installations
FileSystemWatcher on install directories + 30-second registry poll cycle
Shows timestamped install history with app name, publisher, path, and detection source
Export CSV saves the history to a file you choose the location for. Worth doing before Clear History, which erases it — the button sits to the left of it for that reason
Start/stop monitoring, acknowledge alerts, show all currently installed apps, clear history
Notifies you when a new install is detected, so you find out even when you are on another tab or the window is in the notification area

App Blocker

Blocks applications from executing using Image File Execution Options (IFEO) registry mechanism
Enter an exe name or browse for a file, confirm, and the app is prevented from launching
Fully reversible — unblock restores normal execution
Shows list of currently blocked apps with select/deselect and batch unblock
Requires admin privileges for registry modifications, in both directions — blocking and unblocking write the same protected setting, and each says so before asking you to confirm anything

Debloater & Ads

Remove preinstalled Windows Store apps you don't use:

Scan all installed Store apps with name, publisher, and a short description
Curated "common bloat" preset pre-selects safe, frequently-removed apps (Bing News/Weather, Clipchamp, Solitaire, Xbox apps, consumer Teams, and more)
System-critical apps are protected — the Store, frameworks, and security/shell components are denylisted and can never be selected or removed
Impact summary + confirmation before anything is uninstalled
Reversible — removal is per-user, so any app can be reinstalled from the Store
A Windows restore point is attempted before the first removal, shared with the other tabs that change system settings. Described honestly rather than reassuringly: System Restore does not bring Store apps back, so reinstalling from the Store stays the real undo and the app says exactly that
Search and per-app descriptions help you decide before removing

Browser Cleaner

Reclaim space and clear browsing traces, per browser:

Auto-detects Chrome, Edge, Brave, Opera, and Firefox
Every profile, not just the first — if you keep separate Chrome/Edge/Brave profiles (personal and work, or one per person), each is scanned and named in its own row ("Google Chrome — Profile 1"), so you can see which one you're cleaning. Cleaning one profile never touches another
Per-category with size shown: Cache, History, Cookies, Sessions
Cookies/sessions are flagged and left unticked by default — cleaning them signs you out, so it's always an explicit choice; cache and history are pre-selected
Firefox gets cache, cookies and sessions — but not history, on purpose. Firefox keeps history and your bookmarks in the same file (places.sqlite), so clearing "history" would delete your bookmarks with it. Rather than do that quietly, the tab simply doesn't offer History for Firefox. Its cookies and sessions target only their own named files — never saved logins, keys or bookmarks
Confirmation with an impact summary before anything is deleted
Per-user (no admin); locked files (browser open) are skipped, not forced, and symlinks/junctions are never followed

Edge/OneDrive Remover

Get Microsoft Edge and OneDrive out of your way — reversibly:

OneDrive: full removal for your account — stops the client, runs the official uninstaller, and clears its File Explorer sidebar entry. No admin needed. Files already synced to this PC stay on disk; cloud-only files simply aren't downloaded
Edge: disable & de-integrate, never uninstall — Windows relies on Edge (WebView2) and reinstalls it if forced out, so instead this turns off its background mode and startup boost (via the documented Group-Policy keys) and disables its automatic-update scheduled tasks, so Edge stops running on its own. You can still open it normally
A Restore button for each — reinstall OneDrive and re-pin its sidebar entry, or clear the Edge policies and re-enable its update tasks — so nothing here is one-way
Honest about the default browser — Windows hash-protects the default-browser choice, so no app can switch it for you; the tab opens Windows' default-apps settings and guides you instead of pretending to change it
Every action confirms first with a plain-language impact summary; disabling Edge needs administrator (the tab explains why and what it unlocks), removing OneDrive does not
A Windows restore point is attempted before the first change of the session — shared with the other tabs that change system settings, so at most one is made no matter how many tabs you use. It is mentioned only when one was really created: System Restore is switched off on many PCs and Windows allows roughly one point a day, so silence means "no snapshot", never a promise

Defender Tweaks

Manage Microsoft Defender without digging through Windows Security:

Status at a glance — real-time protection, cloud protection (MAPS), PUA protection, and Controlled Folder Access
Toggle PUA protection and Controlled Folder Access (ransomware protection)
Scan exclusions — add or remove folders Defender should skip (handy for big game libraries); paths are validated and additions never replace your existing exclusions
Honest about Tamper Protection — if it's on, Windows can silently ignore changes, so the tab detects it, warns you, and only reports a change as done after reading it back and confirming Windows actually applied it
Changes need administrator and are confirmed first; lowering a protection is always an explicit, reversible choice
A Windows restore point is attempted before the first change of the session, shared with the other tabs that change system settings. All four changes run through one path, so none of them can quietly skip it, and it is mentioned only when Windows really made one — never on a change that was rejected

Notification Blocker

Mute the apps that nag you with pop-up notifications — update reminders, trial offers, "rate us" prompts:

Lists every app that has shown a notification, most recently active first, with how many notifications it sent recently so the noisy ones stand out
Mute per app with a switch — it flips the same per-app setting as Windows Settings > Notifications, so nothing is hooked or hacked, and Windows itself honors it
Master switch to silence everything at once (with a clear warning that it also mutes calendar and reminder alerts)
Pending-changes flow — flips stay local until you press Apply, with a confirmation and a Discard to back out
Fully reversible (flip the switch back), per-user, no administrator needed

Battery Health

Charge %, health %, wear level, cycle count, chemistry
Design vs full-charge capacity via WMI
Estimated runtime display
Gracefully shows "No battery detected" on desktops
Health and wear need administrator rights (Windows only reports capacity to an elevated process). Without it they read "Not available" and the page explains why, instead of showing a number that isn't a measurement.

Uninstaller

Lists all installed applications via winget with size from registry
Filter by name or package ID
Sort by name, size, or publisher via clickable column headers
Select/deselect all, batch uninstall with confirmation dialog
Local app support — uninstalls apps not in winget via registry UninstallString
Runs uninstall actions only from an unelevated SysManager session; each package requests its own UAC elevation when required
Live console output from winget

Gaming Profile 🔬

One-click "game mode" — apply a bundle of reversible optimizations together, then restore them automatically when the game exits (or with a single Stop)
Optionally target a running game — its CPU priority is raised to High and it's pinned to the performance cores, and its exit is what triggers the automatic revert
System-wide optimizations — Ultimate Performance power plan, reduced visual effects, finest (~0.5 ms) timer resolution, freeing standby memory, pausing Windows Search indexing, and silencing notifications — each ticked individually
Fully reversible & snapshot-based — the original state (power plan, visual effects, indexing, notifications) is captured before any change and restored exactly; SysManager also tries a System Restore point first (best-effort, needs administrator)
Your own changes win — if you switch notifications back on yourself while a profile is running (from Privacy & Security → Notifications, which is the same switch), the restore leaves your choice alone instead of silencing them again when the game exits
Crash-safe — the session is recorded on disk, so if SysManager closes mid-game the system-wide changes are offered for restore on next launch
Honest about admin — freeing standby memory and pausing indexing need administrator; without it they're clearly skipped, not silently failed
🔬 Preview — fully reversible today; closing background apps and saved per-game profiles are planned for a later update

Timer Resolution

Lower input latency for games — requests the finest Windows timer resolution (≈0.5 ms) instead of the ~15.6 ms default, via the ntdll NtSetTimerResolution API
Live current/finest/default readout — always re-queries the effective resolution (Windows 11 may stop honoring a request while the window is minimized), so the number shown is the real one
One-click enable / restore — fully reversible; the request is released when you restore it or simply close the app. No admin required
Power-cost warning — a finer timer wakes the CPU more often, increasing power draw and battery drain on laptops

Display Profiles

Quick-switch resolution + refresh rate — pick a mode (e.g. 165 Hz for gaming, 60 Hz for work) from the list of everything your display supports, using only the Windows display APIs (no NVIDIA/AMD tool conflict)
Safe by design — applies for the session, so a reboot reverts; on top of that a 15-second auto-revert restores the previous mode unless you confirm "Keep", so a bad mode can never strand you on a blank screen
Per-display — choose which monitor to configure; shows the current mode
Validates each mode (CDS_TEST) before applying; no admin required

CPU Core Affinity

Pin a process to specific CPU cores — pick a running process and choose which logical CPUs it may run on, then Apply (or Restore the original)
Filter the process list by name or ID, so finding your game isn't a scroll through hundreds of svchost entries — the same filter the Services, Task Scheduler and Windows Features lists have
See what's already pinned — a process running on a subset of cores shows it in the list ("chrome (1234) — 4 of 16 cores"), so you can tell at a glance what you've already tuned instead of selecting each one to find out
Hybrid-CPU aware — on Intel 12th-gen+ CPUs, P-cores and E-cores are detected and labelled (via GetLogicalProcessorInformationEx), with one-click P-cores / All cores presets
Safe and temporary — affinity is per-running-process and reverts when the process exits; no admin for your own processes (changing another user's process is surfaced as needing admin, not a crash)
An empty selection is rejected — Windows treats an empty mask as "let the OS decide", so the app never silently does the opposite of what you picked

Standby List Cleaner

Frees cached standby memory — the built-in equivalent of ISLC, to reduce stutter when RAM runs low in games
Live stats — total RAM, available, and memory load %, refreshed every 2s
Purge on demand or auto-purge when available RAM drops below a threshold you set with a slider
Safe and non-destructive — the standby list is clean, disk-backed file cache, so clearing it loses nothing; Windows reloads from disk on next use
Reading stats needs no admin; purging requires administrator (it enables the same privilege RAMMap and ISLC use) and reports cleanly if not elevated
The auto-purge switch and its threshold are remembered between sessions, so arming it once is enough

Performance Mode

Per-tweak Apply buttons — each setting is independent
Power Plan: Balanced / High Performance / Ultimate Performance
Visual Effects: reduce animations via P/Invoke (instant, no logout)
Game Mode: enable/disable via registry
Xbox Game Bar: disable overlay and Game DVR via registry
NVIDIA GPU: force max performance with auto-detected GPU subkey (reboot required)
Processor State: force CPU min state to 100%
Overlays info: manual instructions for Discord, Steam, NVIDIA GFE, EA App
OriginalSnapshot: captures the exact system state before the first change, persists it locally, and reloads it when the tab opens so Restore All remains available after an app restart; persisted fields are validated before use and the confirmation shows when the baseline was captured
It will not record your settings while a game profile is running — those are the profile's power plan and visual effects, not yours, and saving them as your baseline would restore you to them later. It asks you to stop the profile first. A baseline saved before the profile started is still used normally
Confirmation dialog before every change
Restore point creation: create a Windows System Restore point before making changes (requires admin)
RAM working set trim: free physical RAM by trimming all process working sets — same as RAMMap's "Empty Working Set" (useful before launching a game)
Hibernation toggle: enable/disable hibernation to free disk space (deletes hiberfil.sys when disabled)

Services

Lists all Windows services with current status and startup type
Gaming recommendations: services tagged as "safe to disable", "advanced", or "keep enabled" — hover a row's description to read why, in plain language instead of Microsoft's own wording
Filter by status (Running/Stopped), safety level (Safe/Caution/Critical), gaming recommendation (Safe to disable / Keep enabled / Advanced), or free-text search — each chip shows how many services it matches, so you know before pressing it
Mark any row with the flag button to keep it findable while you keep filtering or searching. "Clear marks" removes them all, including any a filter is hiding
Start, stop, disable, or enable services with confirmation dialogs
Requires admin for all mutations

Drivers

Sortable DataGrid table of all installed system drivers
Columns: Device Name, Manufacturer, Version, Date, Signature — click headers to sort
Signature — whether Windows reports the driver as digitally signed. Manufacturer is a name the driver package supplies about itself, so it proves nothing; this column comes from Windows. It says "Signed", not "Safe" — a signature identifies the publisher, and Windows will load a signed driver from anyone with a valid certificate. Blank means Windows reported nothing, which is not the same as unsigned
Hide built-in Windows drivers — tick the filter to leave only the drivers your hardware maker installed (graphics, audio, network, …), which is usually what you care about when checking whether something needs updating. The count shows both totals, so nothing looks like it vanished
Data parsed from Get-CimInstance Win32_PnPSignedDriver

Dashboard

One-line OS / CPU / RAM / disk summary
Live uptime counter
Real-time vitals — CPU, RAM, and GPU usage refreshed at 300 ms while the tab is visible (polling pauses automatically when it isn't), with live indicator dots.
Recent Activity — what SysManager actually changed on this PC, with timestamps: cleanups, deletes, uninstalls, privacy and DNS changes, restore points, shredded files. Counts and sizes only — never file names, since the log is plain text on your own disk. Opening a tab isn't an action, so it isn't listed.
Quick Tune-Up — one-click wizard that cleans temp files, optionally empties the Recycle Bin, scans for broken shortcuts, checks disk SMART health, flags high uptime (14+ days) and high RAM usage (85%+). Displays a summary card with freed space, warnings, and links to relevant tabs. Non-destructive, no admin required.
Health Score — overall system health gauge (0–100) combining disk SMART, free space on the system drive, RAM usage, uptime, and battery wear. Free space counts for a quarter of it, because a full drive is the commonest reason a PC feels slow and the one thing on that list you can fix today — so a machine that is out of room cannot score green, and the recommendation says how many GB are left and points at Deep Cleanup. Color-coded ring (green / amber / red) with up to 3 actionable recommendations. Auto-computes on load and refreshes with "Scan system".
System Tray — background health monitoring (60s polling), CPU/RAM tooltip, Windows notifications when RAM > 90%, uptime > 14 days, or disk health degrades. Context menu: Show SysManager / Volume mixer / Exit.
Closing is your choice — the first time you close the window, SysManager asks whether it should keep running in the notification area or close completely, and remembers the answer. If you pick the notification area, it tells you where the window went so it doesn't look like it vanished. Right-click the tray icon to reopen or exit at any time.
Progress on the taskbar button — a long job keeps reporting while the window is minimised. The SysManager button on the taskbar fills up as an SFC scan, a bulk install or a deep cleanup progresses, and shows a moving bar for the tabs that know they are working but not how far along. It follows the tab you have open, and it goes blank when the job finishes rather than sitting at an empty bar

About

Version, build, license and source in one place, with the update controls beside them rather than buried in a settings page
What's new, pulled live from GitHub — every release with its version, date and full changelog, and a badge marking the one you are running, so you can see what you skipped without leaving the app
Go back to the previous version — the build you updated from is kept, and this button restores it. It appears only when that build is actually on disk, and refuses with a reason rather than half-doing it when the swap would not be safe.
Export or copy a full system report, and a separate "Copy environment info" for pasting into a bug report
Report a problem and Ask a question open the right GitHub page directly; View license and What's new open the licence and the changelog
The startup version check is a checkbox here — "Check GitHub for a new version when SysManager starts" — and switching it off does not disable the Check for updates button, which still works on demand. What that check does and does not send is described under Privacy.

Updates (for SysManager itself)

Auto-check on startup against the GitHub Releases API, plus a manual "Check for updates" button in the About tab.
Discreet banner in the main window when a newer version is available.
Background download of the new build with a progress bar. If the download is blocked, a "Manual download" button opens GitHub in the browser.
SHA256 hash verification before install — the downloaded build is checked against the published .sha256, so a damaged or truncated download is blocked. Both files come from the same release, so this catches a corrupted download rather than a substituted release asset — see Verifying the download for the stronger check, the build attestation, which you run yourself.
The build is also inspected for an Authenticode signature, and the check fails closed if a signature is present but cannot be read. SysManager ships unsigned today and no publisher is pinned yet, so a signature is not currently an integrity gate; the publisher-and-certificate-chain check is written and switches on with a one-line change the day a signing certificate exists.
One-click "Install" replaces the running executable in-place and restarts automatically (no manual file copying needed).
"Go back to the previous version" — the build being replaced is kept, so an update that installs cleanly but turns out to be broken is not a dead end. The button appears in the About tab only when a retained copy exists, asks for confirmation, and notes that whatever the newer version fixed will come back too. One generation is kept, so it never accumulates copies of the app.
Full release-note history pulled live from GitHub — the notes for the newest version appear under the update check, the last ten releases below it, and each card links to its release on GitHub. If GitHub cannot be reached, the section says so instead of going blank.
"Report a problem" opens the GitHub bug-report form with your SysManager version and administrator state already filled in — the two fields reports most often miss — and "Ask a question" opens Discussions for anything that is not a bug. Both are in the About tab; a browser tab opens only when you press them.

Profile Export / Import

Export your SysManager settings to a single portable JSON file and import them on another PC: theme and appearance, dark-mode schedule, gaming profiles, volume presets, close-button behaviour, standby-memory preference, update-check preference, app-icon fetching preference, and speed-test history
Selective export (tick which sections to include) and selective import (confirm what a profile contains before anything is overwritten)
Version-aware — refuses profiles created by a newer, incompatible build
What it deliberately leaves out — anything that describes this PC rather than your choices: the undo baselines behind Performance Mode and Environment Variables, the Settings Watchdog's record of this machine's registry, the service-startup ledger, and the local activity log. Carrying those to another PC would restore it to settings it was never on, or report differences that are only "a different computer"
Only SysManager's own config is ever touched (never system settings), so an import is fully reversible — just import a different profile

CLI Interface

Automate the safe actions from scripts, Task Scheduler, or deployment tools — SysManager accepts command-line flags and runs headless (no window), writing its output to the launching console
Commands: --health (read-only health score), --cleanup (temp-file cleanup, never follows junctions), --purge-standby (purge the standby list), plus --version, --help, and --list. --trim-ram still works as an alias for --purge-standby, so an existing scheduled task keeps running; new scripts should use the current name, which says which of the two memory operations it is
--json emits machine-readable output; --silent suppresses chatter for scripting; conventional exit codes (0 success · 1 error · 2 usage) let a script branch on the result
Only read-only or non-destructive actions are exposed on the CLI — anything that changes the system irreversibly stays in the GUI behind a confirmation dialog
The in-app CLI Interface tab is a reference: it lists every command with a one-click copy button. Example: SysManager.exe --cleanup --silent

Screenshots

> Click any thumbnail to view full size. Screenshots live under > docs/screenshots/ — see > docs/screenshots/README.md for capture > conventions.

In motion

> The feature tour GIF is at the top of this README. Here's a > second one focused on cleanup & maintenance tools:

Cleanup & tools: Quick/Deep Cleanup, Disk Analyzer, Dark Mode Scheduler, Defender Tweaks, Privacy & Telemetry.

🏠 Dashboard

🔧 System — Health · Windows Update · Performance · Windows Features · Restore Points · Boot Analyzer · System Fixes · Tweaks Hub

🎮 Gaming & Profiles — Gaming Profile · Standby Cleaner · Timer Resolution · CPU Affinity · Display Profiles

📊 Monitor — Resource History · New App Alerts · File Lock · Settings Watchdog

Bandwidth Monitor is implemented but its screenshot is still being recaptured — the previous one showed the tab while it was a placeholder, which no longer reflects the app.

🧹 Cleanup — Quick Cleanup · Deep Cleanup · Shortcut Cleaner · Scheduled Maintenance

💾 Storage — Disk Analyzer

Duplicate Finder is implemented and has no screenshot yet — a shot of it would be a list of real file paths, which needs redacting before it can ship.

🌐 Network — Ping · Traceroute · Speed Test · Repair

📦 Apps — App Updates · Bulk Installer

🛡️ Privacy & Security — Privacy & Telemetry · File Shredder · App Blocker · Debloater · Browser Cleaner · Defender

🎨 Customization — Dark Mode Scheduler

ℹ️ Info — Drivers · Battery · Logs · System Report · About

⚙️ Advanced — Profile Export / Import · CLI Interface

Install

Via winget (recommended)

SysManager is published to the Windows Package Manager community repository. Install or update with a single command:

winget install laurentiu021.SysManager

Updates are delivered automatically with each release — run winget upgrade to stay on the latest version.

Direct download

Grab SysManager-v.exe (the `` shown on the latest release) from the latest release and double-click it. The executable is self-contained — no installer, no .NET runtime required.

Why portable, and why there is no installer

The only build is a portable .exe. That is a decision, not an omission, and it has a cost worth stating alongside the benefit.

Verifying the download

Each release ships a matching SysManager-v.exe.sha256. Verify before running (replace `` with the version you downloaded):

Get-FileHash .\SysManager-v.exe -Algorithm SHA256
# Compare the output to the contents of SysManager-v.exe.sha256.

gh attestation verify .\SysManager-v.exe --repo laurentiu021/SystemManager

First launch: Windows will warn you

The first time you run it, Windows shows a blue box titled "Windows protected your PC". This is expected, and it is worth knowing what it does and does not mean.

The dialog only offers a Don't run button. To continue:

Verify the SHA256 first, using the command above. Do this before anything else — it is what makes the next step safe rather than blind.
Click More info — a small link in the dialog, easy to miss.
The file name and publisher appear, along with a Run anyway button. Click it.

Windows remembers the choice, so this only happens once per downloaded version.

If you would rather avoid the warning altogether, install through winget instead:

winget install laurentiu021.SysManager

winget fetches and validates the package outside the browser download path, so the first-launch prompt does not appear.

If your antivirus flags the download

Why it happens. Two reasons, and neither is about what the code does:

The shape of the file. SysManager ships as one large executable that carries everything it needs inside it, compressed, and unpacks itself into a temporary folder when you launch it. That is a legitimate way to ship a portable app with no installer — and it is also what some malware does to hide, so a scanner that judges structure rather than behaviour treats it as suspicious. Add an unknown publisher and no signature, and a heuristic engine has every reason to be cautious.
What the app genuinely does. It deletes files, changes registry settings and stops processes. That is the job of a maintenance tool, and it is also a fair description of something you would not want running unasked.

How to check, instead of guessing. Take the SHA-256 from the release page and open

https://www.virustotal.com/gui/file/

Code signing

Code signing policy

Authors (may commit to the repository): laurentiu021
Reviewers (must review any change proposed by a non-committer): laurentiu021
Approvers (decide whether a given release may be signed): laurentiu021

Uninstalling

SysManager is a single portable executable. There is no installer, nothing is copied into Program Files, and no system-wide registry keys are created for the app itself.

To remove it completely:

Delete the executable — SysManager-vX.Y.Z.exe, wherever you saved it. That is the whole program.
Delete its settings and logs (optional, a few hundred kilobytes):
- %LocalAppData%\SysManager
- %AppData%\SysManager
Remove the scheduled task, if you created one. Only applies if you used Scheduled Maintenance: open that tab and remove the schedule, and the app unregisters the task for you. It is the only thing SysManager registers with Windows, and only ever when you explicitly ask for it.

If you installed through winget, winget uninstall laurentiu021.SysManager covers step 1.

Build from source

Prerequisites: Windows 10 or newer and the .NET 10 SDK.

git clone https://github.com/laurentiu021/SystemManager.git
cd SystemManager
dotnet run --project SysManager/SysManager/SysManager.csproj

Produce a single-file exe

From the repo root:

.\publish.ps1

Or manually:

dotnet publish SysManager/SysManager/SysManager.csproj `
  -c Release -r win-x64 --self-contained true `
  -p:PublishSingleFile=true -p:IncludeNativeLibrariesForSelfExtract=true `
  -o publish

The resulting SysManager.exe lands in publish/ and runs standalone on any Windows 10 / 11 x64 machine.

First-time flow

Launch the app — it opens on the Dashboard.
Go to Network and press Start — live ping begins.
For anything in Windows Update, Cleanup (SFC/DISM), or system-wide App updates, click the yellow "Run as Administrator" banner when it appears. The app relaunches elevated.

Documentation

ROADMAP.md — what is being worked towards, and what is deliberately not
ARCHITECTURE.md — project structure and key design decisions
TESTING.md — how the test suite is organised and run
CHANGELOG.md — release notes
CONTRIBUTING.md — how to build, test, and open a PR
SUPPORT.md — where to ask questions and get help
SECURITY.md — reporting vulnerabilities, security model
CODE_OF_CONDUCT.md — community standards

Reporting bugs and requesting features

Found something broken? Missing a feature you'd love to have?

🐛 Bugs — open an issue using the bug report template.
💡 Features — open an issue using the feature request template, or post in Discussions › Ideas if it's still a rough idea rather than a concrete request.
💬 Questions and how-to's — use Discussions › Q&A instead of issues for anything open-ended.
🔒 Security vulnerabilities — please report privately via the Security tab. See SECURITY.md for the full policy.

Tech stack

.NET 10 (WPF, C# 14)
CommunityToolkit.Mvvm for MVVM plumbing
Microsoft.Extensions.DependencyInjection for IoC
WPF-UI (lepoco/wpfui) for Fluent Design theme and controls
LiveCharts2 for the real-time latency chart
H.NotifyIcon.Wpf for system tray integration
LibreHardwareMonitor and NvAPIWrapper for CPU/GPU/disk temperature sensors
Serilog for structured logging
xUnit, NSubstitute, and FlaUI for unit, integration, and UI-automation tests

Privacy

Contributing

PRs welcome! Please read CONTRIBUTING.md for the build setup, coding conventions, and pull-request workflow. New contributors are expected to follow the Code of Conduct.

Project health — the badges a contributor looks for, kept here rather than at the top, where they told a visitor nothing about the app:

Support

SysManager is free and open source, built by one person in their spare time. If it saved you a reinstall or a clean-up headache, you can back its development:

License

MIT — see LICENSE.

Crafted by laurentiu021.

SysManager laurentiu021

README

SysManager for Windows

⚡ Get it in one line

Table of contents

What it is

Why SysManager?

Features

Sidebar navigation

Theme customization

Keyboard navigation

Screen readers

Context Menu Manager

Environment Variables

Dark Mode Scheduler

Volume Control

System Logs (Windows Event Log, friendly)

System Report

System Health

Restore Points

Legacy Panels

System Fixes

Tweaks Hub

Boot Analyzer

Task Scheduler

Windows Update (Windows Update Agent COM API)

App Updates (winget)

Quick Cleanup

Deep Cleanup

Large files finder (part of Deep Cleanup)

Startup Manager

Windows Features

Duplicate Finder

Disk Analyzer

Process Manager

Resource History

Bandwidth Monitor

File Lock Detector

Camera/Mic/Location

Settings Watchdog

Operation Lock

Shortcut Cleaner

Scheduled Maintenance

Privacy & Telemetry

File Shredder

Ping

Traceroute

Speed Test

Network Repair

DNS & Hosts

Bulk Installer

New App Alerts

App Blocker

Debloater & Ads

Browser Cleaner

Edge/OneDrive Remover

Defender Tweaks

Notification Blocker

Battery Health

Uninstaller

Gaming Profile 🔬

Timer Resolution

Display Profiles

CPU Core Affinity

Standby List Cleaner

Performance Mode

Services

Drivers

Dashboard

About

Updates (for SysManager itself)

Profile Export / Import

CLI Interface

Screenshots

In motion

Install

Via winget (recommended)

Direct download

Why portable, and why there is no installer

Verifying the download