Windows Blog Archive

Home

Options

566

MarkRussinovich on 06-27-2019 12:31 AM

First published on TechNet on Apr 18, 2015 We all know people, friends and family, that have fallen for the “your system...

486

MarkRussinovich on 06-27-2019 12:30 AM

First published on TechNet on Jan 02, 2013 Scareware, a type of malware that mimics antimalware software, has been aroun...

440

MarkRussinovich on 06-27-2019 12:29 AM

First published on TechNet on Oct 28, 2012 A key part of any cybersecurity plan is “continuous monitoring”, or enabling ...

350

MarkRussinovich on 06-27-2019 12:27 AM

First published on TechNet on Aug 22, 2012 Windows Azure’s compute platform, which includes Web Roles, Worker Roles, and...

479

MarkRussinovich on 06-27-2019 12:26 AM

First published on TechNet on Jul 01, 2012 This case is my favorite kind of case, one where I use my own tools to solve ...

263

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on May 06, 2012 Many of you have read Zero Day, my first novel.

292

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on Jan 03, 2012 As a reader of this blog I suspect that you, like me, are the IT support staf...

240

MarkRussinovich on 06-27-2019 12:23 AM

First published on TechNet on Nov 27, 2011 This case unfolds with a network administrator charged with the rollout of th...

263

MarkRussinovich on 06-27-2019 12:22 AM

First published on TechNet on Nov 06, 2011 Disk cloning has become common as IT professionals virtualize physical server...

257

MarkRussinovich on 06-27-2019 12:20 AM

First published on TechNet on Oct 02, 2011 This case opens when a Sysinternals power user, who also works as a system ad...

248

MarkRussinovich on 06-27-2019 12:19 AM

First published on TechNet on Jul 18, 2011 I love the cases people send me where the Sysinternals tools have helped them...

295

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Jul 03, 2011 Aaron Margosis and I are thrilled to announce that the long awaited, and some...

266

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on May 03, 2011 I just got back the finished version of the video trailer for my new cyber th...

257

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Apr 17, 2011 In the first post of this series, I used Autoruns, Process Explorer and VMMap...

251

MarkRussinovich on 06-27-2019 12:16 AM

First published on TechNet on Apr 15, 2011 In Part 1 I began my investigation of an example infection of the infamous St...

298

MarkRussinovich on 06-27-2019 12:13 AM

First published on TechNet on Mar 26, 2011 Though I didn’t realize what I was seeing, Stuxnet first came to my attention...

304

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 I’m excited to announce that my first novel, a cyber thriller entitled Zero D...

244

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 This post continues in the malware hunting theme of the last couple of posts ...

278

MarkRussinovich on 06-27-2019 12:11 AM

First published on TechNet on Mar 06, 2011 Continuing the theme of focusing on malware-related cases (last week I posted...

242

MarkRussinovich on 06-27-2019 12:10 AM

First published on TechNet on Feb 26, 2011 Given that my novel, Zero Day, will be published in a few weeks and is based ...

151

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 18, 2011 You’ve seen the news if you’re my friend on Facebook, follow me on Twitter, o...

145

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 09, 2011 My last blog post described how to use local kernel debugging to change the c...

156

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Dec 13, 2010 Note: for an easier way to customize the blue screen’s colors, see my next bl...

154

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 12, 2010 My last couple of posts have looked at the lighter side of blue screens by sh...

178

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 06, 2010 If you’ve seen one of my Case of the Unexplained presentations (like the one ...

188

MarkRussinovich on 06-27-2019 12:06 AM

First published on TechNet on Oct 09, 2010 When Dave Solomon and I were writing the 3rd edition of the Windows Internals...

202

MarkRussinovich on 06-27-2019 12:05 AM

First published on TechNet on Aug 21, 2010 This case was shared with me by a friend of mine, Andrew Richards, a Microsof...

222

MarkRussinovich on 06-27-2019 12:04 AM

First published on TechNet on Jun 01, 2010 While I long for the day when I no longer experience the effects of buggy sof...

225

MarkRussinovich on 06-27-2019 12:03 AM

First published on TechNet on Apr 12, 2010 The most interesting cases I receive are those that demonstrate a unique trou...

213

MarkRussinovich on 06-27-2019 12:02 AM

First published on TechNet on Mar 31, 2010 Last time, I covered the limits and how to measure usage of one of the two ke...

Latest Comments

in Get free, hands-on experience with Windows 10 virtual labs on 07-24-2019

Very good class... Help full

0 Likes

in LUA Buglight tips: opening a report file on 06-19-2019

This link: http://blogs.msdn.com/aaron_margosis/pages/LuaBuglight.aspx is not functional. Where can we download this app?

0 Likes

in Get free, hands-on experience with Windows 10 virtual labs on 06-04-2019

Great Class

0 Likes

in Simplified servicing for Windows 7 and Windows 8.1: the latest improvements on 04-16-2019

Hi,@Nathan Mercer In the real-time scenario, Irrespective of Operating System we are able to install current or later month(any) of "Security Only Update" on top of latest "Monthly Rollup". When we try to install Security Only Update, it is not showing as "Not Applicable". My understanding was, Secu...

0 Likes

in Modernizing Windows deployment with Windows AutoPilot on 09-12-2018

Autopilot, which occurs with the Applications of third parties that are not in the Store, how the profile is backed up, in case of theft of equipment, how it is restored and what the equipment and the user had, this type is necessary of information.

0 Likes

The Case of the Father-in-Law’s Scareware

Hunting Down and Killing Ransomware

The Case of the Unexplained FTP Connections

Windows Azure Host Updates: Why, When, and How

The Case of the Veeerrry Slow Logons

Announcing Trojan Horse, the Novel!

The Case of My Mom’s Broken Microsoft Security Essentials Installation

The Case of the Installer Service Error

Fixing Disk Signature Collisions

The Case of the Mysterious Reboots

The Case of the Hung Game Launcher

Troubleshooting with the New Sysinternals Administrator’s Reference

The Zero Day Book Trailer

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 3

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 2

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 1

Zero Day is Here!

The Case of the Unusable System

The Case of the Sysinternals-Blocking Malware

The Case of the Malicious Autostart

Announcing Zero Day, the Novel!

“Blue Screens” in Designer Colors with One Click

A Bluescreen By Any Other Color

The Cases of the Blue Screens: Finding Clues in a Crash Dump and on the Web

The Case of the Slow Project File Opens

LiveKd for Virtual Machine Debugging

The Compound Case of the Outlook Hangs

The Case of the Random IE Crash

The Case of the Printing Failure

Pushing the Limits of Windows: USER and GDI Objects – Part 2