%3CLINGO-SUB%20id%3D%22lingo-sub-725910%22%20slang%3D%22en-US%22%3EUpdates%3A%20Autoruns%20v10%2C%20Process%20Explorer%20v12.04%2C%20Sigcheck%20v1.7%2C%20ProcDump%20v1.8%20and%20a%20new%20Case%20of%20the%20Unexplained%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-725910%22%20slang%3D%22en-US%22%3E%0A%20%26lt%3Bmeta%20http-equiv%3D%22Content-Type%22%20content%3D%22text%2Fhtml%3B%20charset%3DUTF-8%22%20%2F%26gt%3B%3CSTRONG%3E%20First%20published%20on%20TechNet%20on%20Jun%2008%2C%202010%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CBR%20%2F%3E%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%20class%3D%22MsoNormal%22%3E%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Fmarkrussinovich%2Farchive%2F2010%2F06%2F01%2F3335060.aspx%22%20title%3D%22The%20Case%20of%20the%20Unexplained%20IE%20Crash%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%20Mark%E2%80%99s%20Blog%3A%20The%20Case%20of%20the%20Unexplained%20IE%20Crash%20%3C%2FA%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20-%20%3CSPAN%20style%3D%22mso-fareast-font-family%3A%20Calibri%3B%20mso-fareast-theme-font%3A%20minor-latin%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-fareast-language%3A%20EN-US%3B%20mso-bidi-language%3A%20AR-SA%3B%22%3E%20Mark%20goes%20on%20a%20detective%20hunt%20to%20find%20out%20the%20likely%20culprit%20of%20an%20IE%20crash%20he%20recently%20experienced.%20In%20the%20post%2C%20he%20shows%20how%20to%20find%20which%20process%20out%20of%20multiple%20running%20the%20same%20executable%20crashed%20and%20how%20to%20get%20additional%20information%20from%20cryptic%20stack%20traces.%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20style%3D%22font-size%3A%2011pt%3B%20mso-fareast-font-family%3A%20Calibri%3B%20mso-fareast-theme-font%3A%20minor-latin%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-fareast-language%3A%20EN-US%3B%20mso-bidi-language%3A%20AR-SA%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%3C%2FP%3E%3CBR%20%2F%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20style%3D%22font-size%3A%2011pt%3B%20mso-fareast-font-family%3A%20Calibri%3B%20mso-fareast-theme-font%3A%20minor-latin%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-fareast-language%3A%20EN-US%3B%20mso-bidi-language%3A%20AR-SA%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%3C%2FP%3E%3CBR%20%2F%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%3CP%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CA%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fbb963902.aspx%22%20title%3D%22Autoruns%20v10%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20Autoruns%20v10%3A%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FA%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20This%20major%20update%20to%20Autoruns%20introduces%20the%20ability%20to%20scan%20offline%20Windows%20installations%2C%20adds%20.exe%20and%20.cmd%20extension%20handlers%2C%20defaults%20to%20hiding%20Windows%20entries%20to%20reduce%20noise%20in%20the%20common%20use%20case%2C%20and%20includes%20bug%20fixes.%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CA%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fbb896653.aspx%22%20title%3D%22Process%20Explorer%20v12.04%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20Process%20Explorer%20v12.04%3A%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FA%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20This%20Process%20Explorer%20release%20adds%20the%20ability%20to%20generate%20full%20and%20minidump%20process%20crash%20dump%20files%20and%20fixes%20a%20bug%20in%20the%20process%20permission%20dialog.%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CA%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fbb897441.aspx%22%20title%3D%22Sigcheck%20v1.7%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20Sigcheck%20v1.7%3A%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FA%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20This%20version%20of%20Sigcheck%2C%20a%20file%20version%20and%20signature%20verification%20command-line%20utility%2C%20now%20returns%20an%20exit%20code%20of%200%20to%20indicate%20that%20all%20code%20it%20checked%20was%20signed%20and%201%20to%20report%20that%20some%20were%20unsigned.%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3C%2FP%3E%0A%20%20%20%20%20%20%20%20%20%20%20%0A%20%20%20%20%20%20%20%20%20%20%0A%20%20%20%20%20%20%20%20%20%0A%20%20%20%20%20%20%20%20%0A%20%20%20%20%20%20%20%0A%20%20%20%20%20%20%0A%20%20%20%20%20%0A%20%20%20%20%0A%20%20%20%0A%20%20%3CP%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Arial'%2C'sans-serif'%3B%20font-size%3A%2010pt%3B%22%3E%20%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%3C%2FP%3E%0A%20%20%20%0A%20%20%3CP%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CA%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fdd996900.aspx%22%20title%3D%22ProcDump%20v1.8%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20ProcDump%20v1.8%3A%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FA%3E%20%3CSPAN%20style%3D%22font-size%3A%20x-small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20This%20version%20of%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3CSPAN%20style%3D%22mso-fareast-font-family%3A%20Calibri%3B%20mso-fareast-theme-font%3A%20minor-latin%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-fareast-language%3A%20EN-US%3B%20mso-bidi-language%3A%20AR-SA%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20Calibri%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20%3CSPAN%20style%3D%22font-family%3A%20arial%2Chelvetica%2Csans-serif%3B%22%3E%20%3CSPAN%20style%3D%22font-size%3A%20small%3B%22%3E%20ProcDump%2C%20a%20command-line%20process%20crash-dump%20generation%20tool%2C%20includes%20comments%20in%20the%20crash%20dump%20that%20reflect%20the%20reason%20that%20the%20dump%20was%20generated%20(memory%20threshold%20hit%2C%20CPU%20threshold%20hit%2C%20manual%2C%20etc.).%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%20%3C%2FSPAN%3E%3C%2FP%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-725910%22%20slang%3D%22en-US%22%3EFirst%20published%20on%20TechNet%20on%20Jun%2008%2C%202010%20Mark%E2%80%99s%20Blog%3A%20The%20Case%20of%20the%20Unexplained%20IE%20Crash%20-%20Mark%20goes%20on%20a%20detective%20hunt%20to%20find%20out%20the%20likely%20culprit%20of%20an%20IE%20crash%20he%20recently%20experienced.%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-725910%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eautoruns%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Emarks%20blog%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eprocdump%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eprocess%20explorer%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Esigcheck%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft
First published on TechNet on Jun 08, 2010


Mark’s Blog: The Case of the Unexplained IE Crash - Mark goes on a detective hunt to find out the likely culprit of an IE crash he recently experienced. In the post, he shows how to find which process out of multiple running the same executable crashed and how to get additional information from cryptic stack traces.






Autoruns v10: This major update to Autoruns introduces the ability to scan offline Windows installations, adds .exe and .cmd extension handlers, defaults to hiding Windows entries to reduce noise in the common use case, and includes bug fixes.


Process Explorer v12.04: ... This Process Explorer release adds the ability to generate full and minidump process crash dump files and fixes a bug in the process permission dialog.


Sigcheck v1.7: This version of Sigcheck, a file version and signature verification command-line utility, now returns an exit code of 0 to indicate that all code it checked was signed and 1 to report that some were unsigned.




ProcDump v1.8: This version of ProcDump, a command-line process crash-dump generation tool, includes comments in the crash dump that reflect the reason that the dump was generated (memory threshold hit, CPU threshold hit, manual, etc.).