%3CLINGO-SUB%20id%3D%22lingo-sub-725874%22%20slang%3D%22en-US%22%3EUpdates%3A%20Autoruns%20v9.53%2C%20ProcDump%20v1.3%2C%20Process%20Monitor%20v2.6%20%7C%20New%20Mark's%20Blog%20post%3A%20The%20Case%20of%20the%20Temporary%20Registry%20Profiles%20%7C%20Download%20Windows%20Internals%205%20sample%20chapter%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-725874%22%20slang%3D%22en-US%22%3E%0A%20%26lt%3Bmeta%20http-equiv%3D%22Content-Type%22%20content%3D%22text%2Fhtml%3B%20charset%3DUTF-8%22%20%2F%26gt%3B%3CSTRONG%3E%20First%20published%20on%20TechNet%20on%20Aug%2012%2C%202009%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%20%3CFONT%20face%3D%22Calibri%22%3E%20%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%20style%3D%22MARGIN%3A%200in%200in%200pt%22%3E%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fmarkrussinovich%2Farchive%2F2009%2F08%2F10%2F3272210.aspx%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CFONT%20size%3D%223%22%3E%20Mark%E2%80%99s%20Blog%3A%20The%20Case%20of%20the%20Temporary%20Registry%20Profiles%20%3C%2FFONT%3E%20%3C%2FA%3E%20%3CFONT%20size%3D%223%22%3E%20%3A%20In%20the%20latest%20post%20in%20Mark%E2%80%99s%20%E2%80%9CCase%20of%20the%20Unexplained%E2%80%9D%20series%2C%20he%20documents%20a%20perplexing%20case%20affecting%20many%20Microsoft%20and%20Citrix%20customers%20that%20Microsoft%20Customer%20Support%20Services%20solved%20with%20the%20use%20of%20Process%20Monitor%E2%80%99s%20boot%20logging%20and%20stack%20trace%20features.%20%3C%2FFONT%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%20style%3D%22MARGIN%3A%200in%200in%200pt%22%3E%3C%2FP%3E%3CP%3E%3CFONT%20size%3D%223%22%3E%20%3C%2FFONT%3E%3C%2FP%3E%0A%20%20%20%3CP%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%20style%3D%22MARGIN%3A%200in%200in%200pt%22%3E%3CA%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Fsysinternals%2Fbb963901.aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CFONT%20size%3D%223%22%3E%20Windows%20Internals%20Sample%20Chapter%3A%20Processes%2C%20Threads%20and%20Jobs%20%3C%2FFONT%3E%20%3C%2FA%3E%20%3CFONT%20size%3D%223%22%3E%20%3A%20Learn%20the%20difference%20between%20a%20process%20and%20a%20thread%2C%20how%20Windows%20schedules%20threads%2C%20and%20how%20Job%20objects%20encapsulate%20groups%20of%20processes%20in%20the%20full%20processes%2C%20threads%20and%20jobs%20chapter%20from%20Windows%20Internals%2C%205%20%3CSUP%3E%20th%20%3C%2FSUP%3E%20Edition%2C%20now%20available%20for%20free%20download.%20%3C%2FFONT%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%20style%3D%22MARGIN%3A%200in%200in%200pt%22%3E%3C%2FP%3E%3CP%3E%3CFONT%20size%3D%223%22%3E%20%3C%2FFONT%3E%3C%2FP%3E%0A%20%20%20%3CP%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%20style%3D%22MARGIN%3A%200in%200in%200pt%22%3E%3CFONT%20size%3D%223%22%3E%20%3CA%20class%3D%22%22%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fbb963902.aspx%22%20mce_href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fbb963902.aspx%22%20title%3D%22Autoruns%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CSTRONG%3E%20Autoruns%20v9.53%3A%20%3C%2FSTRONG%3E%20%3C%2FA%3E%20%3C%2FFONT%3E%20%3CFONT%20size%3D%223%22%3E%20This%20update%20fixes%20a%20bug%20that%20could%20cause%20the%20file%20open%20and%20save%20dialogs%20to%20not%20work%20on%2064-bit%20Windows.%20%3C%2FFONT%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%20style%3D%22MARGIN%3A%200in%200in%200pt%22%3E%3C%2FP%3E%3CP%3E%3CFONT%20size%3D%223%22%3E%20%3C%2FFONT%3E%3C%2FP%3E%0A%20%20%20%3CP%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%20style%3D%22MARGIN%3A%200in%200in%200pt%22%3E%3CFONT%20size%3D%223%22%3E%20%3CA%20class%3D%22%22%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fdd996900.aspx%22%20mce_href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fdd996900.aspx%22%20title%3D%22ProcDump%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CSTRONG%3E%20ProcDump%20v1.3%3A%20%3C%2FSTRONG%3E%20%3C%2FA%3E%20%3C%2FFONT%3E%20%3CFONT%20size%3D%223%22%3E%20This%20fixes%20a%20bug%20that%20could%20result%20in%20Procdump%20reporting%20negative%20CPU%20usage.%20%3C%2FFONT%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%20style%3D%22MARGIN%3A%200in%200in%200pt%22%3E%3C%2FP%3E%3CP%3E%3CFONT%20size%3D%223%22%3E%20%3C%2FFONT%3E%3C%2FP%3E%0A%20%20%20%3CP%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20class%3D%22MsoNormal%22%20style%3D%22MARGIN%3A%200in%200in%200pt%22%3E%3CFONT%20size%3D%223%22%3E%20%3CA%20class%3D%22%22%20href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fbb896645.aspx%22%20mce_href%3D%22http%3A%2F%2Ftechnet.microsoft.com%2Fsysinternals%2Fbb896645.aspx%22%20title%3D%22Process%20Monitor%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CSTRONG%3E%20Process%20Monitor%20v2.6%3A%20%3C%2FSTRONG%3E%20%3C%2FA%3E%20%3C%2FFONT%3E%20%3CFONT%20size%3D%223%22%3E%20%3CFONT%20face%3D%22Calibri%22%20size%3D%223%22%3E%20Version%202.6%20no%20longer%20requires%20the%20symbol%20engine%20to%20be%20configured%20on%20systems%20on%20which%20a%20trace%20is%20collected%20(only%20on%20the%20viewing%20system)%20and%20fixes%20a%20bug%20that%20could%20cause%20the%20desktop%20to%20stop%20updating%20when%20thread%20profiling%20is%20enabled%20on%20Windows%207.%20%3C%2FFONT%3E%20%3C%2FFONT%3E%3C%2FP%3E%3C%2FFONT%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-725874%22%20slang%3D%22en-US%22%3EFirst%20published%20on%20TechNet%20on%20Aug%2012%2C%202009%20Mark%E2%80%99s%20Blog%3A%20The%20Case%20of%20the%20Temporary%20Registry%20Profiles%3A%20In%20the%20latest%20post%20in%20Mark%E2%80%99s%20%E2%80%9CCase%20of%20the%20Unexplained%E2%80%9D%20series%2C%20he%20documents%20a%20perplexing%20case%20affecting%20many%20Microsoft%20and%20Citrix%20customers%20that%20Microsoft%20Customer%20Support%20Services%20solved%20with%20the%20use%20of%20Process%20Monitor%E2%80%99s%20boot%20logging%20and%20stack%20trace%20features.%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-725874%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eautoruns%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMark%20Russinovich%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eprocdump%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eprocess%20monitor%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ewinternals%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft
First published on TechNet on Aug 12, 2009

Mark’s Blog: The Case of the Temporary Registry Profiles : In the latest post in Mark’s “Case of the Unexplained” series, he documents a perplexing case affecting many Microsoft and Citrix customers that Microsoft Customer Support Services solved with the use of Process Monitor’s boot logging and stack trace features.



Windows Internals Sample Chapter: Processes, Threads and Jobs : Learn the difference between a process and a thread, how Windows schedules threads, and how Job objects encapsulate groups of processes in the full processes, threads and jobs chapter from Windows Internals, 5 th Edition, now available for free download.



Autoruns v9.53: This update fixes a bug that could cause the file open and save dialogs to not work on 64-bit Windows.



ProcDump v1.3: This fixes a bug that could result in Procdump reporting negative CPU usage.



Process Monitor v2.6: Version 2.6 no longer requires the symbol engine to be configured on systems on which a trace is collected (only on the viewing system) and fixes a bug that could cause the desktop to stop updating when thread profiling is enabled on Windows 7.