cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Windows Blog Archive
Home
Options
1,826

The Case of the Father-in-Law’s Scareware

MarkRussinovich on 06-27-2019 12:31 AM
First published on TechNet on Apr 18, 2015 We all know people, friends and family, that have fallen for the “your system...
1,715

Hunting Down and Killing Ransomware

MarkRussinovich on 06-27-2019 12:30 AM
First published on TechNet on Jan 02, 2013 Scareware, a type of malware that mimics antimalware software, has been aroun...
1,469

The Case of the Unexplained FTP Connections

MarkRussinovich on 06-27-2019 12:29 AM
First published on TechNet on Oct 28, 2012 A key part of any cybersecurity plan is “continuous monitoring”, or enabling ...
939

Windows Azure Host Updates: Why, When, and How

MarkRussinovich on 06-27-2019 12:27 AM
First published on TechNet on Aug 22, 2012 Windows Azure’s compute platform, which includes Web Roles, Worker Roles, and...
1,636

The Case of the Veeerrry Slow Logons

MarkRussinovich on 06-27-2019 12:26 AM
First published on TechNet on Jul 01, 2012 This case is my favorite kind of case, one where I use my own tools to solve ...
714

Announcing Trojan Horse, the Novel!

MarkRussinovich on 06-27-2019 12:24 AM
First published on TechNet on May 06, 2012 Many of you have read Zero Day, my first novel.
882

The Case of My Mom’s Broken Microsoft Security Essentials Installation

MarkRussinovich on 06-27-2019 12:24 AM
First published on TechNet on Jan 03, 2012 As a reader of this blog I suspect that you, like me, are the IT support staf...
766

The Case of the Installer Service Error

MarkRussinovich on 06-27-2019 12:23 AM
First published on TechNet on Nov 27, 2011 This case unfolds with a network administrator charged with the rollout of th...
1,573

Fixing Disk Signature Collisions

MarkRussinovich on 06-27-2019 12:22 AM
First published on TechNet on Nov 06, 2011 Disk cloning has become common as IT professionals virtualize physical server...
851

The Case of the Mysterious Reboots

MarkRussinovich on 06-27-2019 12:20 AM
First published on TechNet on Oct 02, 2011 This case opens when a Sysinternals power user, who also works as a system ad...
829

The Case of the Hung Game Launcher

MarkRussinovich on 06-27-2019 12:19 AM
First published on TechNet on Jul 18, 2011 I love the cases people send me where the Sysinternals tools have helped them...
1,089

Troubleshooting with the New Sysinternals Administrator’s Reference

MarkRussinovich on 06-27-2019 12:18 AM
First published on TechNet on Jul 03, 2011 Aaron Margosis and I are thrilled to announce that the long awaited, and some...
822

The Zero Day Book Trailer

MarkRussinovich on 06-27-2019 12:18 AM
First published on TechNet on May 03, 2011 I just got back the finished version of the video trailer for my new cyber th...
886

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 3

MarkRussinovich on 06-27-2019 12:18 AM
First published on TechNet on Apr 17, 2011 In the first post of this series, I used Autoruns, Process Explorer and VMMap...
862

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 2

MarkRussinovich on 06-27-2019 12:16 AM
First published on TechNet on Apr 15, 2011 In Part 1 I began my investigation of an example infection of the infamous St...
1,042

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 1

MarkRussinovich on 06-27-2019 12:13 AM
First published on TechNet on Mar 26, 2011 Though I didn’t realize what I was seeing, Stuxnet first came to my attention...
872

Zero Day is Here!

MarkRussinovich on 06-27-2019 12:12 AM
First published on TechNet on Mar 13, 2011 I’m excited to announce that my first novel, a cyber thriller entitled Zero D...
773

The Case of the Unusable System

MarkRussinovich on 06-27-2019 12:12 AM
First published on TechNet on Mar 13, 2011 This post continues in the malware hunting theme of the last couple of posts ...
977

The Case of the Sysinternals-Blocking Malware

MarkRussinovich on 06-27-2019 12:11 AM
First published on TechNet on Mar 06, 2011 Continuing the theme of focusing on malware-related cases (last week I posted...
818

The Case of the Malicious Autostart

MarkRussinovich on 06-27-2019 12:10 AM
First published on TechNet on Feb 26, 2011 Given that my novel, Zero Day, will be published in a few weeks and is based ...
571

Announcing Zero Day, the Novel!

MarkRussinovich on 06-27-2019 12:09 AM
First published on TechNet on Jan 18, 2011 You’ve seen the news if you’re my friend on Facebook, follow me on Twitter, o...
673

“Blue Screens” in Designer Colors with One Click

MarkRussinovich on 06-27-2019 12:09 AM
First published on TechNet on Jan 09, 2011 My last blog post described how to use local kernel debugging to change the c...
693

A Bluescreen By Any Other Color

MarkRussinovich on 06-27-2019 12:09 AM
First published on TechNet on Dec 13, 2010 Note: for an easier way to customize the blue screen’s colors, see my next bl...
677

The Cases of the Blue Screens: Finding Clues in a Crash Dump and on the Web

MarkRussinovich on 06-27-2019 12:07 AM
First published on TechNet on Dec 12, 2010 My last couple of posts have looked at the lighter side of blue screens by sh...
726

The Case of the Slow Project File Opens

MarkRussinovich on 06-27-2019 12:07 AM
First published on TechNet on Dec 06, 2010 If you’ve seen one of my Case of the Unexplained presentations (like the one ...
931

LiveKd for Virtual Machine Debugging

MarkRussinovich on 06-27-2019 12:06 AM
First published on TechNet on Oct 09, 2010 When Dave Solomon and I were writing the 3rd edition of the Windows Internals...
864

The Compound Case of the Outlook Hangs

MarkRussinovich on 06-27-2019 12:05 AM
First published on TechNet on Aug 21, 2010 This case was shared with me by a friend of mine, Andrew Richards, a Microsof...
784

The Case of the Random IE Crash

MarkRussinovich on 06-27-2019 12:04 AM
First published on TechNet on Jun 01, 2010 While I long for the day when I no longer experience the effects of buggy sof...
790

The Case of the Printing Failure

MarkRussinovich on 06-27-2019 12:03 AM
First published on TechNet on Apr 12, 2010 The most interesting cases I receive are those that demonstrate a unique trou...
1,153

Pushing the Limits of Windows: USER and GDI Objects – Part 2

MarkRussinovich on 06-27-2019 12:02 AM
First published on TechNet on Mar 31, 2010 Last time, I covered the limits and how to measure usage of one of the two ke...
Latest Comments
Ronald Harper
in What is Windows Update for Business? on 05-27-2020
Yes, I need some updated customer-grade guidance on this tech, something that I can point our helpdesk to and that is very simple for customers to understand - how to pause, schedule, and otherwise react to notifications.
0 Likes
fcnet
in The Machine SID Duplication Myth (and Why Sysprep Matters) on 05-26-2020
What i miss here is :"Note that Sysprep resets other machine-specific state that, if duplicated, can cause problems for certain applications like Windows Server Update Services (WSUS), so MIcrosoft's support policy will still require cloned systems to be made unique with Sysprep." is it possible to ...
0 Likes
AshuMaheshwari
in Speeding up Windows Autopilot for existing devices on 05-04-2020
HiIn intune we have defined the deployment Profile where the Prefix and domain information added. Now what to do for existing devices so that old name can exist after the machine formatted and liveraging autopilot service.
0 Likes
Dougl2285
in The Machine SID Duplication Myth (and Why Sysprep Matters) on 05-03-2020
Thank you for the clarifying information. 
0 Likes
mattgb
in Pushing the Limits of Windows: USER and GDI Objects – Part 1 on 04-20-2020
Great article. So if I'm getting symptoms in Windows 10 like what you describe above e.g. windows for PointPoint, Outlook and Chrome no longer update when I'm typing in them or after resizing appear white / don't refresh in the newly created window area, and dialogs for existing apps e.g. File > Sav...
0 Likes