cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Windows Blog Archive
Options
1,972

The Case of the Father-in-Law’s Scareware

MarkRussinovich on 06-27-2019 12:31 AM
First published on TechNet on Apr 18, 2015 We all know people, friends and family, that have fallen for the “your system...
1,860

Hunting Down and Killing Ransomware

MarkRussinovich on 06-27-2019 12:30 AM
First published on TechNet on Jan 02, 2013 Scareware, a type of malware that mimics antimalware software, has been aroun...
1,593

The Case of the Unexplained FTP Connections

MarkRussinovich on 06-27-2019 12:29 AM
First published on TechNet on Oct 28, 2012 A key part of any cybersecurity plan is “continuous monitoring”, or enabling ...
993

Windows Azure Host Updates: Why, When, and How

MarkRussinovich on 06-27-2019 12:27 AM
First published on TechNet on Aug 22, 2012 Windows Azure’s compute platform, which includes Web Roles, Worker Roles, and...
1,832

The Case of the Veeerrry Slow Logons

MarkRussinovich on 06-27-2019 12:26 AM
First published on TechNet on Jul 01, 2012 This case is my favorite kind of case, one where I use my own tools to solve ...
767

Announcing Trojan Horse, the Novel!

MarkRussinovich on 06-27-2019 12:24 AM
First published on TechNet on May 06, 2012 Many of you have read Zero Day, my first novel.
940

The Case of My Mom’s Broken Microsoft Security Essentials Installation

MarkRussinovich on 06-27-2019 12:24 AM
First published on TechNet on Jan 03, 2012 As a reader of this blog I suspect that you, like me, are the IT support staf...
821

The Case of the Installer Service Error

MarkRussinovich on 06-27-2019 12:23 AM
First published on TechNet on Nov 27, 2011 This case unfolds with a network administrator charged with the rollout of th...
1,987

Fixing Disk Signature Collisions

MarkRussinovich on 06-27-2019 12:22 AM
First published on TechNet on Nov 06, 2011 Disk cloning has become common as IT professionals virtualize physical server...
909

The Case of the Mysterious Reboots

MarkRussinovich on 06-27-2019 12:20 AM
First published on TechNet on Oct 02, 2011 This case opens when a Sysinternals power user, who also works as a system ad...
895

The Case of the Hung Game Launcher

MarkRussinovich on 06-27-2019 12:19 AM
First published on TechNet on Jul 18, 2011 I love the cases people send me where the Sysinternals tools have helped them...
1,164

Troubleshooting with the New Sysinternals Administrator’s Reference

MarkRussinovich on 06-27-2019 12:18 AM
First published on TechNet on Jul 03, 2011 Aaron Margosis and I are thrilled to announce that the long awaited, and some...
874

The Zero Day Book Trailer

MarkRussinovich on 06-27-2019 12:18 AM
First published on TechNet on May 03, 2011 I just got back the finished version of the video trailer for my new cyber th...
959

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 3

MarkRussinovich on 06-27-2019 12:18 AM
First published on TechNet on Apr 17, 2011 In the first post of this series, I used Autoruns, Process Explorer and VMMap...
940

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 2

MarkRussinovich on 06-27-2019 12:16 AM
First published on TechNet on Apr 15, 2011 In Part 1 I began my investigation of an example infection of the infamous St...
1,155

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 1

MarkRussinovich on 06-27-2019 12:13 AM
First published on TechNet on Mar 26, 2011 Though I didn’t realize what I was seeing, Stuxnet first came to my attention...
923

Zero Day is Here!

MarkRussinovich on 06-27-2019 12:12 AM
First published on TechNet on Mar 13, 2011 I’m excited to announce that my first novel, a cyber thriller entitled Zero D...
834

The Case of the Unusable System

MarkRussinovich on 06-27-2019 12:12 AM
First published on TechNet on Mar 13, 2011 This post continues in the malware hunting theme of the last couple of posts ...
1,053

The Case of the Sysinternals-Blocking Malware

MarkRussinovich on 06-27-2019 12:11 AM
First published on TechNet on Mar 06, 2011 Continuing the theme of focusing on malware-related cases (last week I posted...
881

The Case of the Malicious Autostart

MarkRussinovich on 06-27-2019 12:10 AM
First published on TechNet on Feb 26, 2011 Given that my novel, Zero Day, will be published in a few weeks and is based ...
612

Announcing Zero Day, the Novel!

MarkRussinovich on 06-27-2019 12:09 AM
First published on TechNet on Jan 18, 2011 You’ve seen the news if you’re my friend on Facebook, follow me on Twitter, o...
731

“Blue Screens” in Designer Colors with One Click

MarkRussinovich on 06-27-2019 12:09 AM
First published on TechNet on Jan 09, 2011 My last blog post described how to use local kernel debugging to change the c...
764

A Bluescreen By Any Other Color

MarkRussinovich on 06-27-2019 12:09 AM
First published on TechNet on Dec 13, 2010 Note: for an easier way to customize the blue screen’s colors, see my next bl...
767

The Cases of the Blue Screens: Finding Clues in a Crash Dump and on the Web

MarkRussinovich on 06-27-2019 12:07 AM
First published on TechNet on Dec 12, 2010 My last couple of posts have looked at the lighter side of blue screens by sh...
778

The Case of the Slow Project File Opens

MarkRussinovich on 06-27-2019 12:07 AM
First published on TechNet on Dec 06, 2010 If you’ve seen one of my Case of the Unexplained presentations (like the one ...
1,498

LiveKd for Virtual Machine Debugging

MarkRussinovich on 06-27-2019 12:06 AM
First published on TechNet on Oct 09, 2010 When Dave Solomon and I were writing the 3rd edition of the Windows Internals...
973

The Compound Case of the Outlook Hangs

MarkRussinovich on 06-27-2019 12:05 AM
First published on TechNet on Aug 21, 2010 This case was shared with me by a friend of mine, Andrew Richards, a Microsof...
877

The Case of the Random IE Crash

MarkRussinovich on 06-27-2019 12:04 AM
First published on TechNet on Jun 01, 2010 While I long for the day when I no longer experience the effects of buggy sof...
860

The Case of the Printing Failure

MarkRussinovich on 06-27-2019 12:03 AM
First published on TechNet on Apr 12, 2010 The most interesting cases I receive are those that demonstrate a unique trou...
1,442

Pushing the Limits of Windows: USER and GDI Objects – Part 2

MarkRussinovich on 06-27-2019 12:02 AM
First published on TechNet on Mar 31, 2010 Last time, I covered the limits and how to measure usage of one of the two ke...

Latest Comments

Gustavo Nuñez
in Windows AutoPilot Azure AD Branding on 07-10-2020
Hello Michael, Nice post... doesn't it work for Autopilot Self-Deploying as well?
0 Likes
Ronald Harper
in What is Windows Update for Business? on 05-27-2020
Yes, I need some updated customer-grade guidance on this tech, something that I can point our helpdesk to and that is very simple for customers to understand - how to pause, schedule, and otherwise react to notifications.
0 Likes
fcnet
in The Machine SID Duplication Myth (and Why Sysprep Matters) on 05-26-2020
What i miss here is :"Note that Sysprep resets other machine-specific state that, if duplicated, can cause problems for certain applications like Windows Server Update Services (WSUS), so MIcrosoft's support policy will still require cloned systems to be made unique with Sysprep." is it possible to ...
0 Likes
AshuMaheshwari
in Speeding up Windows Autopilot for existing devices on 05-04-2020
HiIn intune we have defined the deployment Profile where the Prefix and domain information added. Now what to do for existing devices so that old name can exist after the machine formatted and liveraging autopilot service.
0 Likes
Dougl2285
in The Machine SID Duplication Myth (and Why Sysprep Matters) on 05-03-2020
Thank you for the clarifying information. 
0 Likes