cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Windows Blog Archive
Home
Options
1,667

The Case of the Father-in-Law’s Scareware

MarkRussinovich on 06-27-2019 12:31 AM
First published on TechNet on Apr 18, 2015 We all know people, friends and family, that have fallen for the “your system...
1,544

Hunting Down and Killing Ransomware

MarkRussinovich on 06-27-2019 12:30 AM
First published on TechNet on Jan 02, 2013 Scareware, a type of malware that mimics antimalware software, has been aroun...
1,330

The Case of the Unexplained FTP Connections

MarkRussinovich on 06-27-2019 12:29 AM
First published on TechNet on Oct 28, 2012 A key part of any cybersecurity plan is “continuous monitoring”, or enabling ...
874

Windows Azure Host Updates: Why, When, and How

MarkRussinovich on 06-27-2019 12:27 AM
First published on TechNet on Aug 22, 2012 Windows Azure’s compute platform, which includes Web Roles, Worker Roles, and...
1,425

The Case of the Veeerrry Slow Logons

MarkRussinovich on 06-27-2019 12:26 AM
First published on TechNet on Jul 01, 2012 This case is my favorite kind of case, one where I use my own tools to solve ...
659

Announcing Trojan Horse, the Novel!

MarkRussinovich on 06-27-2019 12:24 AM
First published on TechNet on May 06, 2012 Many of you have read Zero Day, my first novel.
806

The Case of My Mom’s Broken Microsoft Security Essentials Installation

MarkRussinovich on 06-27-2019 12:24 AM
First published on TechNet on Jan 03, 2012 As a reader of this blog I suspect that you, like me, are the IT support staf...
700

The Case of the Installer Service Error

MarkRussinovich on 06-27-2019 12:23 AM
First published on TechNet on Nov 27, 2011 This case unfolds with a network administrator charged with the rollout of th...
1,205

Fixing Disk Signature Collisions

MarkRussinovich on 06-27-2019 12:22 AM
First published on TechNet on Nov 06, 2011 Disk cloning has become common as IT professionals virtualize physical server...
777

The Case of the Mysterious Reboots

MarkRussinovich on 06-27-2019 12:20 AM
First published on TechNet on Oct 02, 2011 This case opens when a Sysinternals power user, who also works as a system ad...
768

The Case of the Hung Game Launcher

MarkRussinovich on 06-27-2019 12:19 AM
First published on TechNet on Jul 18, 2011 I love the cases people send me where the Sysinternals tools have helped them...
986

Troubleshooting with the New Sysinternals Administrator’s Reference

MarkRussinovich on 06-27-2019 12:18 AM
First published on TechNet on Jul 03, 2011 Aaron Margosis and I are thrilled to announce that the long awaited, and some...
776

The Zero Day Book Trailer

MarkRussinovich on 06-27-2019 12:18 AM
First published on TechNet on May 03, 2011 I just got back the finished version of the video trailer for my new cyber th...
808

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 3

MarkRussinovich on 06-27-2019 12:18 AM
First published on TechNet on Apr 17, 2011 In the first post of this series, I used Autoruns, Process Explorer and VMMap...
784

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 2

MarkRussinovich on 06-27-2019 12:16 AM
First published on TechNet on Apr 15, 2011 In Part 1 I began my investigation of an example infection of the infamous St...
923

Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 1

MarkRussinovich on 06-27-2019 12:13 AM
First published on TechNet on Mar 26, 2011 Though I didn’t realize what I was seeing, Stuxnet first came to my attention...
819

Zero Day is Here!

MarkRussinovich on 06-27-2019 12:12 AM
First published on TechNet on Mar 13, 2011 I’m excited to announce that my first novel, a cyber thriller entitled Zero D...
718

The Case of the Unusable System

MarkRussinovich on 06-27-2019 12:12 AM
First published on TechNet on Mar 13, 2011 This post continues in the malware hunting theme of the last couple of posts ...
888

The Case of the Sysinternals-Blocking Malware

MarkRussinovich on 06-27-2019 12:11 AM
First published on TechNet on Mar 06, 2011 Continuing the theme of focusing on malware-related cases (last week I posted...
754

The Case of the Malicious Autostart

MarkRussinovich on 06-27-2019 12:10 AM
First published on TechNet on Feb 26, 2011 Given that my novel, Zero Day, will be published in a few weeks and is based ...
520

Announcing Zero Day, the Novel!

MarkRussinovich on 06-27-2019 12:09 AM
First published on TechNet on Jan 18, 2011 You’ve seen the news if you’re my friend on Facebook, follow me on Twitter, o...
611

“Blue Screens” in Designer Colors with One Click

MarkRussinovich on 06-27-2019 12:09 AM
First published on TechNet on Jan 09, 2011 My last blog post described how to use local kernel debugging to change the c...
620

A Bluescreen By Any Other Color

MarkRussinovich on 06-27-2019 12:09 AM
First published on TechNet on Dec 13, 2010 Note: for an easier way to customize the blue screen’s colors, see my next bl...
604

The Cases of the Blue Screens: Finding Clues in a Crash Dump and on the Web

MarkRussinovich on 06-27-2019 12:07 AM
First published on TechNet on Dec 12, 2010 My last couple of posts have looked at the lighter side of blue screens by sh...
668

The Case of the Slow Project File Opens

MarkRussinovich on 06-27-2019 12:07 AM
First published on TechNet on Dec 06, 2010 If you’ve seen one of my Case of the Unexplained presentations (like the one ...
819

LiveKd for Virtual Machine Debugging

MarkRussinovich on 06-27-2019 12:06 AM
First published on TechNet on Oct 09, 2010 When Dave Solomon and I were writing the 3rd edition of the Windows Internals...
784

The Compound Case of the Outlook Hangs

MarkRussinovich on 06-27-2019 12:05 AM
First published on TechNet on Aug 21, 2010 This case was shared with me by a friend of mine, Andrew Richards, a Microsof...
715

The Case of the Random IE Crash

MarkRussinovich on 06-27-2019 12:04 AM
First published on TechNet on Jun 01, 2010 While I long for the day when I no longer experience the effects of buggy sof...
729

The Case of the Printing Failure

MarkRussinovich on 06-27-2019 12:03 AM
First published on TechNet on Apr 12, 2010 The most interesting cases I receive are those that demonstrate a unique trou...
921

Pushing the Limits of Windows: USER and GDI Objects – Part 2

MarkRussinovich on 06-27-2019 12:02 AM
First published on TechNet on Mar 31, 2010 Last time, I covered the limits and how to measure usage of one of the two ke...
Latest Comments
dan-dan-the-nt-man
in LUA Buglight 2.3, with support for Windows 8.1 and Windows 10 on 03-25-2020
LuaBugLight is a fantastic tool. However, can Server 2016 and above be added ?
0 Likes
WesleeJKN0487
in The Case of the Veeerrry Slow Logons on 03-04-2020
Cool! Just forwarded this analysis to my customer as a baseline for investigating logons.
0 Likes
Andreas Luber
in What is Windows Update for Business? on 02-16-2020
The content seems somewhat outdated. Still referes to CBB, CB. WUfB does include servicing driver updates.
0 Likes
AzizChahid
in Get free, hands-on experience with Windows 10 virtual labs on 02-07-2020
I am unable to access any of the 10 virtual self-paced labs on this link https://aka.ms/w10virtuallabsWhich just goes into a loop??? Is there anything that I can do to remedy this? Thanks,
0 Likes
Daniel Ayala
in Get free, hands-on experience with Windows 10 virtual labs on 01-11-2020
Clicking on the https://aka.ms/w10virtuallabs link takes me to the same page.https://techcommunity.microsoft.com/t5/windows-blog-archive/get-free-hands-on-experience-with-windows-10-virtual-labs/ba-p/167013 Is this because I'm using a personal account instead of my work account?
0 Likes