Quantcast
Channel: Sysinternals Forums
Viewing all 10386 articles
Browse latest View live

Process Explorer : System Process High CPU

$
0
0
Author: MagicAndre1981
Subject: System Process High CPU
Posted: 12 January 2014 at 7:39am

Install it on a second PC and copy the WPT folder to the server.

Process Explorer : System Process High CPU

$
0
0
Author: maxhugen
Subject: System Process High CPU
Posted: 12 January 2014 at 12:49pm

Thank you. I will try that.

Process Explorer : ** Process Explorer Bugs **

$
0
0
Author: bugmenot
Subject: ** Process Explorer Bugs **
Posted: 12 January 2014 at 5:04pm

v15.40 / Win7 SP1.

The "Run At Logon" feature creates an invalid task, namely this property is set:
<ExecutionTimeLimit>PT72H</ExecutionTimeLimit>
Which terminates Process Explorer after running for 3 days.

Disk2vhd : error loading operating system

$
0
0
Author: rkoett
Subject: error loading operating system
Posted: 12 January 2014 at 8:44pm

Disk2Vhd appears to have problems creating VHD's from Windows 2003 with software RAID1. In my case, I could mount the VHD's but they would not appear to have valid contents. My workaround (which I read somewhere else in these forums) is to use TestDisk to recover the partition on the mounted VHD file.
 
Example
Mount the VHD file from a command prompt, similar to:
diskpart
select vdisk file="C:\Users\Public\Documents\Hyper-V\Virtual hard disks\TEST.VHD"
attach vdisk
select disk=1
online disk
exit
 
Then use TestDisk to recover the partition:
testdisk_win.exe /cmd /dev/sdb analyze,noconfirm,write
 
TestDisk is available from:
 
 
 

Site Bugs : User passwords stored in an open text form!

$
0
0
Author: dc_2000
Subject: User passwords stored in an open text form!
Posted: 13 January 2014 at 9:16am

Just registered on this site and received this in an email:

Hi dc_2000

Thank-you for taking the time to register to use the forum Sysinternals Forums.

----------------------------
Username: - dc_2000
Password: - myactualpassword!
----------------------------

I would think that the site dealing with Windows system internals would recognize the dangers of not only storing user passwords, but also emailing them in an open form!

Development : How to refresh logon screensaver parameter changes

$
0
0
Author: dc_2000
Subject: How to refresh logon screensaver parameter changes
Posted: 13 January 2014 at 9:18am

I have a Windows service that may change the timeout of the logon screensaver in Windows (as described here.) To do that I change the following registry key to the timeout in seconds:

HKEY_USERS\.DEFAULT\Control Panel\Desktop\ScreenSaveTimeOut
The issue is how do I make OS "read" or refresh the actual screensaver timeout after a change in the registry key above?

My practice shows that it is refreshed (for sure) only when I reboot the system, but in my case I need it to be applied without the reboot.

Miscellaneous Utilities : SDelete 1.6 bug on recursive deletion

$
0
0
Author: opJW
Subject: SDelete 1.6 bug on recursive deletion
Posted: 13 January 2014 at 10:14am


http://web.archive.org/web/20110624072636/http://download.sysinternals.com/Files/SDelete.zip

SDelete - Secure Delete v1.51
Copyright (C) 1999-2005 Mark Russinovich
Sysinternals - www.sysinternals.com

usage: sdelete [-p passes] [-s] [-q] <file or directory>
       sdelete [-p passes] [-z|-c] [drive letter]
   -c         Zero free space (good for virtual disk optimization)
   -p passes  Specifies number of overwrite passes (default is 1)
   -q         Don't print errors (Quiet)
   -s         Recurse subdirectories
   -z         Clean free space

  File: sdelete.exe
CRC-32: 3234dc77
   MD4: 94c0d09a7d93e642de5ecf8ef9ec3c31
   MD5: e7982d4f83cb999ef7b8bbcf9cc6e227
 SHA-1: 187beea1ed4738cd3af648b6ee51d631fc059a71

Miscellaneous Utilities : SDelete 1.6 Folder Bug

$
0
0
Author: opJW
Subject: SDelete 1.6 Folder Bug
Posted: 13 January 2014 at 10:16am

http://web.archive.org/web/20110624072636/http://download.sysinternals.com/Files/SDelete.zip

SDelete - Secure Delete v1.51
Copyright (C) 1999-2005 Mark Russinovich
Sysinternals - www.sysinternals.com

usage: sdelete [-p passes] [-s] [-q] <file or directory>
       sdelete [-p passes] [-z|-c] [drive letter]
   -c         Zero free space (good for virtual disk optimization)
   -p passes  Specifies number of overwrite passes (default is 1)
   -q         Don't print errors (Quiet)
   -s         Recurse subdirectories
   -z         Clean free space

  File: sdelete.exe
CRC-32: 3234dc77
   MD4: 94c0d09a7d93e642de5ecf8ef9ec3c31
   MD5: e7982d4f83cb999ef7b8bbcf9cc6e227
 SHA-1: 187beea1ed4738cd3af648b6ee51d631fc059a71


Edited by opJW - 13 hours 43 minutes ago at 10:17am

Miscellaneous Utilities : RAMMap shows excessive page table usage

$
0
0
Author: martinpa
Subject: RAMMap shows excessive page table usage
Posted: 13 January 2014 at 10:28am

Hi,

after some more research, I guess I can answer this myself: This seems to be a Microsoft memory leak, a detailed discussion can be found under http://social.technet.microsoft.com/Forums/windowsserver/en-US/0b610346-fc53-4b39-8cfd-9737d265c3f4/physical-memory-leak-by-terminated-processes?forum=winservergen.

I've forwarded this information to the customer and suggested they open a Microsoft support call for this problem. Meanwhile, rebooting the server every weekend should keep the problem within manageable limits.

Martin

BgInfo : Logon Wallpaper refresh

$
0
0
Author: dc_2000
Subject: Logon Wallpaper refresh
Posted: 13 January 2014 at 11:02am

@BKeadle: I know that this an old thread, but I'm dealing with a similar issue (in my case I need to refresh the logon screensaver timeout.) So I'm curious, did you happen to find a solution? Also, in one of the posts above you claim that killing LogonUI.exe might have done it and you gave the link to some other post, which unfortunately is broken. Can you elaborate on that as well? Much appreciated!

Miscellaneous Utilities : Sigcheck 2.1 Runs Slowly On 64-Bit

$
0
0
Author: qcjacobo
Subject: Sigcheck 2.1 Runs Slowly On 64-Bit
Posted: 13 January 2014 at 7:10pm

All,

I am currently using sigcheck (latest version..2.1) to enumerate files on my system that are unsigned (using -u flag).  On a 32-bit Windows XP system the tool runs many times faster than on a Windows 7 64-bit image.  Has anyone encountered the same/similar issue with the tool and are there any suggestions as to flags to enable/disable or ways in which to utilize the tool to improve overall performance?  Alternatively if there is an alternate tool with which you have found more success, please let me know as I am willing to look at options.

Thank you.

PsTools : psexec to run a mp4 on remote computer

$
0
0
Author: saikoutenshi
Subject: psexec to run a mp4 on remote computer
Posted: 13 January 2014 at 8:38pm

I'm trying to prank my colleague who is constantly messing with peoples computers at work. Basically, i have scripts that will work when playing a sound file, using sndrec32.exe

I want to be able to play a .mp4 file using windows media player, but i am having issues. Here's my code so far:

if not exist \\REMOTECOMPUTER\c$\windows\nircmd.exe xcopy "C:\Windows\System32\nircmd.exe" \\REMOTECOMPUTER\c$\windows /D /y
if not exist \\REMOTECOMPUTER\c$\windows\sndrec32.exe xcopy "C:\Windows\System32\sndrec32.exe" \\REMOTECOMPUTER\c$\windows /D /y

xcopy C:\Windows\Media \\REMOTECOMPUTER\c$\windows\media /D /y

psexec \\REMOTECOMPUTER c:\windows\nircmd mutesysvolume 0
psexec \\REMOTECOMPUTER c:\windows\nircmd setsysvolume 65535

psexec \\REMOTECOMPUTER "C:\Program Files\Windows Media Player\wmplayer.exe" /play /close /fullscreen c:\windows\media\WhatIsLove.mp4


Essentially, whats supposed to happen is:

1. looks for nircmd.exe file on remote computer, if it doesnt exist then copy it.
2. looks for sndrec32.exe file on remote computer, if it doesnt exist then copy it. (used to play sound files.)
3. copies the folder contents of C:\Windows\media on my machine to the remote machine. (this includes whatislove.mp4 file)
4. Unmutes system volume of remote computer and maxes out the volume.
5. ATTEMPTS to play file.


Fails at step 5.
If i use:
psexec \\REMOTECOMPUTER "c:\windows\sndrec32.exe" /play /close c:\windows\media\notify.wav

it will work, but not when using windows media player. it returns with this:

C:\Program Files\Windows Media Player\wmplayer.exe exited on REMOTECOMPUTER with error code 0.


Any ideas why this works with sndrec32.exe and not wmplayer.exe?

PsTools : psexec to run a mp4 on remote computer

$
0
0
Author: rmetzger
Subject: psexec to run a mp4 on remote computer
Posted: 13 January 2014 at 9:35pm

Just a thought . . .

Consider replacing C:\Program Files
with %ProgramFiles%
or %ProgramFiles(x86)%

If my theory is correct, your \\RemoteComputer is 64-bit and you are trying to run the 64-bit version of C:\Program Files\Windows Media Player\wmplayer.exe. Because it is in the UAC 'protected' area, it is not running, since psexec.exe is launching via a 32-bit cmd process.

Let us know if this helps.

Ron Metzger

Process Explorer : System Process High CPU

$
0
0
Author: maxhugen
Subject: System Process High CPU
Posted: 14 January 2014 at 7:10am

OK, I'll try again - and thanks for your patience!

PsTools : psexec to run a mp4 on remote computer

$
0
0
Author: saikoutenshi
Subject: psexec to run a mp4 on remote computer
Posted: 14 January 2014 at 2:26pm

The REMOTECOMPUTER in question is only a 32-bit device. However, i tested this on a 64-bit and was unsuccessful. I tried both methods. It returns:

PsExec could not start C:\ \Windows Media Player\wmplayer.exe on REMOTECOMPUTER:
The system cannot find the path specified.

When specifying the file location on a 64-bit device to:
C:\Program Files (x86)\Windows Media Player\wmplayer.exe   it will exit on REMOTECOMPUTER with error code 0.

Site Bugs : Sysinternals Suite Download Broken

$
0
0
Author: cking22001
Subject: Sysinternals Suite Download Broken
Posted: 14 January 2014 at 4:31pm

This has been broken for me for at least the last month. Either the zip fails to download or won't open.

Troubleshooting : Unresponsive PC but CPU utilization OK

$
0
0
Author: tenbob
Subject: Unresponsive PC but CPU utilization OK
Posted: 14 January 2014 at 4:41pm

Hi. Thanks for the suggestions Jimster and Dax1792. Unfortunately these don't seem to apply in this case.

When the PC is unresponsive it doesn't seem to be caused by a resource limitation. There are plenty of CPU cycles available and the disk is not thrashing. 

I think it must be some sort of deadlock where Windows is waiting for something to happen before it can continue. I'd be grateful for any testing strategy that will help me track this down.

Bob

Process Explorer : System Process High CPU

Troubleshooting : Unresponsive PC but CPU utilization OK

$
0
0
Author: MagicAndre1981
Subject: Unresponsive PC but CPU utilization OK
Posted: 14 January 2014 at 5:00pm

you can use xperf to trace waits:

Defrag Tools: #43 - WPT - Wait Analysis
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-43-WPT-Wait-Analysis


BgInfo : Logon Wallpaper refresh

Viewing all 10386 articles
Browse latest View live




Latest Images