Troubleshooting : FASTIO_READ events getting slower
Author: tamahomeSubject: FASTIO_READ events getting slowerPosted: 21 February 2013 at 3:38pmMicrosoft support have come back to me now and the cause of this is the luafv.sys driver or "Least User...
View ArticleTroubleshooting : FASTIO_READ events getting slower
Author: ChrisAtRadhypsSubject: FASTIO_READ events getting slowerPosted: 21 February 2013 at 4:10pmThanks for the thread. I can see this is somewhat related in that the thread explains the luafv.sys...
View ArticleAutoruns : Error - PsExec - Return "Error Code 0"
Author: maurocSubject: Error - PsExec - Return "Error Code 0"Posted: 21 February 2013 at 6:16pmHi im Mauro from Argentina.Im trying to install remotely from a Virtual Machine the KAV (Kaspersky...
View ArticleProcess Monitor : procmon driver leak non paged pool
Author: DeJagSubject: procmon driver leak non paged poolPosted: 22 February 2013 at 11:45amHello all, I had a strange memory leak previously on a 2003 server. I had to monitor the server for an...
View ArticleMalware : svchost.exe launching iexplore.exe (x64)
Author: c4p0neSubject: svchost.exe launching iexplore.exe (x64)Posted: 22 February 2013 at 12:46pmI've discovered that when launching the cloud storage application known as "bitcasa" (www.bitcasa.com)...
View ArticleAutoruns : What software is monitorig printer ink
Author: KCavSubject: What software is monitorig printer inkPosted: 22 February 2013 at 2:50pmNew Autorun user would like to know how to configure Autorun to detect file system entries and Registry...
View ArticleTroubleshooting : Robocopy and Archived files
Author: johndawsonboothSubject: Robocopy and Archived filesPosted: 22 February 2013 at 3:55pmHi all.... Here'd the situation: I have ServerA - a file server and ServerB a "DR" server.An archiving...
View ArticleProcess Monitor : Corrupt Backing File
Author: LubartSubject: Corrupt Backing FilePosted: 22 February 2013 at 6:03pmNo. It does not work.1. I'm running procmon.exe from .bat file in Scheduler.2. Then at specified time another scheduled .bat...
View ArticleTroubleshooting : Robocopy and Archived files
Author: WindowsStarSubject: Robocopy and Archived filesPosted: 23 February 2013 at 5:42amTry XXCopy much more robust and will do just want you want. I started with RoboCopy for a project like this and...
View ArticleProcess Monitor : procmon 303 not running in Windows 2008 sp1or 7sp1
Author: LubartSubject: procmon 303 not running in Windows 2008 sp1or 7sp1Posted: 23 February 2013 at 11:28amNo 64-bit version of exe did not help. ProcMon-64.exe also stops in Windows 2008 sp1 without...
View ArticleAutoruns : Autorunsc - empty space between each char
Author: kentfSubject: Autorunsc - empty space between each charPosted: 23 February 2013 at 7:42pmI'm having the same issue as the original poster. The output in 11.4x makes it difficult to work with...
View ArticleUtilities Suggestions : keyboard hook
Author: ddyerSubject: keyboard hookPosted: 24 February 2013 at 8:34pmGiven the ubiquitous threat posed by key loggers, I'm amazed that there is nota utility that will expose the path a keystroke takes...
View ArticleProcess Explorer : ** Process Explorer Bugs **
Author: veitekkiSubject: ** Process Explorer Bugs **Posted: 24 February 2013 at 10:00pmMy problem is that i can't get the process explorer to start with shortcuts only by opening it manually. This is...
View ArticleDevelopment : ZwSetInformationThread - Change Start Address
Author: mxmauroSubject: ZwSetInformationThread - Change Start AddressPosted: 24 February 2013 at 11:02pmHi,Although if you do a GetThreadContext, eax/rcx should contain the starting address, I...
View ArticleBgInfo : SERVER 2012: BGINFO Not Displaying on Desktop
Author: jwestSubject: SERVER 2012: BGINFO Not Displaying on DesktopPosted: 25 February 2013 at 6:54amI was seeing nothing either. I noted you mentioned console sessions as well. Is that the admin...
View ArticlePsTools : psping ERRORLEVEL
Author: ltn_snoopySubject: psping ERRORLEVELPosted: 25 February 2013 at 1:49pmThe next time you update this great tool can you also correctly set the ERRORLEVEL variable.Reached computer set...
View ArticleInternals : Injecting a DLL in a Modern UI Metro Application
Author: mxmauroSubject: Injecting a DLL in a Modern UI Metro ApplicationPosted: 26 February 2013 at 4:51pmIt is an article I wrote and I want to share:...
View ArticleDisk2vhd : "Invalid" vhd's being created
Author: rkoettSubject: "Invalid" vhd's being createdPosted: 27 February 2013 at 3:08amI'm having an issue similar to what is discussed in this old...
View ArticleProcess Explorer : Quick monitoring
Author: plavozontSubject: Quick monitoringPosted: 27 February 2013 at 5:50amI would like to make a suggestion. I use Process Explorer(most the time) to check which process is slowing down my computer....
View ArticleProcess Explorer : ** Feature Requests **
Author: plavozontSubject: ** Feature Requests **Posted: 27 February 2013 at 2:29pmI use Process Explorer(most the time) to check which process is slowing down my computer. It can be a process that eats...
View Article