Category Archives: ProcMon

Start ProcMon During Boot on Machine You Can’t Logon

Sometimes you might want to run some tracing tools like ProcMon, xperf, wpr, netsh trace, etc on a machine that logon is not completing properly. Often you might be able to use PowerShell remoting, WMI, or psexec to get these … Continue reading

Posted in Debugging, ProcMon, Windows Performance Recorder, Windows Performance Toolkit | Tagged | Leave a comment

Case of the Slow Downloads Folder

In Windows 10 on Surface Pro 4, performance is mostly pretty quick. But the first time opening Downloads folder after a restart it was very slow, taking 11 seconds just to display 114 files and 35 directories. To confirm issue … Continue reading

Posted in Performance, ProcMon, Window, Windows 10 | Tagged , , | Leave a comment

Case of the Unwanted Chrome Search Modification

A friend’s machine had the Google Chrome home page set to piesearch.com But there is no homepage set in settings. Checking the Chrome Shortcut in Start Menu we can see it’s been modified, so we remove the piesearch parameter. This … Continue reading

Posted in Group Policy, Internet Explorer, ProcMon, Sys, SysInternals | Leave a comment

Debugging / Viewing Windows Update Log on Windows 10 Insider Builds

Having confirmed with WinDbg team currently insider builds don’t get public symbols unless it is a major release (They are looking into a solution….) How are we going to debug anything on bleeding edge systems “Fast Track Updates” in the … Continue reading

Posted in Fiddler, ProcMon, WinDbg, Windows 10 | Tagged | 5 Comments

Case of the “Server Returned a Referral”

From the development team that brought us such great bugs such as “Invalid Base Key Error” (https://chentiangemalc.wordpress.com/2014/05/22/case-of-the-invalid-base-key-error/) and “Continuing Case Of ByRef Corruption” (https://chentiangemalc.wordpress.com/2014/07/07/continuing-case-of-byref-corruption-net-patching/) on the latest update to the application we got a new error: Of course if you … Continue reading

Posted in .NET, API Monitor, Debugging, ProcMon, WinDbg | Tagged | Leave a comment

App-V Visio and Thick Excel Collide

A 3rd party Excel add-in had stopped working for a group of users, and they all received an error message on launching Excel: Microsoft Visual Basic for ApplicationsSystem Error &H8007007E (-2147024770) Unfortunately the VBA code in question was from the … Continue reading

Posted in App-V, Office, ProcMon, SysInternals | Leave a comment

Case of the Office XP Web Component ActiveX

There was a website used for reporting, but when users went onto Windows 7 for some users the reports did not show up, only on some user machines. For this type of issues I typically like to get two logs: … Continue reading

Posted in Fiddler, Internet Explorer, ProcMon | Tagged | Leave a comment