Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <!-- CP[0] 0.0000 seconds -->
- <!-- CP[04] 0.0048 seconds -->
- [13:54:44/1309] start
- [13:54:44/1309] local cache will not be used for this feed
- [13:54:44/1309] fetching [http://blogs.technet.com/b/askds/rss.aspx]...
- [13:54:44/1309] If-Modified-Since: Sat, 28 Dec 2013 01:50:00 GMT
- [13:54:45/1309] fetch done.
- [13:54:45/1309] saving cache/simplepie/c6487798e40772fa23c9d25b67b798dd63dfdfd2.xml
- [13:54:45/1309] processing feed data...
- [13:54:45/1309] site_url: http://blogs.technet.com/b/askds/default.aspx
- [13:54:45/1309] feed_title: Ask the Directory Services Team
- [13:54:45/1309] loading filters & labels...
- [13:54:45/1309] 0 filters loaded.
- [13:54:45/1309] processing articles...
- [13:54:45/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:238d1748-f7da-4b35-8636-b4aaaa0caed1
- [13:54:45/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:238d1748-f7da-4b35-8636-b4aaaa0caed1 / SHA1:dde0e75afb7e5b8fd55bb07bdc36e1cd1d5d26fc
- [13:54:45/1309] orig date: 1386974100
- [13:54:45/1309] date 1386974100 [2013/12/13 22:35:00]
- [13:54:45/1309] title An update for ADMT, and a few other things too.
- [13:54:45/1309] link http://blogs.technet.com/b/askds/archive/2013/12/13/an-update-for-admt-and-a-few-other-things-too.aspx
- [13:54:45/1309] detected language:
- [13:54:45/1309] author David Beach - MSFT
- [13:54:45/1309] num_comments: 0
- [13:54:45/1309] looking for tags...
- [13:54:45/1309] tags found:
- [13:54:45/1309] done collecting data.
- [13:54:45/1309] applying plugin filters..
- [13:54:45/1309] plugin data: fsckportal,2:
- [13:54:45/1309] base guid found, checking for user record
- [13:54:45/1309] article filters:
- [13:54:45/1309] initial score: 0
- [13:54:45/1309] user record FOUND
- [13:54:45/1309] RID: 28981, IID: 29065
- [13:54:45/1309] assigning labels...
- [13:54:45/1309] looking for enclosures...
- [13:54:45/1309] article enclosures:
- Array
- (
- )
- [13:54:45/1309] filtered article tags:
- Array
- (
- )
- [13:54:45/1309] article processed
- [13:54:45/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:18688121-04df-41f8-8911-2cea1336e835
- [13:54:45/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:18688121-04df-41f8-8911-2cea1336e835 / SHA1:8b2c66ebe1fa6f4fa87ab66b9cc0335f4213132d
- [13:54:45/1309] orig date: 1380639420
- [13:54:45/1309] date 1380639420 [2013/10/01 14:57:00]
- [13:54:45/1309] title Locked or not? Demystifying the UI behavior for account lockouts
- [13:54:45/1309] link http://blogs.technet.com/b/askds/archive/2013/10/01/locked-or-not-demystifying-the-ui-behavior-for-account-lockouts.aspx
- [13:54:45/1309] detected language:
- [13:54:45/1309] author David Beach - MSFT
- [13:54:45/1309] num_comments: 5
- [13:54:45/1309] looking for tags...
- [13:54:45/1309] tags found: account lockout,shijo joy
- [13:54:45/1309] done collecting data.
- [13:54:45/1309] applying plugin filters..
- [13:54:45/1309] plugin data: fsckportal,2:
- [13:54:45/1309] base guid found, checking for user record
- [13:54:45/1309] article filters:
- [13:54:45/1309] initial score: 0
- [13:54:45/1309] user record FOUND
- [13:54:45/1309] RID: 28982, IID: 29066
- [13:54:45/1309] assigning labels...
- [13:54:45/1309] looking for enclosures...
- [13:54:45/1309] article enclosures:
- Array
- (
- )
- [13:54:45/1309] filtered article tags:
- Array
- (
- [0] => account lockout
- [1] => shijo joy
- )
- [13:54:45/1309] article processed
- [13:54:45/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:ed789f71-56a2-4e81-aa54-4d37a0312919
- [13:54:45/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:ed789f71-56a2-4e81-aa54-4d37a0312919 / SHA1:1a68a336951057e3bd272a0003ab89ceebb8f414
- [13:54:45/1309] orig date: 1376591880
- [13:54:45/1309] date 1376591880 [2013/08/15 18:38:00]
- [13:54:45/1309] title Important Announcement: AD FS 2.0 and MS13-066
- [13:54:45/1309] link http://blogs.technet.com/b/askds/archive/2013/08/15/important-announcement-ad-fs-2-0-and-ms13-066.aspx
- [13:54:45/1309] detected language:
- [13:54:45/1309] author David Beach - MSFT
- [13:54:45/1309] num_comments: 5
- [13:54:45/1309] looking for tags...
- [13:54:45/1309] tags found: adfs,adam conkle
- [13:54:45/1309] done collecting data.
- [13:54:45/1309] applying plugin filters..
- [13:54:45/1309] plugin data: fsckportal,2:
- [13:54:45/1309] base guid found, checking for user record
- [13:54:45/1309] article filters:
- [13:54:45/1309] initial score: 0
- [13:54:45/1309] user record FOUND
- [13:54:45/1309] RID: 28983, IID: 29067
- [13:54:45/1309] assigning labels...
- [13:54:45/1309] looking for enclosures...
- [13:54:45/1309] article enclosures:
- Array
- (
- )
- [13:54:45/1309] filtered article tags:
- Array
- (
- [0] => adfs
- [1] => adam conkle
- )
- [13:54:45/1309] article processed
- [13:54:45/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:3db72927-88a6-4a52-90b2-60a9cfeda787
- [13:54:45/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:3db72927-88a6-4a52-90b2-60a9cfeda787 / SHA1:dcaf0c2fe89e8198f5cc7a58c1e86f16a91d5755
- [13:54:45/1309] orig date: 1376487720
- [13:54:45/1309] date 1376487720 [2013/08/14 13:42:00]
- [13:54:45/1309] title MD5 Signature Hash Deprecation and Your Infrastructure
- [13:54:45/1309] link http://blogs.technet.com/b/askds/archive/2013/08/14/md5-signature-hash-deprecation-and-your-infrastructure.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author David Beach - MSFT
- [13:54:46/1309] num_comments: 0
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: david beach,pki,security
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28984, IID: 29068
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => david beach
- [1] => pki
- [2] => security
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:761f368d-6b2a-4202-9567-4d9f38415033
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:761f368d-6b2a-4202-9567-4d9f38415033 / SHA1:5fbd0b78b53ca1f10e9a047a4a3c0d7680ef3581
- [13:54:46/1309] orig date: 1375289760
- [13:54:46/1309] date 1375289760 [2013/07/31 16:56:00]
- [13:54:46/1309] title DFS Replication in Windows Server 2012 R2 and other goodies, now available on the Filecab blog!
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/07/31/dfs-replication-in-windows-server-2012-r2-and-other-goodies-now-available-on-the-filecab-blog.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author David Beach - MSFT
- [13:54:46/1309] num_comments: 2
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: ned pyle,windows server 2012 r2,dfsr,announcements
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28985, IID: 29069
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => ned pyle
- [1] => windows server 2012 r2
- [2] => dfsr
- [3] => announcements
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:5ec28135-efcc-491f-8a44-f0f29a26ba3e
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:5ec28135-efcc-491f-8a44-f0f29a26ba3e / SHA1:8e2ca5b26577e5efd4d3acc7c7d8526b50b33a8b
- [13:54:46/1309] orig date: 1375281750
- [13:54:46/1309] date 1375281750 [2013/07/31 14:42:30]
- [13:54:46/1309] title Roaming Profile Compatibility - The Windows 7 to Windows 8 Challenge
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/07/31/roaming-profile-compatibility-the-windows-7-to-windows-8-challenge.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author David Beach - MSFT
- [13:54:46/1309] num_comments: 15
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: profiles,windows 7,mark renoden,windows 8
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28986, IID: 29070
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => profiles
- [1] => windows 7
- [2] => mark renoden
- [3] => windows 8
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:b2095df5-c578-4f66-8342-058556bb60e3
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:b2095df5-c578-4f66-8342-058556bb60e3 / SHA1:a3131d8100c10d32257f439c0d3d8bf494ee7380
- [13:54:46/1309] orig date: 1373895180
- [13:54:46/1309] date 1373895180 [2013/07/15 13:33:00]
- [13:54:46/1309] title Because TechNet didn't have enough Active Directory awesomeness already
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/07/15/because-technet-didn-t-have-enough-active-directory-awesomeness-already.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author David Beach - MSFT
- [13:54:46/1309] num_comments: 3
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: active directory,general
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28987, IID: 29071
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => active directory
- [1] => general
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:5a3824a5-0321-4b1f-bf2d-d39b3befc841
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:5a3824a5-0321-4b1f-bf2d-d39b3befc841 / SHA1:ef6d3f59dc54ef825a6e7111105623516a35fcfe
- [13:54:46/1309] orig date: 1372688340
- [13:54:46/1309] date 1372688340 [2013/07/01 14:19:00]
- [13:54:46/1309] title Interesting findings on SETSPN -x -f
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/07/01/interesting-findings-on-setspn-x-f.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author David Beach - MSFT
- [13:54:46/1309] num_comments: 3
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: kerberos,ldap,herbert mauerer,windows server 2012,windows server 2008 r2,ad performance
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28988, IID: 29072
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => kerberos
- [1] => ldap
- [2] => herbert mauerer
- [3] => windows server 2012
- [4] => windows server 2008 r2
- [5] => ad performance
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:ee080371-cd2c-455c-8131-d34ac2ab5bcb
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:ee080371-cd2c-455c-8131-d34ac2ab5bcb / SHA1:7d0aef4cbdc7ee2c56c877e32cd7e24da3da0b9d
- [13:54:46/1309] orig date: 1372166160
- [13:54:46/1309] date 1372166160 [2013/06/25 13:16:00]
- [13:54:46/1309] title Windows Server 2012 R2 - Preview available for download
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/06/25/windows-server-2012-r2-preview-available-for-download.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author David Beach - MSFT
- [13:54:46/1309] num_comments: 1
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: windows server 2012 r2
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28989, IID: 29073
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => windows server 2012 r2
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:3bbe5c88-ae7c-4bb7-82fa-a9af53d805f0
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:3bbe5c88-ae7c-4bb7-82fa-a9af53d805f0 / SHA1:e67d2d5ea988257fc4e0f26c7c1bff22d52f1a0e
- [13:54:46/1309] orig date: 1370357580
- [13:54:46/1309] date 1370357580 [2013/06/04 14:53:00]
- [13:54:46/1309] title Two lines that can save your AD from a crisis
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/06/04/two-lines-that-can-save-your-ad-from-a-crisis.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author David Beach - MSFT
- [13:54:46/1309] num_comments: 15
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: gonzalo reyna,ad recycle bin,disaster recovery,backup and restore,ds quickies
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28990, IID: 29074
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => gonzalo reyna
- [1] => ad recycle bin
- [2] => disaster recovery
- [3] => backup and restore
- [4] => ds quickies
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:a414f36d-717c-4bd2-8caf-6d5f099e6f00
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:a414f36d-717c-4bd2-8caf-6d5f099e6f00 / SHA1:46dfc5e06d8afdf8b497c659c8ab89a03bbe720a
- [13:54:46/1309] orig date: 1369174260
- [13:54:46/1309] date 1369174260 [2013/05/21 22:11:00]
- [13:54:46/1309] title Back to the Loopback: Troubleshooting Group Policy loopback processing, Part 2
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/05/21/back-to-the-loopback-troubleshooting-group-policy-loopback-processing-part-2.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author David Beach - MSFT
- [13:54:46/1309] num_comments: 4
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: kim nichols,group policy
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28991, IID: 29075
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => kim nichols
- [1] => group policy
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:63171af4-8cf7-4d74-9eaf-b9a727f8f3b7
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:63171af4-8cf7-4d74-9eaf-b9a727f8f3b7 / SHA1:4a748832b3c3d3a848a4abf26aa79e07f67a18af
- [13:54:46/1309] orig date: 1368820800
- [13:54:46/1309] date 1368820800 [2013/05/17 20:00:00]
- [13:54:46/1309] title We're back. Did you miss us?
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/05/17/we-re-back-did-you-miss-us.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author David Beach - MSFT
- [13:54:46/1309] num_comments: 20
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: david beach,silly rabbit,general
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28992, IID: 29076
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => david beach
- [1] => silly rabbit
- [2] => general
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:b6b05938-10fc-446a-b4e8-7378722f9266
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:b6b05938-10fc-446a-b4e8-7378722f9266 / SHA1:7c35ccff9387191595bcdf49529160daa99fe552
- [13:54:46/1309] orig date: 1367940240
- [13:54:46/1309] date 1367940240 [2013/05/07 15:24:00]
- [13:54:46/1309] title AD FS 2.0 Claims Rule Language Part 2
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/05/07/ad-fs-2-0-claims-rule-language-part-2.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author Jonathan Stephens, MSFT
- [13:54:46/1309] num_comments: 0
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found:
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28993, IID: 29077
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:4c35636f-db2f-4c5f-85a2-940000c17c6e
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:4c35636f-db2f-4c5f-85a2-940000c17c6e / SHA1:6d2cdbb7cef9751887562ccffeb60f04515eebf6
- [13:54:46/1309] orig date: 1360369080
- [13:54:46/1309] date 1360369080 [2013/02/09 00:18:00]
- [13:54:46/1309] title Circle Back to Loopback
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/02/08/circle-back-to-loopback.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author Jonathan Stephens, MSFT
- [13:54:46/1309] num_comments: 23
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: kim nichols,group policy
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28994, IID: 29078
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => kim nichols
- [1] => group policy
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:53178b68-0b1b-4d4b-bbaf-782c809fb223
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:53178b68-0b1b-4d4b-bbaf-782c809fb223 / SHA1:38ce2c11510c3917680cf5271ed1ca7c2d10dbbe
- [13:54:46/1309] orig date: 1360183860
- [13:54:46/1309] date 1360183860 [2013/02/06 20:51:00]
- [13:54:46/1309] title Distributed File System Consolidation of a Standalone Namespace to a Domain-Based Namespace
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/02/06/distributed-file-system-consolidation-of-a-standalone-namespace-to-a-domain-based-namespace.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author Jonathan Stephens, MSFT
- [13:54:46/1309] num_comments: 1
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: dfsn,dave fisher
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28995, IID: 29079
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => dfsn
- [1] => dave fisher
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:2efc1189-f345-4b35-88eb-e47637b88b5f
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:2efc1189-f345-4b35-88eb-e47637b88b5f / SHA1:b04f9dbed81a555ba9a8a71fddac1f726cac793b
- [13:54:46/1309] orig date: 1358757420
- [13:54:46/1309] date 1358757420 [2013/01/21 08:37:00]
- [13:54:46/1309] title Configuring Change Notification on a MANUALLY created Replication partner
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/01/21/configuring-change-notification-on-a-manually-created-replication-partner.aspx
- [13:54:46/1309] detected language:
- [13:54:46/1309] author Jonathan Stephens, MSFT
- [13:54:46/1309] num_comments: 6
- [13:54:46/1309] looking for tags...
- [13:54:46/1309] tags found: ad replication,jim tierney
- [13:54:46/1309] done collecting data.
- [13:54:46/1309] applying plugin filters..
- [13:54:46/1309] plugin data: fsckportal,2:
- [13:54:46/1309] base guid found, checking for user record
- [13:54:46/1309] article filters:
- [13:54:46/1309] initial score: 0
- [13:54:46/1309] user record FOUND
- [13:54:46/1309] RID: 28996, IID: 29080
- [13:54:46/1309] assigning labels...
- [13:54:46/1309] looking for enclosures...
- [13:54:46/1309] article enclosures:
- Array
- (
- )
- [13:54:46/1309] filtered article tags:
- Array
- (
- [0] => ad replication
- [1] => jim tierney
- )
- [13:54:46/1309] article processed
- [13:54:46/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:96e7502f-f134-49b7-a635-3d31cc871881
- [13:54:46/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:96e7502f-f134-49b7-a635-3d31cc871881 / SHA1:0737508771649378979664bcdb0044a1224a6be0
- [13:54:46/1309] orig date: 1357747140
- [13:54:46/1309] date 1357747140 [2013/01/09 15:59:00]
- [13:54:46/1309] title ADAMSync + (AD Recycle Bin OR searchFlags) = "FUN"
- [13:54:46/1309] link http://blogs.technet.com/b/askds/archive/2013/01/09/adamsync-ad-recycle-bin-or-searchflags-quot-fun-quot.aspx
- [13:54:47/1309] detected language:
- [13:54:47/1309] author Jonathan Stephens, MSFT
- [13:54:47/1309] num_comments: 0
- [13:54:47/1309] looking for tags...
- [13:54:47/1309] tags found: ad recycle bin,disaster recovery,kim nichols,ad lds
- [13:54:47/1309] done collecting data.
- [13:54:47/1309] applying plugin filters..
- [13:54:47/1309] plugin data: fsckportal,2:
- [13:54:47/1309] base guid found, checking for user record
- [13:54:47/1309] article filters:
- [13:54:47/1309] initial score: 0
- [13:54:47/1309] user record FOUND
- [13:54:47/1309] RID: 28997, IID: 29081
- [13:54:47/1309] assigning labels...
- [13:54:47/1309] looking for enclosures...
- [13:54:47/1309] article enclosures:
- Array
- (
- )
- [13:54:47/1309] filtered article tags:
- Array
- (
- [0] => ad recycle bin
- [1] => disaster recovery
- [2] => kim nichols
- [3] => ad lds
- )
- [13:54:47/1309] article processed
- [13:54:47/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:ed2cd628-3721-4912-8a2c-6d88d3a62a2c
- [13:54:47/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:ed2cd628-3721-4912-8a2c-6d88d3a62a2c / SHA1:06f309669aefc9a3c581e7628869ef4d76f3f5bf
- [13:54:47/1309] orig date: 1357610280
- [13:54:47/1309] date 1357610280 [2013/01/08 01:58:00]
- [13:54:47/1309] title Intermittent Mail Sack: Must Remember to Write 2013 Edition
- [13:54:47/1309] link http://blogs.technet.com/b/askds/archive/2013/01/07/intermittent-mail-sack-must-remember-to-write-2013-edition.aspx
- [13:54:47/1309] detected language:
- [13:54:47/1309] author Jonathan Stephens, MSFT
- [13:54:47/1309] num_comments: 4
- [13:54:47/1309] looking for tags...
- [13:54:47/1309] tags found: other blogs,kerberos,adfs,dfsr,silly rabbit,jonathan stephens,windows server 2012,adam conkle,pki,mike stephens,windows server 2008 r2,passwords,windows 7,ntlm,windows 8,sysvol
- [13:54:47/1309] done collecting data.
- [13:54:47/1309] applying plugin filters..
- [13:54:47/1309] plugin data: fsckportal,2:
- [13:54:47/1309] base guid found, checking for user record
- [13:54:47/1309] article filters:
- [13:54:47/1309] initial score: 0
- [13:54:47/1309] user record FOUND
- [13:54:47/1309] RID: 28998, IID: 29082
- [13:54:47/1309] assigning labels...
- [13:54:47/1309] looking for enclosures...
- [13:54:47/1309] article enclosures:
- Array
- (
- )
- [13:54:47/1309] filtered article tags:
- Array
- (
- [0] => other blogs
- [1] => kerberos
- [2] => adfs
- [3] => dfsr
- [4] => silly rabbit
- [5] => jonathan stephens
- [6] => windows server 2012
- [7] => adam conkle
- [8] => pki
- [9] => mike stephens
- [10] => windows server 2008 r2
- [11] => passwords
- [12] => windows 7
- [13] => ntlm
- [14] => windows 8
- [15] => sysvol
- )
- [13:54:47/1309] article processed
- [13:54:47/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:bc16fd75-7570-406f-9dcb-54190775b521
- [13:54:47/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:bc16fd75-7570-406f-9dcb-54190775b521 / SHA1:30bd17d88d384d18a08783d630974c9752e5cf9a
- [13:54:47/1309] orig date: 1354030260
- [13:54:47/1309] date 1354030260 [2012/11/27 15:31:00]
- [13:54:47/1309] title Revenge of Y2K and Other News
- [13:54:47/1309] link http://blogs.technet.com/b/askds/archive/2012/11/27/revenge-of-y2k-and-other-news.aspx
- [13:54:47/1309] detected language:
- [13:54:47/1309] author Jonathan Stephens, MSFT
- [13:54:47/1309] num_comments: 7
- [13:54:47/1309] looking for tags...
- [13:54:47/1309] tags found: ned pyle,dfsr,jonathan stephens,time
- [13:54:47/1309] done collecting data.
- [13:54:47/1309] applying plugin filters..
- [13:54:47/1309] plugin data: fsckportal,2:
- [13:54:47/1309] base guid found, checking for user record
- [13:54:47/1309] article filters:
- [13:54:47/1309] initial score: 0
- [13:54:47/1309] user record FOUND
- [13:54:47/1309] RID: 28999, IID: 29083
- [13:54:47/1309] assigning labels...
- [13:54:47/1309] looking for enclosures...
- [13:54:47/1309] article enclosures:
- Array
- (
- )
- [13:54:47/1309] filtered article tags:
- Array
- (
- [0] => ned pyle
- [1] => dfsr
- [2] => jonathan stephens
- [3] => time
- )
- [13:54:47/1309] article processed
- [13:54:47/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:690ce27f-a683-43bd-a116-d33699a57cac
- [13:54:47/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:690ce27f-a683-43bd-a116-d33699a57cac / SHA1:b5ef93313afc3d347b4dbd851d8c7c404723dbb9
- [13:54:47/1309] orig date: 1352757840
- [13:54:47/1309] date 1352757840 [2012/11/12 22:04:00]
- [13:54:47/1309] title ADAMSync 101
- [13:54:47/1309] link http://blogs.technet.com/b/askds/archive/2012/11/12/adamsync-101.aspx
- [13:54:47/1309] detected language:
- [13:54:47/1309] author Jonathan Stephens, MSFT
- [13:54:47/1309] num_comments: 5
- [13:54:47/1309] looking for tags...
- [13:54:47/1309] tags found: kim nichols,ad lds
- [13:54:47/1309] done collecting data.
- [13:54:47/1309] applying plugin filters..
- [13:54:47/1309] plugin data: fsckportal,2:
- [13:54:47/1309] base guid found, checking for user record
- [13:54:47/1309] article filters:
- [13:54:47/1309] initial score: 0
- [13:54:47/1309] user record FOUND
- [13:54:47/1309] RID: 29000, IID: 29084
- [13:54:47/1309] assigning labels...
- [13:54:47/1309] looking for enclosures...
- [13:54:47/1309] article enclosures:
- Array
- (
- )
- [13:54:47/1309] filtered article tags:
- Array
- (
- [0] => kim nichols
- [1] => ad lds
- )
- [13:54:47/1309] article processed
- [13:54:47/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:f330b190-bc3c-45c6-8810-694b7cb4ceb1
- [13:54:47/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:f330b190-bc3c-45c6-8810-694b7cb4ceb1 / SHA1:2b9535954e588ed5779928fcae8dbd104a6a06be
- [13:54:47/1309] orig date: 1351705952
- [13:54:47/1309] date 1351705952 [2012/10/31 17:52:32]
- [13:54:47/1309] title ....And knowing is half the battle!
- [13:54:47/1309] link http://blogs.technet.com/b/askds/archive/2012/10/31/and-knowing-is-half-the-battle.aspx
- [13:54:47/1309] detected language:
- [13:54:47/1309] author Jonathan Stephens, MSFT
- [13:54:47/1309] num_comments: 0
- [13:54:47/1309] looking for tags...
- [13:54:47/1309] tags found: jonathan stephens,windows server 2012,hyper-v
- [13:54:47/1309] done collecting data.
- [13:54:47/1309] applying plugin filters..
- [13:54:47/1309] plugin data: fsckportal,2:
- [13:54:47/1309] base guid found, checking for user record
- [13:54:47/1309] article filters:
- [13:54:47/1309] initial score: 0
- [13:54:47/1309] user record FOUND
- [13:54:47/1309] RID: 29001, IID: 29085
- [13:54:47/1309] assigning labels...
- [13:54:47/1309] looking for enclosures...
- [13:54:47/1309] article enclosures:
- Array
- (
- )
- [13:54:47/1309] filtered article tags:
- Array
- (
- [0] => jonathan stephens
- [1] => windows server 2012
- [2] => hyper-v
- )
- [13:54:47/1309] article processed
- [13:54:47/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:38d82fa3-3ad9-4840-b533-7020eb26cd7d
- [13:54:47/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:38d82fa3-3ad9-4840-b533-7020eb26cd7d / SHA1:dbdb7bdc7de354b9be14a646567add556103a526
- [13:54:47/1309] orig date: 1351028040
- [13:54:47/1309] date 1351028040 [2012/10/23 21:34:00]
- [13:54:47/1309] title Digging a little deeper into Windows 8 Primary Computer
- [13:54:47/1309] link http://blogs.technet.com/b/askds/archive/2012/10/23/digging-a-little-deeper-into-windows-8-primary-computer.aspx
- [13:54:47/1309] detected language:
- [13:54:47/1309] author Jonathan Stephens, MSFT
- [13:54:47/1309] num_comments: 3
- [13:54:47/1309] looking for tags...
- [13:54:47/1309] tags found:
- [13:54:47/1309] done collecting data.
- [13:54:47/1309] applying plugin filters..
- [13:54:47/1309] plugin data: fsckportal,2:
- [13:54:47/1309] base guid found, checking for user record
- [13:54:47/1309] article filters:
- [13:54:47/1309] initial score: 0
- [13:54:47/1309] user record FOUND
- [13:54:47/1309] RID: 29002, IID: 29086
- [13:54:47/1309] assigning labels...
- [13:54:47/1309] looking for enclosures...
- [13:54:47/1309] article enclosures:
- Array
- (
- )
- [13:54:47/1309] filtered article tags:
- Array
- (
- )
- [13:54:47/1309] article processed
- [13:54:47/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:a34a1b1d-9d87-402c-857d-8cf77d28d000
- [13:54:47/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:a34a1b1d-9d87-402c-857d-8cf77d28d000 / SHA1:cea3a1ccaf40794d42d1b1660fb1d81122ae45df
- [13:54:47/1309] orig date: 1350075260
- [13:54:47/1309] date 1350075260 [2012/10/12 20:54:20]
- [13:54:47/1309] title So long and thanks for all the fish
- [13:54:47/1309] link http://blogs.technet.com/b/askds/archive/2012/10/12/so-long-and-thanks-for-all-the-fish.aspx
- [13:54:47/1309] detected language:
- [13:54:47/1309] author NedPyle [MSFT]
- [13:54:47/1309] num_comments: 30
- [13:54:47/1309] looking for tags...
- [13:54:47/1309] tags found: ned pyle,career,silly rabbit
- [13:54:47/1309] done collecting data.
- [13:54:47/1309] applying plugin filters..
- [13:54:47/1309] plugin data: fsckportal,2:
- [13:54:47/1309] base guid found, checking for user record
- [13:54:47/1309] article filters:
- [13:54:47/1309] initial score: 0
- [13:54:47/1309] user record FOUND
- [13:54:47/1309] RID: 29003, IID: 29087
- [13:54:47/1309] assigning labels...
- [13:54:47/1309] looking for enclosures...
- [13:54:47/1309] article enclosures:
- Array
- (
- )
- [13:54:47/1309] filtered article tags:
- Array
- (
- [0] => ned pyle
- [1] => career
- [2] => silly rabbit
- )
- [13:54:47/1309] article processed
- [13:54:47/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:3927f0de-1556-471a-a145-450ab6edb529
- [13:54:47/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:3927f0de-1556-471a-a145-450ab6edb529 / SHA1:6bf65826cb6d324ee4f37ab6603513f4b483e67b
- [13:54:47/1309] orig date: 1348764843
- [13:54:47/1309] date 1348764843 [2012/09/27 16:54:03]
- [13:54:47/1309] title AD FS 2.0 RelayState
- [13:54:47/1309] link http://blogs.technet.com/b/askds/archive/2012/09/27/ad-fs-2-0-relaystate.aspx
- [13:54:47/1309] detected language:
- [13:54:47/1309] author Jonathan Stephens, MSFT
- [13:54:47/1309] num_comments: 3
- [13:54:47/1309] looking for tags...
- [13:54:47/1309] tags found:
- [13:54:47/1309] done collecting data.
- [13:54:47/1309] applying plugin filters..
- [13:54:47/1309] plugin data: fsckportal,2:
- [13:54:47/1309] base guid found, checking for user record
- [13:54:47/1309] article filters:
- [13:54:47/1309] initial score: 0
- [13:54:47/1309] user record FOUND
- [13:54:47/1309] RID: 29004, IID: 29088
- [13:54:47/1309] assigning labels...
- [13:54:47/1309] looking for enclosures...
- [13:54:47/1309] article enclosures:
- Array
- (
- )
- [13:54:47/1309] filtered article tags:
- Array
- (
- )
- [13:54:47/1309] article processed
- [13:54:47/1309] f_guid d5e57398-b9ef-4490-9955-07cbb4e4a80d:3c77c1c2-ac92-408f-8086-b70d8118eb43
- [13:54:47/1309] guid 2,d5e57398-b9ef-4490-9955-07cbb4e4a80d:3c77c1c2-ac92-408f-8086-b70d8118eb43 / SHA1:645597770d9963209b5f65967044c1f73e7b1ba0
- [13:54:47/1309] orig date: 1348178940
- [13:54:47/1309] date 1348178940 [2012/09/20 22:09:00]
- [13:54:47/1309] title Windows Server 2012 Shell game
- [13:54:47/1309] link http://blogs.technet.com/b/askds/archive/2012/09/20/windows-server-2012-shell-game.aspx
- [13:54:47/1309] detected language:
- [13:54:47/1309] author MikeStephensMSFT
- [13:54:47/1309] num_comments: 10
- [13:54:47/1309] looking for tags...
- [13:54:47/1309] tags found: powershell,windows server 2012,mike stephens
- [13:54:47/1309] done collecting data.
- [13:54:47/1309] applying plugin filters..
- [13:54:47/1309] plugin data: fsckportal,2:
- [13:54:47/1309] base guid found, checking for user record
- [13:54:47/1309] article filters:
- [13:54:47/1309] initial score: 0
- [13:54:47/1309] user record FOUND
- [13:54:47/1309] RID: 29005, IID: 29089
- [13:54:47/1309] assigning labels...
- [13:54:47/1309] looking for enclosures...
- [13:54:47/1309] article enclosures:
- Array
- (
- )
- [13:54:47/1309] filtered article tags:
- Array
- (
- [0] => powershell
- [1] => windows server 2012
- [2] => mike stephens
- )
- [13:54:47/1309] article processed
- [13:54:47/1309] purging feed...
- [13:54:47/1309] Purged feed 17 (60): deleted 0 articles
- [13:54:47/1309] done
- <!-- CP[H0] 3.3937 seconds -->
- SELECT DISTINCT
- date_entered,
- guid,
- ttrss_entries.id,ttrss_entries.title,
- updated,
- label_cache,
- tag_cache,
- always_display_enclosures,
- site_url,
- note,
- num_comments,
- comments,
- int_id,
- uuid,
- lang,
- hide_images,
- unread,feed_id,marked,published,link,last_read,orig_feed_id,
- last_marked, last_published,
- content,
- author,score
- FROM
- ttrss_entries,ttrss_user_entries,ttrss_feeds
- WHERE
- ttrss_user_entries.feed_id = ttrss_feeds.id AND
- ttrss_user_entries.ref_id = ttrss_entries.id AND
- ttrss_user_entries.owner_uid = '2' AND
- unread = true AND
- feed_id = '17' ORDER BY score DESC, date_entered DESC, updated DESC
- LIMIT 30 OFFSET 0<!-- CP[H1] 0.0039 seconds -->
- <!-- CP[PS] 0.0007 seconds -->
- <!-- CP[PE] 0.0304 seconds -->
- <!-- CP[H2] 0.0000 seconds -->
- <!-- CP[05] 3.4287 seconds -->
- <!-- CP[30] 0.0000 seconds -->
- {"headlines":{"id":17,"is_cat":false,"content":"<div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31295\" orig-feed-id='17' onmouseover='postMouseIn(event, 31295)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31295)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31295)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31295)'><\/div><span id=\"RTITLE-31295\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31295);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/08\/22\/3515679.aspx\">Windows Azure Host Updates: Why, When, and How<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31295\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31295)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31295\" class=\"cdmExcerpt\">— \n\nWindows Azure\u2019s compute platform, which includes Web Roles, Worker Roles, and Virtual Machines, is based on machine virtualization. It\u2019s the deep access to the underlying operating system that makes Windows Azure\u2019s Platform-as-a-Service (PaaS) uniq…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tWed, Aug 22 2012 - 9:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31295, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31295);\"\n\t\t\t\t\t\tid=\"CICD-31295\"><div id=\"POSTNOTE-31295\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31295\"><span id=\"CENCW-31295\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>Windows Azure&rsquo;s compute platform, which includes Web Roles, Worker Roles, and Virtual Machines, is based on machine virtualization. It&rsquo;s the deep access to the underlying operating system that makes Windows Azure&rsquo;s Platform-as-a-Service (PaaS) uniquely...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/08\/22\/3515679.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3515679&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31295\"><a class=\"tag\" href=\"#\" onclick=\"viewfeed('windows azure')\">windows azure<\/a><\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31295)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/08\/22\/3515679.aspx#comments\">3 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31295)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31295)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31296\" orig-feed-id='17' onmouseover='postMouseIn(event, 31296)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31296)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31296)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31296)'><\/div><span id=\"RTITLE-31296\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31296);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/07\/02\/3506849.aspx\">The Case of the Veeerrry Slow Logons<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31296\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31296)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31296\" class=\"cdmExcerpt\">— \n\nThis case is my favorite kind of case, one where I use my own tools to solve a problem affecting me personally.\u00a0 The problem at the root of it is also one you might run into, especially if you travel, and demonstrates the use of some Process Monito…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tMon, Jul 02 2012 - 12:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31296, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31296);\"\n\t\t\t\t\t\tid=\"CICD-31296\"><div id=\"POSTNOTE-31296\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31296\"><span id=\"CENCW-31296\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>This case is my favorite kind of case, one where I use my own tools to solve a problem affecting me personally.&nbsp; The problem at the root of it is also one you might run into, especially if you travel, and demonstrates the use of some Process Monitor...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/07\/02\/3506849.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3506849&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31296\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31296)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/07\/02\/3506849.aspx#comments\">20 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31296)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31296)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31297\" orig-feed-id='17' onmouseover='postMouseIn(event, 31297)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31297)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31297)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31297)'><\/div><span id=\"RTITLE-31297\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31297);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/05\/08\/3496339.aspx\">Announcing Trojan Horse, the Novel!<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31297\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31297)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31297\" class=\"cdmExcerpt\">— \n\nMany of you have read Zero Day , my first novel. It\u2019s a cyberthriller that features Jeff Aiken and the beautiful Daryl Haugen, computer security experts that save the world from a devastating cyberattack. Its reviews and sales exceeded my expectati…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, May 08 2012 - 10:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31297, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31297);\"\n\t\t\t\t\t\tid=\"CICD-31297\"><div id=\"POSTNOTE-31297\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31297\"><span id=\"CENCW-31297\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>Many of you have read Zero Day , my first novel. It&rsquo;s a cyberthriller that features Jeff Aiken and the beautiful Daryl Haugen, computer security experts that save the world from a devastating cyberattack. Its reviews and sales exceeded my expectations...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/05\/08\/3496339.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3496339&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31297\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31297)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/05\/08\/3496339.aspx#comments\">4 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31297)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31297)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31298\" orig-feed-id='17' onmouseover='postMouseIn(event, 31298)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31298)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31298)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31298)'><\/div><span id=\"RTITLE-31298\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31298);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/01\/05\/3473797.aspx\">The Case of My Mom\u2019s Broken Microsoft Security Essentials Installation<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31298\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31298)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31298\" class=\"cdmExcerpt\">— \n\nAs a reader of this blog I suspect that you, like me, are the IT support staff for your family and friends. And I bet many of you performed system maintenance duties when you visited your family and friends during the recent holidays. Every time I\u2019…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tThu, Jan 05 2012 - 5:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31298, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31298);\"\n\t\t\t\t\t\tid=\"CICD-31298\"><div id=\"POSTNOTE-31298\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31298\"><span id=\"CENCW-31298\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>As a reader of this blog I suspect that you, like me, are the IT support staff for your family and friends. And I bet many of you performed system maintenance duties when you visited your family and friends during the recent holidays. Every time I&rsquo;m visiting...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/01\/05\/3473797.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3473797&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31298\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31298)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2012\/01\/05\/3473797.aspx#comments\">23 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31298)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31298)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31299\" orig-feed-id='17' onmouseover='postMouseIn(event, 31299)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31299)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31299)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31299)'><\/div><span id=\"RTITLE-31299\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31299);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/11\/29\/3467449.aspx\">The Case of the Installer Service Error<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31299\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31299)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31299\" class=\"cdmExcerpt\">— \n\nThis case unfolds with a network administrator charged with the rollout of the Microsoft Windows Intune client software on their network. Windows Intune is a cloud service that manages systems on a corporate network, keeping their software up to da…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, Nov 29 2011 - 6:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31299, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31299);\"\n\t\t\t\t\t\tid=\"CICD-31299\"><div id=\"POSTNOTE-31299\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31299\"><span id=\"CENCW-31299\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>This case unfolds with a network administrator charged with the rollout of the Microsoft Windows Intune client software on their network. Windows Intune is a cloud service that manages systems on a corporate network, keeping their software up to date...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/11\/29\/3467449.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3467449&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31299\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31299)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/11\/29\/3467449.aspx#comments\">5 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31299)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31299)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31300\" orig-feed-id='17' onmouseover='postMouseIn(event, 31300)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31300)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31300)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31300)'><\/div><span id=\"RTITLE-31300\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31300);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/11\/08\/3463572.aspx\">Fixing Disk Signature Collisions<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31300\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31300)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31300\" class=\"cdmExcerpt\">— \n\nDisk cloning has become common as IT professionals virtualize physical servers using tools like Sysinternals Disk2vhd and use a master virtual hard disk image as the base for copies created for virtual machine clones. In most cases, you can operate…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, Nov 08 2011 - 9:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31300, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31300);\"\n\t\t\t\t\t\tid=\"CICD-31300\"><div id=\"POSTNOTE-31300\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31300\"><span id=\"CENCW-31300\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>Disk cloning has become common as IT professionals virtualize physical servers using tools like Sysinternals Disk2vhd and use a master virtual hard disk image as the base for copies created for virtual machine clones. In most cases, you can operate with...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/11\/08\/3463572.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3463572&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31300\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31300)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/11\/08\/3463572.aspx#comments\">1 comment<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31300)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31300)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31301\" orig-feed-id='17' onmouseover='postMouseIn(event, 31301)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31301)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31301)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31301)'><\/div><span id=\"RTITLE-31301\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31301);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/10\/03\/3456790.aspx\">The Case of the Mysterious Reboots<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31301\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31301)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31301\" class=\"cdmExcerpt\">— \n\nThis case opens when a Sysinternals power user, who also works as a system administrator at a large corporation, had a friend report that their laptop had become unusable. Whenever the friend connected it to a network, their laptop would reboot. Th…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tMon, Oct 03 2011 - 8:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31301, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31301);\"\n\t\t\t\t\t\tid=\"CICD-31301\"><div id=\"POSTNOTE-31301\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31301\"><span id=\"CENCW-31301\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>This case opens when a Sysinternals power user, who also works as a system administrator at a large corporation, had a friend report that their laptop had become unusable. Whenever the friend connected it to a network, their laptop would reboot. The power...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/10\/03\/3456790.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3456790&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31301\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31301)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/10\/03\/3456790.aspx#comments\">6 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31301)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31301)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31302\" orig-feed-id='17' onmouseover='postMouseIn(event, 31302)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31302)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31302)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31302)'><\/div><span id=\"RTITLE-31302\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31302);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/08\/02\/3442328.aspx\">The Case of the Hung Game Launcher<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31302\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31302)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31302\" class=\"cdmExcerpt\">— \n\nI love the cases people send me where the Sysinternals tools have helped them successfully troubleshoot, but nothing is more satisfying than using them to solve my own cases. This case in particular was fun because, well, solving it helped me get b…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, Aug 02 2011 - 8:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31302, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31302);\"\n\t\t\t\t\t\tid=\"CICD-31302\"><div id=\"POSTNOTE-31302\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31302\"><span id=\"CENCW-31302\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>I love the cases people send me where the Sysinternals tools have helped them successfully troubleshoot, but nothing is more satisfying than using them to solve my own cases. This case in particular was fun because, well, solving it helped me get back...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/08\/02\/3442328.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3442328&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31302\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31302)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/08\/02\/3442328.aspx#comments\">8 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31302)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31302)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31303\" orig-feed-id='17' onmouseover='postMouseIn(event, 31303)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31303)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31303)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31303)'><\/div><span id=\"RTITLE-31303\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31303);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/07\/18\/3439288.aspx\">Troubleshooting with the New Sysinternals Administrator\u2019s Reference<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31303\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31303)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31303\" class=\"cdmExcerpt\">— \n\nAaron Margosis and I are thrilled to announce that the long awaited, and some say long overdue, official guide to the Sysinternals tools is now available ! I\u2019ve always had the idea of writing a book on the tools in the back of my mind, but it wasn\u2019…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tMon, Jul 18 2011 - 11:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31303, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31303);\"\n\t\t\t\t\t\tid=\"CICD-31303\"><div id=\"POSTNOTE-31303\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31303\"><span id=\"CENCW-31303\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>Aaron Margosis and I are thrilled to announce that the long awaited, and some say long overdue, official guide to the Sysinternals tools is now available ! I&rsquo;ve always had the idea of writing a book on the tools in the back of my mind, but it wasn&rsquo;t until...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/07\/18\/3439288.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3439288&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31303\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31303)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/07\/18\/3439288.aspx#comments\">5 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31303)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31303)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31304\" orig-feed-id='17' onmouseover='postMouseIn(event, 31304)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31304)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31304)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31304)'><\/div><span id=\"RTITLE-31304\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31304);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/05\/10\/3422212.aspx\">Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 3<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31304\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31304)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31304\" class=\"cdmExcerpt\">— \n\nIn the first post of this series , I used Autoruns , Process Explorer and VMMap to statically analyze a Stuxnet infection on Windows XP. That phase of the investigation revealed that Stuxnet infected multiple processes, launched infected processes …<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, May 10 2011 - 8:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31304, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31304);\"\n\t\t\t\t\t\tid=\"CICD-31304\"><div id=\"POSTNOTE-31304\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31304\"><span id=\"CENCW-31304\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>In the first post of this series , I used Autoruns , Process Explorer and VMMap to statically analyze a Stuxnet infection on Windows XP. That phase of the investigation revealed that Stuxnet infected multiple processes, launched infected processes that...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/05\/10\/3422212.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3422212&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31304\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31304)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/05\/10\/3422212.aspx#comments\">6 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31304)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31304)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31305\" orig-feed-id='17' onmouseover='postMouseIn(event, 31305)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31305)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31305)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31305)'><\/div><span id=\"RTITLE-31305\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31305);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/05\/03\/3426155.aspx\">The Zero Day Book Trailer<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31305\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31305)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31305\" class=\"cdmExcerpt\">— \n\nI just got back the finished version of the video trailer for my new cyber thriller Zero Day , which I think came out awesome! It\u2019s not hard to imagine what a Zero Day movie trailer would look like. Let me know what you think. Zero Day Book Trailer…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, May 03 2011 - 11:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31305, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31305);\"\n\t\t\t\t\t\tid=\"CICD-31305\"><div id=\"POSTNOTE-31305\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31305\"><span id=\"CENCW-31305\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>I just got back the finished version of the video trailer for my new cyber thriller Zero Day , which I think came out awesome! It&rsquo;s not hard to imagine what a Zero Day movie trailer would look like. Let me know what you think. Zero Day Book Trailer...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/05\/03\/3426155.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3426155&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31305\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31305)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/05\/03\/3426155.aspx#comments\">6 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31305)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31305)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31306\" orig-feed-id='17' onmouseover='postMouseIn(event, 31306)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31306)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31306)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31306)'><\/div><span id=\"RTITLE-31306\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31306);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/04\/20\/3422035.aspx\">Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 2<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31306\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31306)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31306\" class=\"cdmExcerpt\">— \n\nIn Part 1 I began my investigation of an example infection of the infamous Stuxnet worm with the Sysinternals tools. I used Process Explorer , Autoruns and VMMap for a post-infection survey of the system. Autoruns quickly revealed the heart of Stux…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tWed, Apr 20 2011 - 8:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31306, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31306);\"\n\t\t\t\t\t\tid=\"CICD-31306\"><div id=\"POSTNOTE-31306\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31306\"><span id=\"CENCW-31306\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>In Part 1 I began my investigation of an example infection of the infamous Stuxnet worm with the Sysinternals tools. I used Process Explorer , Autoruns and VMMap for a post-infection survey of the system. Autoruns quickly revealed the heart of Stuxnet...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/04\/20\/3422035.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3422035&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31306\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31306)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/04\/20\/3422035.aspx#comments\">22 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31306)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31306)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31307\" orig-feed-id='17' onmouseover='postMouseIn(event, 31307)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31307)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31307)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31307)'><\/div><span id=\"RTITLE-31307\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31307);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/30\/3416253.aspx\">Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 1<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31307\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31307)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31307\" class=\"cdmExcerpt\">— \n\nThough I didn\u2019t realize what I was seeing, Stuxnet first came to my attention on July 5 last summer when I received an email from a programmer that included a driver file, Mrxnet.sys, that they had identified as a rootkit. A driver that implements …<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tWed, Mar 30 2011 - 8:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31307, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31307);\"\n\t\t\t\t\t\tid=\"CICD-31307\"><div id=\"POSTNOTE-31307\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31307\"><span id=\"CENCW-31307\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>Though I didn&rsquo;t realize what I was seeing, Stuxnet first came to my attention on July 5 last summer when I received an email from a programmer that included a driver file, Mrxnet.sys, that they had identified as a rootkit. A driver that implements rootkit...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/30\/3416253.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3416253&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31307\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31307)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/30\/3416253.aspx#comments\">23 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31307)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31307)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31308\" orig-feed-id='17' onmouseover='postMouseIn(event, 31308)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31308)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31308)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31308)'><\/div><span id=\"RTITLE-31308\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31308);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/15\/3412393.aspx\">Zero Day is Here!<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31308\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31308)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31308\" class=\"cdmExcerpt\">— \n\nI\u2019m excited to announce that my first novel, a cyber thriller entitled Zero Day , is now available at all major book retailers! Zero Day is a book in the style of Crichton and Clancy, weaving technical fact into the story. If you like the Sysintern…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, Mar 15 2011 - 9:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31308, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31308);\"\n\t\t\t\t\t\tid=\"CICD-31308\"><div id=\"POSTNOTE-31308\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31308\"><span id=\"CENCW-31308\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>I&rsquo;m excited to announce that my first novel, a cyber thriller entitled Zero Day , is now available at all major book retailers! Zero Day is a book in the style of Crichton and Clancy, weaving technical fact into the story. If you like the Sysinternals...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/15\/3412393.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3412393&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31308\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31308)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/15\/3412393.aspx#comments\">53 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31308)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31308)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31309\" orig-feed-id='17' onmouseover='postMouseIn(event, 31309)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31309)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31309)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31309)'><\/div><span id=\"RTITLE-31309\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31309);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/14\/3412374.aspx\">The Case of the Unusable System<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31309\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31309)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31309\" class=\"cdmExcerpt\">— \n\nThis post continues in the malware hunting theme of the last couple of posts as Zero Day availability draws near (it\u2019s available tomorrow!). It began when a friend of mine at Microsoft told me that a neighbor of hers had a laptop that malware had r…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tMon, Mar 14 2011 - 9:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31309, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31309);\"\n\t\t\t\t\t\tid=\"CICD-31309\"><div id=\"POSTNOTE-31309\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31309\"><span id=\"CENCW-31309\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>This post continues in the malware hunting theme of the last couple of posts as Zero Day availability draws near (it&rsquo;s available tomorrow!). It began when a friend of mine at Microsoft told me that a neighbor of hers had a laptop that malware had rendered...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/14\/3412374.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3412374&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31309\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31309)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/14\/3412374.aspx#comments\">38 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31309)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31309)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31310\" orig-feed-id='17' onmouseover='postMouseIn(event, 31310)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31310)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31310)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31310)'><\/div><span id=\"RTITLE-31310\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31310);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/08\/3392087.aspx\">The Case of the Sysinternals-Blocking Malware<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31310\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31310)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31310\" class=\"cdmExcerpt\">— \n\nContinuing the theme of focusing on malware-related cases (last week I posted The Case of the Malicious Autostart ) as a lead up to the publication on March 15 of my novel Zero Day , this post describes one submitted to me by a user that took a uni…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, Mar 08 2011 - 9:36<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31310, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31310);\"\n\t\t\t\t\t\tid=\"CICD-31310\"><div id=\"POSTNOTE-31310\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31310\"><span id=\"CENCW-31310\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>Continuing the theme of focusing on malware-related cases (last week I posted The Case of the Malicious Autostart ) as a lead up to the publication on March 15 of my novel Zero Day , this post describes one submitted to me by a user that took a unique...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/08\/3392087.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3392087&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31310\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31310)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/03\/08\/3392087.aspx#comments\">27 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31310)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31310)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31311\" orig-feed-id='17' onmouseover='postMouseIn(event, 31311)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31311)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31311)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31311)'><\/div><span id=\"RTITLE-31311\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31311);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/02\/27\/3390475.aspx\">The Case of the Malicious Autostart<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31311\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31311)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31311\" class=\"cdmExcerpt\">— \n\nGiven that my novel, Zero Day , will be published in a few weeks and is based on malware\u2019s use as a weapon by terrorists, I thought it appropriate to post a case that deals with malware cleanup with the Sysinternals tools. This one starts when Micr…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tSun, Feb 27 2011 - 0:20<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31311, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31311);\"\n\t\t\t\t\t\tid=\"CICD-31311\"><div id=\"POSTNOTE-31311\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31311\"><span id=\"CENCW-31311\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>Given that my novel, Zero Day , will be published in a few weeks and is based on malware&rsquo;s use as a weapon by terrorists, I thought it appropriate to post a case that deals with malware cleanup with the Sysinternals tools. This one starts when Microsoft...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/02\/27\/3390475.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3390475&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31311\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31311)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/02\/27\/3390475.aspx#comments\">43 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31311)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31311)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31312\" orig-feed-id='17' onmouseover='postMouseIn(event, 31312)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31312)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31312)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31312)'><\/div><span id=\"RTITLE-31312\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31312);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/01\/29\/3374563.aspx\">The Cases of the Blue Screens: Finding Clues in a Crash Dump and on the Web<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31312\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31312)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31312\" class=\"cdmExcerpt\">— \n\nMy last couple of posts have looked at the lighter side of blue screens by showing you how to customize their colors. Windows kernel mode code reliability has gotten better and better every release such that many never experience the infamous BSOD.…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tSat, Jan 29 2011 - 15:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31312, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31312);\"\n\t\t\t\t\t\tid=\"CICD-31312\"><div id=\"POSTNOTE-31312\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31312\"><span id=\"CENCW-31312\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>My last couple of posts have looked at the lighter side of blue screens by showing you how to customize their colors. Windows kernel mode code reliability has gotten better and better every release such that many never experience the infamous BSOD. But...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/01\/29\/3374563.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3374563&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31312\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31312)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/01\/29\/3374563.aspx#comments\">21 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31312)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31312)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31313\" orig-feed-id='17' onmouseover='postMouseIn(event, 31313)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31313)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31313)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31313)'><\/div><span id=\"RTITLE-31313\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31313);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/01\/23\/3381075.aspx\">Announcing Zero Day, the Novel!<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31313\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31313)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31313\" class=\"cdmExcerpt\">— \n\nYou\u2019ve seen the news if you\u2019re my friend on Facebook , follow me on Twitter , or subscribe to the Sysinternals blog : I\u2019m proud to announce that my first novel, a cyberthriller entitled Zero Day , is due to be published by St. Martin\u2019s Press in mid…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tSun, Jan 23 2011 - 12:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31313, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31313);\"\n\t\t\t\t\t\tid=\"CICD-31313\"><div id=\"POSTNOTE-31313\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31313\"><span id=\"CENCW-31313\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>You&rsquo;ve seen the news if you&rsquo;re my friend on Facebook , follow me on Twitter , or subscribe to the Sysinternals blog : I&rsquo;m proud to announce that my first novel, a cyberthriller entitled Zero Day , is due to be published by St. Martin&rsquo;s Press in mid-March...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/01\/23\/3381075.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3381075&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31313\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31313)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/01\/23\/3381075.aspx#comments\">23 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31313)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31313)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31314\" orig-feed-id='17' onmouseover='postMouseIn(event, 31314)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31314)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31314)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31314)'><\/div><span id=\"RTITLE-31314\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31314);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/01\/11\/3379158.aspx\">\u201cBlue Screens\u201d in Designer Colors with One Click<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31314\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31314)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31314\" class=\"cdmExcerpt\">— \n\nMy last blog post described how to use local kernel debugging to change the colors of the Windows crash screen, also known as the \u201cblue screen of death\u201d. No doubt many of you thought that showing off a green screen of death or red screen of death t…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, Jan 11 2011 - 20:15<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31314, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31314);\"\n\t\t\t\t\t\tid=\"CICD-31314\"><div id=\"POSTNOTE-31314\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31314\"><span id=\"CENCW-31314\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>My last blog post described how to use local kernel debugging to change the colors of the Windows crash screen, also known as the &ldquo;blue screen of death&rdquo;. No doubt many of you thought that showing off a green screen of death or red screen of death to your...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/01\/11\/3379158.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3379158&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31314\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31314)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2011\/01\/11\/3379158.aspx#comments\">10 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31314)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31314)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31315\" orig-feed-id='17' onmouseover='postMouseIn(event, 31315)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31315)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31315)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31315)'><\/div><span id=\"RTITLE-31315\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31315);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2010\/12\/14\/3374820.aspx\">A Bluescreen By Any Other Color<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31315\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31315)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31315\" class=\"cdmExcerpt\">— \n\nNote: for an easier way to customize the blue screen\u2019s colors, see my next blog post, \u201c Blue Screens in Designer Colors with One Click \u201d. Seeing a bluescreen that\u2019s not blue is disconcerting, even for me, and based on the reaction of the TechEd aud…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, Dec 14 2010 - 16:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31315, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31315);\"\n\t\t\t\t\t\tid=\"CICD-31315\"><div id=\"POSTNOTE-31315\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31315\"><span id=\"CENCW-31315\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>Note: for an easier way to customize the blue screen&rsquo;s colors, see my next blog post, &ldquo; Blue Screens in Designer Colors with One Click &rdquo;. Seeing a bluescreen that&rsquo;s not blue is disconcerting, even for me, and based on the reaction of the TechEd audiences...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2010\/12\/14\/3374820.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3374820&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31315\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31315)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2010\/12\/14\/3374820.aspx#comments\">20 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31315)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31315)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31316\" orig-feed-id='17' onmouseover='postMouseIn(event, 31316)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31316)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31316)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31316)'><\/div><span id=\"RTITLE-31316\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31316);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2010\/12\/07\/3373406.aspx\">The Case of the Slow Project File Opens<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31316\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31316)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31316\" class=\"cdmExcerpt\">— \n\nIf you\u2019ve seen one of my Case of the Unexplained presentations (like the one I delivered at TechEd Europe last month that\u2019s posted for on-demand viewing ), you know that I emphasize how thread stacks are a powerful troubleshooting tool for diagnosi…<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tTue, Dec 07 2010 - 12:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31316, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31316);\"\n\t\t\t\t\t\tid=\"CICD-31316\"><div id=\"POSTNOTE-31316\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31316\"><span id=\"CENCW-31316\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>If you&rsquo;ve seen one of my Case of the Unexplained presentations (like the one I delivered at TechEd Europe last month that&rsquo;s posted for on-demand viewing ), you know that I emphasize how thread stacks are a powerful troubleshooting tool for diagnosing...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2010\/12\/07\/3373406.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3373406&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31316\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31316)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2010\/12\/07\/3373406.aspx#comments\">21 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31316)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31316)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div><div class=\"cdm expanded Unread\"\n\t\t\t\t\t\tid=\"RROW-31317\" orig-feed-id='17' onmouseover='postMouseIn(event, 31317)'\n\t\t\t\t\t\tonmouseout='postMouseOut(31317)'><div class=\"cdmHeader\" style=\"\"><div style=\"vertical-align : middle\"><input dojoType=\"dijit.form.CheckBox\"\n\t\t\t\t\t\t\ttype=\"checkbox\" onclick=\"toggleSelectRow2(this, false, true)\"\n\t\t\t\t\t\t\tclass='rchk'><img\n\t\t\t\t\t\tsrc=\"images\/mark_unset.png\"\n\t\t\t\t\t\tclass=\"markedPic\" alt=\"Star article\"\n\t\t\t\t\t\tonclick='toggleMark(31317)'><img src=\"images\/pub_unset.png\"\n\t\t\t\t\t\tclass=\"pubPic\"\n\t\t\t\t\t\talt=\"Publish article\" onclick='togglePub(31317)'><\/div><span id=\"RTITLE-31317\"\n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31317);\"\n\t\t\t\t\t\tclass=\"titleWrap \">\n\t\t\t\t\t\t<a class=\"title \"\n\t\t\t\t\t\ttarget=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2010\/10\/14\/3360991.aspx\">LiveKd for Virtual Machine Debugging<\/a> <span class=\"author\"> — Mark Russinovich<\/span><span class=\"HLLCTR-31317\"><\/span><span class='collapseBtn' style='display : none'>\n\t\t\t\t\t\t<img src=\"images\/collapse.png\" onclick=\"cdmCollapseArticle(event, 31317)\"\n\t\t\t\t\t\ttitle=\"Collapse article\"\/><\/span><span style=\"display : none\" id=\"CEXC-31317\" class=\"cdmExcerpt\">— \n\nWhen Dave Solomon and I were writing the 3 rd edition of the Windows Internals book series Inside Windows 2000 back in 1999, we pondered if there was a way to enable kernel debuggers like Windbg and Kd (part of the free Debugging Tools for Windows …<\/span><\/span><span class='updated' title='Imported at 1:50'>\n\t\t\t\t\t\tThu, Oct 14 2010 - 7:00<\/span><div class='scoreWrap' style=\"vertical-align : middle\"><img class='hlScorePic' score='0' onclick='changeScore(31317, this)' src=\"images\/score_neutral.png\"\n\t\t\t\t\ttitle=\"0\"><\/div><\/div><div class=\"cdmContent\" \n\t\t\t\t\t\tonclick=\"return cdmClicked(event, 31317);\"\n\t\t\t\t\t\tid=\"CICD-31317\"><div id=\"POSTNOTE-31317\"><\/div><div class=\"cdmContentInner\" lang=\"en\"><span id=\"CWRAP-31317\"><span id=\"CENCW-31317\" style=\"display : none\"><html><?xml version="1.0" encoding="utf-8" standalone="yes"?><body><p>When Dave Solomon and I were writing the 3 rd edition of the Windows Internals book series Inside Windows 2000 back in 1999, we pondered if there was a way to enable kernel debuggers like Windbg and Kd (part of the free Debugging Tools for Windows package...(<a href="http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2010\/10\/14\/3360991.aspx" target="_blank">read more<\/a>)<img src="http:\/\/blogs.technet.com\/aggbug.aspx?PostID=3360991&amp;AppID=5236&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"><\/p><\/body><\/html>\n<\/span.<\/span><\/div><div class=\"cdmFooter\"><img src='images\/tag.png' alt='Tags' title='Tags'>\n\t\t\t\t\t\t<span id=\"ATSTR-31317\">no tags<\/span>\n\t\t\t\t\t\t<a title=\"Edit tags for this article\"\n\t\t\t\t\t\thref=\"#\" onclick=\"editArticleTags(31317)\">(+)<\/a> (<a class=\"postComments\"\n\t\t\t\t\t\t\ttarget='_blank' href=\"http:\/\/blogs.technet.com\/b\/markrussinovich\/archive\/2010\/10\/14\/3360991.aspx#comments\">11 comments<\/a>)<div style=\"float : right\"><img src=\"plugins\/note\/note.png\"\n\t\t\tstyle=\"cursor : pointer\" style=\"cursor : pointer\"\n\t\t\tonclick=\"editArticleNote(31317)\"\n\t\t\tclass='tagsPic' title='Edit article note'><img src=\"plugins\/embed_original\/button.png\"\n\t\t\tclass='tagsPic' style=\"cursor : pointer\"\n\t\t\tonclick=\"embedOriginalArticle(31317)\"\n\t\t\ttitle='Toggle embed original'><\/div><\/div><\/div><hr\/><\/div>","toolbar":"<span class='r'><span id='selected_prompt'><\/span><span id='feed_title' class=''><a title=\"Last updated: 13:54\" target=\"_blank\" href=\"http:\/\/blogs.technet.com\/b\/askds\/default.aspx\">Ask the Directory Services Tea…<\/a><\/span>\n\t\t\t<a href=\"#\"\n\t\t\t\ttitle=\"View as RSS feed\"\n\t\t\t\tonclick=\"displayDlg('View as RSS','generatedFeed', '17::http:\/\/tt-rss.deleteddomain.com\/public.php?op=rss&id=17')\">\n\t\t\t\t<img class=\"noborder\" style=\"vertical-align : middle\" src=\"images\/pub_set.png\"><\/a><\/span>Select:\n\t\t\t<a href=\"#\" onclick=\"selectArticles('all')\">All<\/a>,\n\t\t\t<a href=\"#\" onclick=\"selectArticles('unread')\">Unread<\/a>,\n\t\t\t<a href=\"#\" onclick=\"selectArticles('invert')\">Invert<\/a>,\n\t\t\t<a href=\"#\" onclick=\"selectArticles('none')\">None<\/a><\/li> <select dojoType=\"dijit.form.Select\"\n\t\t\tonchange=\"headlineActionsChange(this)\"><option value=\"false\">More...<\/option><option value=\"0\" disabled=\"1\">Selection toggle:<\/option><option value=\"selectionToggleUnread()\">Unread<\/option>\n\t\t\t<option value=\"selectionToggleMarked()\">Starred<\/option>\n\t\t\t<option value=\"selectionTogglePublished()\">Published<\/option><option value=\"0\" disabled=\"1\">Selection:<\/option><option value=\"catchupSelection()\">Mark as read<\/option><option value=\"setSelectionScore()\">Set score<\/option><option value=\"archiveSelection()\">Archive<\/option><option value=\"0\" disabled=\"1\">Feed:<\/option><option value=\"displayDlg('View as RSS','generatedFeed', '17::http:\/\/tt-rss.deleteddomain.com\/public.php?op=rss&id=17')\">View as RSS<\/option><\/select>"},"headlines-info":{"count":23,"vgroup_last_feed":"","disable_cache":false},"runtime-info":{"max_feed_id":122,"num_feeds":100,"last_article_id":"31496","cdm_expanded":true,"dep_ts":1388199579,"reload_on_ts_change":true,"daemon_is_running":1}}
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement