Channel 9 - Entries tagged with Tech Support Microsoft http://mschnlnine.vo.llnwd.net/d1/Dev/App_Themes/C9/images/feedimage.png Channel 9 - Entries tagged with Tech Support http://channel9.msdn.com/Tags/tech+support Channel 9 keeps you up to date with the latest news and behind the scenes info from Microsoft that developers love to keep up with. From LINQ to SilverLight – Watch videos and hear about all the cool technologies coming and the people behind them. http://channel9.msdn.com/Tags/tech+support en Tue, 21 May 2013 21:36:43 GMT Tue, 21 May 2013 21:36:43 GMT Rev9 95 4 25 Defrag: .hlp files on Win8, Cutting PC Power, Moving PageFile Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[01:17] - Network card getting a red X. 
[04:22] - Can't read .hlp files on Windows 7. [link]
[05:26] - What actually goes on with automatic maintenance. [link]
[08:08] - Is it a good idea to move pagefile to another drive. 
[09:20] - Perils of just cutting power to turn off a PC. 
[14:22] - Admin account not acting as an admin account. 
[18:07] - Using higher res icons for folders.  
[21:27] - Thumbnails in a directory are not filling in. 
[00:00] - Pick of the Week: NettleBox virtual holography. [link]

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-hlp-files-on-Win8-Cutting-PC-Power-Moving-PageFile Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[01:17] - Network card getting a red X. [04:22] - Can't read .hlp files on Windows 7. [link][05:26] - What actually goes on with automatic maintenance. [link][08:08] - Is it a good idea to move pagefile to another drive. [09:20] - Perils of just cutting power to turn off a PC. [14:22] - Admin account not acting as an admin account. [18:07] - Using higher res icons for folders.  [21:27] - Thumbnails in a directory are not filling in. [00:00] - Pick of the Week: NettleBox virtual holography. [link] 1670 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-hlp-files-on-Win8-Cutting-PC-Power-Moving-PageFile Wed, 15 May 2013 18:50:19 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-hlp-files-on-Win8-Cutting-PC-Power-Moving-PageFile Larry Larsen, Rhymes With Orange Larry Larsen, Rhymes With Orange 1 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-hlp-files-on-Win8-Cutting-PC-Power-Moving-PageFile/RSS Tech Support Defrag: Explorer Won't Run, Network Limited Access, Touch PC's We Like Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[00:20] - Explorer won't run, clicking icon or Windows+E shortcut.
[03:38] - Network icon in SysTray showing Limited Access.
[08:35] - Getting bug check with Win8, possibly from HyperV.
[10:25] - How to rename user profile and retain settings.
[12:10] - How to browse drives that are offline.
[14:04] - What does the "Full Range" speaker setting do in Windows.
[16:36] - And now a message from our spammers.
[17:47] - Pick of the Week: What are some of the touch laptops we like? [link] [link] [link] [link]

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Explorer-Wont-Run-Network-Limited-Access-Touch-PCs-We-Like Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[00:20] - Explorer won't run, clicking icon or Windows+E shortcut. [03:38] - Network icon in SysTray showing Limited Access. [08:35] - Getting bug check with Win8, possibly from HyperV. [10:25] - How to rename user profile and retain settings. [12:10] - How to browse drives that are offline. [14:04] - What does the "Full Range" speaker setting do in Windows. [16:36] - And now a message from our spammers. [17:47] - Pick of the Week: What are some of the touch laptops we like? [link] [link] [link] [link] 1594 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Explorer-Wont-Run-Network-Limited-Access-Touch-PCs-We-Like Wed, 08 May 2013 20:55:57 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Explorer-Wont-Run-Network-Limited-Access-Touch-PCs-We-Like Larry Larsen, Rhymes With Orange Larry Larsen, Rhymes With Orange 7 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Explorer-Wont-Run-Network-Limited-Access-Touch-PCs-We-Like/RSS Tech Support Defrag: All Cores Vs. Parked Cores, Split-Tunnel VPN, Boosting Volume Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[00:15] - Remote software not working over existing network. [link]
[11:07] - Modern apps not working when clicking tiles. 
[15:53] - Running PC on all cores vs parking cores. 
[16:50] - Running multi-mon mix of portrait/landscape.
[19:03] - What does MSE see. 
[20:30] - How to reset a camera that no longer triggers auto-play. 
[21:26] - Splitting traffic over network and VPN. 
[22:36] - How to increase volume on laptop or headphones. 
[26:24] - Adding files to a rar archive without unhiding it. 
[27:43] - Running a task for testing. 
[28:38] - Pick of the Week: Depth Sensor Shootout [link]

 

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-All-Cores-Vs-Parked-Cores-Split-Tunnel-VPN-Boosting-Volume Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[00:15] - Remote software not working over existing network. [link][11:07] - Modern apps not working when clicking tiles. [15:53] - Running PC on all cores vs parking cores. [16:50] - Running multi-mon mix of portrait/landscape.[19:03] - What does MSE see. [20:30] - How to reset a camera that no longer triggers auto-play. [21:26] - Splitting traffic over network and VPN. [22:36] - How to increase volume on laptop or headphones. [26:24] - Adding files to a rar archive without unhiding it. [27:43] - Running a task for testing. [28:38] - Pick of the Week: Depth Sensor Shootout [link]   1877 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-All-Cores-Vs-Parked-Cores-Split-Tunnel-VPN-Boosting-Volume Wed, 01 May 2013 23:43:33 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-All-Cores-Vs-Parked-Cores-Split-Tunnel-VPN-Boosting-Volume Larry Larsen, Rhymes With Orange Larry Larsen, Rhymes With Orange 4 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-All-Cores-Vs-Parked-Cores-Split-Tunnel-VPN-Boosting-Volume/RSS Tech Support Defrag: Keyboard Fail, Search Auto-Suggest, Wider CMD Window Microsoft tech troubleshooter extraordinaire Chad Beeder (filling in for Gov who will be back next week) and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[00:24] - DPC Watchdog update from previous show. [link]
[05:55] - Keyboard missing some keypresses. 
[07:52] - Looking at browser history. 
[10:28] - Outlook showing friends birthdays but not own. 
[11:32] - MSTSC behavior not consistent. 
[12:45] - Sending us a Proc Dump. [link] 
[15:00] - Search no longer showing auto-suggest. 
[17:12] - Task bar on wrong screen after detaching. 
[19:12] - How to restart Task Bar without rebooting. 
[20:33] - Windows Store app fails on update. 
[21:47] - Screen doesn't paint in IE sometimes until scroll. 
[22:53] - How to make CMD window wider. 
[24:49] - Suggesting on re-enabling PIN logon. 
[25:50] - How to MKLink to share so web can save files to it. 
[29:05] - Pick of the Week: Auto-hiding Task Bar based on tablet orientation. [link]

 

 

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Keyboard-Fail-Search-Auto-Suggest-Wider-CMD-Window Microsoft tech troubleshooter extraordinaire Chad Beeder (filling in for Gov who will be back next week) and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[00:24] - DPC Watchdog update from previous show. [link][05:55] - Keyboard missing some keypresses. [07:52] - Looking at browser history. [10:28] - Outlook showing friends birthdays but not own. [11:32] - MSTSC behavior not consistent. [12:45] - Sending us a Proc Dump. [link] [15:00] - Search no longer showing auto-suggest. [17:12] - Task bar on wrong screen after detaching. [19:12] - How to restart Task Bar without rebooting. [20:33] - Windows Store app fails on update. [21:47] - Screen doesn't paint in IE sometimes until scroll. [22:53] - How to make CMD window wider. [24:49] - Suggesting on re-enabling PIN logon. [25:50] - How to MKLink to share so web can save files to it. [29:05] - Pick of the Week: Auto-hiding Task Bar based on tablet orientation. [link]     1873 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Keyboard-Fail-Search-Auto-Suggest-Wider-CMD-Window Fri, 26 Apr 2013 22:55:18 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Keyboard-Fail-Search-Auto-Suggest-Wider-CMD-Window Larry Larsen, Chad Beeder Larry Larsen, Chad Beeder 8 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Keyboard-Fail-Search-Auto-Suggest-Wider-CMD-Window/RSS Tech Support Defrag: Uninstall leftovers, IE Crash, Watchdog Bugcheck Microsoft tech troubleshooter extraordinaire Andrew Richards (filling in for Gov who will be back next week) and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[00:18] - Just install 7-Zip. 
[01:20] - 3D things Siodmy would print. 
[03:22] - Time consuming reinstall of OS. 
[05:42] - Chad Beeder update on monitor turning off after 1 minute at lock screen. [link]
[06:40] - "Leftovers" after uninstalling legacy apps as related to Windows Store apps. 
[14:16] - IE crashing but unsure how to get good dump from the right process. 
[20:57] - PDF displays every time user starts PC. 
[22:00] - Renaming Microsoft account. [link]
[23:53] - Getting bugcheck DPC_Watchdog_Violation 0x00000133. 
[28:30] - Where is the temporary profile stored on Windows 7. 
[29:50] - Pick of the Week 1: Developing an app with VS 3D Starter kit. [link]
[30:36] - Pick of the Week 2: Unity 3D conference sessions are available for download. [link]
[31:30] - Pick of the Week 3: Movi M10. [link]

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Uninstall-leftovers-IE-Crash-Watchdog-Bugcheck Microsoft tech troubleshooter extraordinaire Andrew Richards (filling in for Gov who will be back next week) and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[00:18] - Just install 7-Zip. [01:20] - 3D things Siodmy would print. [03:22] - Time consuming reinstall of OS. [05:42] - Chad Beeder update on monitor turning off after 1 minute at lock screen. [link][06:40] - "Leftovers" after uninstalling legacy apps as related to Windows Store apps. [14:16] - IE crashing but unsure how to get good dump from the right process. [20:57] - PDF displays every time user starts PC. [22:00] - Renaming Microsoft account. [link][23:53] - Getting bugcheck DPC_Watchdog_Violation 0x00000133. [28:30] - Where is the temporary profile stored on Windows 7. [29:50] - Pick of the Week 1: Developing an app with VS 3D Starter kit. [link][30:36] - Pick of the Week 2: Unity 3D conference sessions are available for download. [link][31:30] - Pick of the Week 3: Movi M10. [link] 2049 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Uninstall-leftovers-IE-Crash-Watchdog-Bugcheck Wed, 17 Apr 2013 20:41:23 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Uninstall-leftovers-IE-Crash-Watchdog-Bugcheck Larry Larsen Larry Larsen 11 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Uninstall-leftovers-IE-Crash-Watchdog-Bugcheck/RSS Tech Support Defrag: Portable Office, Driver Bugchecks, C9 Win8 App Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[01:20] - Way to install a portable version of office on a USB drive. [link]
[03:25] - Norton AV and action center not cooperating. 
[04:50] - Logitech setpoint not letting user configure buttons. 
[07:02] - User gets SESSION_HAS_VALID_POOL_ON_EXIT(ab) bugcheck. [links 1, 2, 3]
[10:05] - BluRay drive causing driver power state failure bugcheck. 
[14:07] - How to set drive letter for removable drive. 
[15:54] - Seeing most recent updated folder. 
[16:30] - Differences between Program Files and Program Files (x86). 
[18:45] - IE was running slow, IT person fixed it, now has "black eye". 
[20:13] - Changing the speed of a laptop touchpad without changing speed of mouse. 
[21:19] - Is it safe to delete appdata/local/temp? 
[23:29] - Encrypting a drive with NTFS junctions. 
[24:25] - Pick of the Week: Free 3D Studio Max tutorials. [link]
[25:55] - Pick of the Week: Channel 9 app in Windows Store. [link]

 

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Portable-Office-Driver-Bugchecks-C9-Win8-App Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[01:20] - Way to install a portable version of office on a USB drive. [link][03:25] - Norton AV and action center not cooperating. [04:50] - Logitech setpoint not letting user configure buttons. [07:02] - User gets SESSION_HAS_VALID_POOL_ON_EXIT(ab) bugcheck. [links 1, 2, 3][10:05] - BluRay drive causing driver power state failure bugcheck. [14:07] - How to set drive letter for removable drive. [15:54] - Seeing most recent updated folder. [16:30] - Differences between Program Files and Program Files (x86). [18:45] - IE was running slow, IT person fixed it, now has "black eye". [20:13] - Changing the speed of a laptop touchpad without changing speed of mouse. [21:19] - Is it safe to delete appdata/local/temp? [23:29] - Encrypting a drive with NTFS junctions. [24:25] - Pick of the Week: Free 3D Studio Max tutorials. [link][25:55] - Pick of the Week: Channel 9 app in Windows Store. [link]   1628 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Portable-Office-Driver-Bugchecks-C9-Win8-App Wed, 03 Apr 2013 18:17:55 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Portable-Office-Driver-Bugchecks-C9-Win8-App Larry Larsen, Rhymes With Orange Larry Larsen, Rhymes With Orange 12 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Portable-Office-Driver-Bugchecks-C9-Win8-App/RSS Tech Support Defrag: VS Compile prob, Moving AppData, Versioning AX Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[00:38] - VS C# project release version won't run but debug version does. 
[02:31] - KB2760600 OneNote 2010 update continuously tries to install. [link]
[03:48] - IE9 and IE10 hangs to white screen and crashes. 
[07:57] - Display sleep time out doesn't persist on lock screen. 
[09:22] - IE process hangs using many tabs with Flash content. 
[11:10] - How to see version number on a .ax file. 
[11:55] - How to change systray date from yyyy/mm/dd to mm/dd/yyyy. 
[12:46] - Can drivers other than display be installed without uninstalling old ones? 
[14:00] - Dealing with malware if rootkit tools can't find it.  
[15:53] - Is there a way to move AppData from primary to another drive? 
[16:58] - What is the Windows Security Button and where is it located? 
[18:45] - Way to minimize apps when computer locks. [link]
[20:47] - How to remote to machine where it isn't enabled. [link]
[23:50] - Pick of the Week: Kinect update. [link]
[00:00] - Pick of the Week: Win8 Handbook. [link]
[00:00] - Pick of the Week: MS MVP on Surface Pro as main PC. [link]


]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-VS-Compile-prob-Moving-AppData-Versioning-AX Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[00:38] - VS C# project release version won't run but debug version does. [02:31] - KB2760600 OneNote 2010 update continuously tries to install. [link][03:48] - IE9 and IE10 hangs to white screen and crashes. [07:57] - Display sleep time out doesn't persist on lock screen. [09:22] - IE process hangs using many tabs with Flash content. [11:10] - How to see version number on a .ax file. [11:55] - How to change systray date from yyyy/mm/dd to mm/dd/yyyy. [12:46] - Can drivers other than display be installed without uninstalling old ones? [14:00] - Dealing with malware if rootkit tools can't find it.  [15:53] - Is there a way to move AppData from primary to another drive? [16:58] - What is the Windows Security Button and where is it located? [18:45] - Way to minimize apps when computer locks. [link][20:47] - How to remote to machine where it isn't enabled. [link][23:50] - Pick of the Week: Kinect update. [link][00:00] - Pick of the Week: Win8 Handbook. [link][00:00] - Pick of the Week: MS MVP on Surface Pro as main PC. [link] 1867 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-VS-Compile-prob-Moving-AppData-Versioning-AX Wed, 27 Mar 2013 22:06:53 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-VS-Compile-prob-Moving-AppData-Versioning-AX Larry Larsen, Rhymes With Orange Larry Larsen, Rhymes With Orange 13 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-VS-Compile-prob-Moving-AppData-Versioning-AX/RSS Tech Support Defrag: Disabling Hibernation, Superfetch, onboard VGA Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[02:05] - Command line for disabling hibernation. 
[02:22] - Problem with Sysinternals util replicating on Skydrive. 
[04:15] - Setting display dim vs lock period. 
[05:50] - Superfetch on Windows 8 vs. Windows 7. 
[07:07] - Iexplorer.exe hangs until process is killed. 
[08:42] - Can't partition drive less than 400GB. 
[10:00] - Can I use VGA on MB for third monitor along with video card. 
[13:01] - Doing a system restore from Windows 7 to Windows 8. 
[15:28] - Pick of the Week: Mind Control for Gaming. [link]
[18:50] - Pick of the Week: Viewing Folder Sizes in Windows Explorer. [link]

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Disabling-Hibernation-Superfetch-onboard-VGA Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[02:05] - Command line for disabling hibernation. [02:22] - Problem with Sysinternals util replicating on Skydrive. [04:15] - Setting display dim vs lock period. [05:50] - Superfetch on Windows 8 vs. Windows 7. [07:07] - Iexplorer.exe hangs until process is killed. [08:42] - Can't partition drive less than 400GB. [10:00] - Can I use VGA on MB for third monitor along with video card. [13:01] - Doing a system restore from Windows 7 to Windows 8. [15:28] - Pick of the Week: Mind Control for Gaming. [link][18:50] - Pick of the Week: Viewing Folder Sizes in Windows Explorer. [link] 1282 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Disabling-Hibernation-Superfetch-onboard-VGA Wed, 13 Mar 2013 22:50:41 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Disabling-Hibernation-Superfetch-onboard-VGA Larry Larsen, Rhymes With Orange Larry Larsen, Rhymes With Orange 13 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Disabling-Hibernation-Superfetch-onboard-VGA/RSS Tech Support Defrag: DVDs sans Sound, Disable Snapping, Watch Mon for Folders Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[00:33] - BSOD on Windows 8 with driver power state failure. 
[02:36] - Windows snapping with voice command. [link]
[04:09] - After a Win 8 upgrade, recorded TV and DVD's have no sound. 
[07:00] - Making a WMC add on. 
[08:13] - Disabling windows snapping.  
[09:03] - Uninstalled NVidia driver, Windows installed standard driver. 
[11:42] - Removing recovery partition in Windows 8.
[13:20] - Pick of the week: Watch monitor for local and network drives. [link]



]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-DVDs-sans-Sound-Disable-Snapping-Watch-Mon-for-Folders Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[00:33] - BSOD on Windows 8 with driver power state failure. [02:36] - Windows snapping with voice command. [link][04:09] - After a Win 8 upgrade, recorded TV and DVD's have no sound. [07:00] - Making a WMC add on. [08:13] - Disabling windows snapping.  [09:03] - Uninstalled NVidia driver, Windows installed standard driver. [11:42] - Removing recovery partition in Windows 8.[13:20] - Pick of the week: Watch monitor for local and network drives. [link] 975 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-DVDs-sans-Sound-Disable-Snapping-Watch-Mon-for-Folders Wed, 06 Mar 2013 22:41:19 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-DVDs-sans-Sound-Disable-Snapping-Watch-Mon-for-Folders Larry Larsen, Rhymes With Orange Larry Larsen, Rhymes With Orange 4 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-DVDs-sans-Sound-Disable-Snapping-Watch-Mon-for-Folders/RSS Tech Support Defrag Tools: #30 - MCTS Windows Internals In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen review MCP exam 70-660 - MCTS Windows Internals.

Resources:
MCTS Windows Internals
Windows Internals Books
Kernrate
Poolmon
UMDH

Timeline:
[01:42] - Summary of the exam
[03:00] - Windows Internals books
[05:50] - Identifying Architectural Components
[14:17] - Designing Solutions
[21:34] - Monitoring Windows
[29:25] - Analyzing User Mode
[41:39] - Analyzing Kernel Mode
[45:17] - Debugging Windows
[48:32] - Good Luck!

]]> http://channel9.msdn.com/Shows/Defrag-Tools/DefragTools30 In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen review MCP exam 70-660 - MCTS Windows Internals. Resources:MCTS Windows InternalsWindows Internals BooksKernratePoolmonUMDH Timeline:[01:42] - Summary of the exam[03:00] - Windows Internals books[05:50] - Identifying Architectural Components[14:17] - Designing Solutions[21:34] - Monitoring Windows[29:25] - Analyzing User Mode[41:39] - Analyzing Kernel Mode[45:17] - Debugging Windows[48:32] - Good Luck! 2940 http://channel9.msdn.com/Shows/Defrag-Tools/DefragTools30 Mon, 04 Mar 2013 23:00:00 GMT http://channel9.msdn.com/Shows/Defrag-Tools/DefragTools30 Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 6 http://channel9.msdn.com/Shows/Defrag-Tools/DefragTools30/RSS Debugging Tech Support Defrag Tools: #29 - WinDbg - ETW Logging In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the Event Tracing for Windows (ETW) buffers in a kernel mode dump or live session. The ETW buffers can be extracted from the dump and viewed using the Windows Performance Toolkit (WPT). The buffers give you insight in to what has beem happening recently on the computer.

We use these commands:

  • !wmitrace.strdump
  • !wmitrace.logsave 0xNN c:\example.etl
  • !wmitrace.eventlogdump 0xNN
  • !wmitrace.help

Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution. This episode shows how install the Windows Performance Toolkit.

Timeline:
[00:00] - Event Tracing for Windows (ETW)
[02:18] - Windows Performance Toolkit (WPT)
[03:48] - !wmitrace.strdump
[04:53] - !wmitrace.logsave 0xNN c:\example.etl
[05:50] - Windows Performance Analyzer (WPA) & xPerfView
[07:57] - _NT_SYMCACHE_PATH
[10:24] - !wmitrace.eventlogdump 0xNN
[12:16] - Used for logging and performance by many teams
[15:35] - Private PDBs are needed to decode some entries
[20:00] - Windows Performance Recorder (wprui.exe)
[20:35] - Disable Paging Executive
[23:40] - WPR adds the NT Kernel Logger
[24:19] - 10min run-through of the data collected with the General, CPU and Disk providers

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-29-WinDbg-ETW-Logging In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer. This installment goes over the Event Tracing for Windows (ETW) buffers in a kernel mode dump or live session. The ETW buffers can be extracted from the dump and viewed using the Windows Performance Toolkit (WPT). The buffers give you insight in to what has beem happening recently on the computer. We use these commands: !wmitrace.strdump !wmitrace.logsave 0xNN c:\example.etl !wmitrace.eventlogdump 0xNN !wmitrace.help Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution. This episode shows how install the Windows Performance Toolkit. Timeline:[00:00] - Event Tracing for Windows (ETW)[02:18] - Windows Performance Toolkit (WPT)[03:48] - !wmitrace.strdump[04:53] - !wmitrace.logsave 0xNN c:\example.etl[05:50] - Windows Performance Analyzer (WPA) & xPerfView[07:57] - _NT_SYMCACHE_PATH[10:24] - !wmitrace.eventlogdump 0xNN[12:16] - Used for logging and performance by many teams[15:35] - Private PDBs are needed to decode some entries[20:00] - Windows Performance Recorder (wprui.exe)[20:35] - Disable Paging Executive[23:40] - WPR adds the NT Kernel Logger [24:19] - 10min run-through of the data collected with the General, CPU and Disk providers 2145 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-29-WinDbg-ETW-Logging Mon, 25 Feb 2013 22:30:47 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-29-WinDbg-ETW-Logging Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 17 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-29-WinDbg-ETW-Logging/RSS Debugging Tech Support Defrag: Fast Nav, 0xC000000D, Installing Stalls Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[00:48] - Fastest way to get to a control panel item. 
[01:24] - Disabling hibernation to save space on smaller SSD. 
[02:16] - User getting 0xC000000D, 
[04:04] - Can time between background images be shortened? 
[05:27] - Installation stalling, uninstaller stalling.[link]
[09:06] - When using reinstalling Win8 on a tablet, will user need to reinstall all updates? 
[10:35] - Why does Excel empty the clipboard on start? [link]
[00:00] - Pick of the Week: IFTTT.com 
[13:07] - Pick of the Week: Server app for WindowsRT [link]

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Fast-Nav-0xC000000D-Installing-Stalls Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[00:48] - Fastest way to get to a control panel item. [01:24] - Disabling hibernation to save space on smaller SSD. [02:16] - User getting 0xC000000D, [04:04] - Can time between background images be shortened? [05:27] - Installation stalling, uninstaller stalling.[link][09:06] - When using reinstalling Win8 on a tablet, will user need to reinstall all updates? [10:35] - Why does Excel empty the clipboard on start? [link][00:00] - Pick of the Week: IFTTT.com [13:07] - Pick of the Week: Server app for WindowsRT [link] 899 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Fast-Nav-0xC000000D-Installing-Stalls Wed, 20 Feb 2013 18:29:51 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Fast-Nav-0xC000000D-Installing-Stalls Larry Larsen, Rhymes With Orange Larry Larsen, Rhymes With Orange 4 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Fast-Nav-0xC000000D-Installing-Stalls/RSS Tech Support Defrag Tools: #28 - WinDbg - Scheduling In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the Windows Scheduler. We look at Running, Ready and Waiting threads, and talks about the effect of Power Management on scheduling.

We use these commands:

  • !running
  • !running -t
  • !ready
  • !dpcs
  • !thread <addr> 17
  • !thread -1 17   (current thread)

Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution.

Resources:
Microsoft Data Center Tour

Timeline:
[00:00] - Episode #27's demo issue
[02:47] - Kernel Hangs
[05:18] - !running
[05:48] - Idle Threads & Processor Power Management
[10:10] - !running -t
[13:53] - !ready
[14:15] - Thread State Diagram
[16:45] - Saturated example
[20:48] - Thread Priority Diagram
[22:22] - Balance Set Manager
[25:30] - Waiting Threads
[26:52] - Summary

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-28-WinDbg-Scheduling In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer. This installment goes over the Windows Scheduler. We look at Running, Ready and Waiting threads, and talks about the effect of Power Management on scheduling. We use these commands: !running !running -t !ready !dpcs !thread &lt;addr&gt; 17 !thread -1 17&nbsp;&nbsp; (current thread) Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution. Resources:Microsoft Data Center Tour Timeline:[00:00] - Episode #27's demo issue[02:47] - Kernel Hangs[05:18] - !running[05:48] - Idle Threads &amp; Processor Power Management[10:10] - !running -t[13:53] - !ready[14:15] - Thread State Diagram[16:45] - Saturated example[20:48] - Thread Priority Diagram[22:22] - Balance Set Manager[25:30] - Waiting Threads[26:52] - Summary 1749 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-28-WinDbg-Scheduling Mon, 18 Feb 2013 16:17:53 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-28-WinDbg-Scheduling Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 6 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-28-WinDbg-Scheduling/RSS Debugging Tech Support Defrag: Notifications, Scanners, Showing Paths Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[01:43] - Keeping notifications onscreen longer. 
[02:25] - Way to use CCD scanner in Windows Store application. 
[06:19] - Showing full path of directories. 
[08:09] - Logged on to Win7, missing all passwords. 
[09:41] - BCDEdit, getting back to graphical boot menu. 
[11:37] - Waking computer in new location doesn't find network. 
[12:57] - Will USB 3 charge a phone faster than USB 2. 
[13:48] - Lenovo Twist has two unknown devices. 
[14:50] - No apps found when doing a search, video submission. [link]
[17:00] - Pick of the Week: Clipboard Store App [link]

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Notifications-Scanners-Showing-Paths Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this&nbsp;for details on how) and send us the zip file to&nbsp;DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[01:43] - Keeping notifications onscreen longer.&nbsp;[02:25] - Way to use CCD scanner in Windows Store application.&nbsp;[06:19] - Showing full path of directories.&nbsp;[08:09] - Logged on to Win7, missing all passwords.&nbsp;[09:41] - BCDEdit, getting back to graphical boot menu.&nbsp;[11:37] - Waking computer in new location doesn't find network.&nbsp;[12:57] - Will USB 3 charge a phone faster than USB 2.&nbsp;[13:48] - Lenovo Twist has two unknown devices.&nbsp;[14:50] - No apps found when doing a search, video submission. [link][17:00] - Pick of the Week: Clipboard Store App [link] 1183 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Notifications-Scanners-Showing-Paths Wed, 13 Feb 2013 20:42:14 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Notifications-Scanners-Showing-Paths Larry Larsen Larry Larsen 1 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Notifications-Scanners-Showing-Paths/RSS Tech Support Defrag Tools: #27 - WinDbg - Configure Kernel Debugging In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the cables and configuration steps required to set up kernel mode debugging.

We use these BCDEdit commands:

  • bcdedit
  • bcdedit /dbgsettings
  • bcdedit /dbgsettings 1394 channel:42
  • bcdedit /dbgsettings net hostip:192.168.0.10 port:50000 key:a.b.c.d
  • bcdedit /debug on
  • bcdedit /debug off

In the debug session, we use these commands:

  • .crash
  • .dump /f
  • lm
  • !lmi
  • .reload /f
  • !drvobj
  • !drvobj <module> 2
  • bl
  • bc *
  • be <N>
  • bd <N>
  • bp <function>
  • bm <wildcard>
  • x <wildcard>
  • g

Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution.

Resources:
NT Debugging Blog - How to Setup a Debug Crash Cart to Prevent Your Server from Flat Lining
NT Debugging Blog - Remoting Your Debug Crash Cart With KDNET [10th May 2013]
USBView
USB3 Debugging Cable
- Note, you must use a USB3 A-A cable designed for debugging, otherwise it will fry your box!

Timeline:
[00:45] - Kernel Debugging Cables
[02:14] - USB 2.0
[04:13] - USB 3.0 - New in Windows 8/Windows RT
[05:30] - 1394 (Firewire)
[10:39] - Break
[11:38] - Driver Objects
[16:00] - Network - New in Windows 8/Windows RT
[17:30] - Breakpoint commands
[26:00] - Network - BCDEdit
[33:37] - SecureBoot and BitLocker

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-27-WinDbg-Configure-Kernel-Debugging In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer. This installment goes over the cables and configuration steps required to set up kernel mode debugging. We use these BCDEdit commands: bcdedit bcdedit /dbgsettings bcdedit /dbgsettings 1394 channel:42 bcdedit /dbgsettings net hostip:192.168.0.10 port:50000 key:a.b.c.d bcdedit /debug on bcdedit /debug off In the debug session, we use these commands: .crash .dump /f lm !lmi .reload /f !drvobj !drvobj &lt;module&gt; 2 bl bc * be &lt;N&gt; bd &lt;N&gt; bp &lt;function&gt; bm &lt;wildcard&gt; x &lt;wildcard&gt; g Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution. Resources:NT Debugging Blog - How to Setup a Debug Crash Cart to Prevent Your Server from Flat LiningNT Debugging Blog - Remoting Your Debug Crash Cart With KDNET&nbsp;[10th May 2013]USBViewUSB3 Debugging Cable- Note, you must use a USB3 A-A cable designed for debugging, otherwise it will fry your box! Timeline:[00:45] - Kernel Debugging Cables[02:14] - USB 2.0[04:13] - USB 3.0 - New in Windows 8/Windows RT[05:30] - 1394 (Firewire)[10:39] - Break[11:38] - Driver Objects[16:00] - Network - New in Windows 8/Windows RT[17:30] - Breakpoint commands[26:00] - Network - BCDEdit[33:37] - SecureBoot and BitLocker 2235 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-27-WinDbg-Configure-Kernel-Debugging Mon, 11 Feb 2013 17:02:42 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-27-WinDbg-Configure-Kernel-Debugging Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 11 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-27-WinDbg-Configure-Kernel-Debugging/RSS Debugging Tech Support Defrag: Task Bar, Pop ups and UNC Behavior Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[00:30] - Task Bar icons not working as expected for Min/Maximize.
[03:30] - Pop up windows opening behind active windows.
[05:40] - Doing a 'deep scan' with MS Security Essentials.
[06:36] - Problems accessing UNC paths.
[09:25] - Way to get an email notification on server BSOD event. [link]
[10:38] - Difference between memory shown and usable.
[12:24] - PC taking 10 minutes to boot but restarts faster.
[15:20] - Speech Narration not working in Office 2007.
[16:08] - Getting rid of a toolbar.
[16:50] - Space taken in ProgramData\Microsoft. [link]
[20:29] - Changing computer names on network with PS script.
[22:51] - Searching photos by tags.
[23:33] - Pick of the Week: Reallusion iClone 5 + MoCap with Kinect [link]
[26:00] - Pick/Anti-Pick of the Week: Massive Collection of Registry Tweaks [link]

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Task-Bar-Pop-ups-and-UNC-Behavior Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[00:30] - Task Bar icons not working as expected for Min/Maximize. [03:30] - Pop up windows opening behind active windows. [05:40] - Doing a 'deep scan' with MS Security Essentials. [06:36] - Problems accessing UNC paths. [09:25] - Way to get an email notification on server BSOD event. [link][10:38] - Difference between memory shown and usable. [12:24] - PC taking 10 minutes to boot but restarts faster. [15:20] - Speech Narration not working in Office 2007. [16:08] - Getting rid of a toolbar. [16:50] - Space taken in ProgramData\Microsoft. [link][20:29] - Changing computer names on network with PS script. [22:51] - Searching photos by tags. [23:33] - Pick of the Week: Reallusion iClone 5 &#43; MoCap with Kinect [link] [26:00] - Pick/Anti-Pick of the Week: Massive Collection of Registry Tweaks [link] 1800 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Task-Bar-Pop-ups-and-UNC-Behavior Wed, 06 Feb 2013 19:02:47 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Task-Bar-Pop-ups-and-UNC-Behavior Larry Larsen Larry Larsen 7 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Task-Bar-Pop-ups-and-UNC-Behavior/RSS Tech Support Defrag Tools: #26 - WinDbg - Semaphores, Mutexes and Timers In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the commands used to diagnose Semaphores, Mutexes and (Waitable) Timers in a user mode application. For timers, we delve deep in to the kernel to gather more information about them. We use these commands:

  • !handle
  • !handle <handle> <mask>
  • !object <name>
  • !object <addr>
  • !timer
  • !timer <addr>
  • ub @rip
  • dt nt!_KTHREAD <addr>

Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution.

Resources:
Synchronization Functions
Semaphore Objects
Mutex Objects
Waitable Timer Objects
Sysinternals LiveKD
Sysinternals WinObj
Windows 7 and Windows Server 2008 R2 Kernel Changes (Timer Coalescing)

Timeline:
[02:47] - Demo Apps [SkyDrive]
[03:08] - Semaphores
[09:32] - Mutexes
[15:32] - Waitable Timers
[15:58] - Clock Resolution
[17:05] - Timer Coalescing
[19:45] - Timer demo application
[25:05] - LiveKD makes a kernel dump
[26:37] - Object Manager - !object
[29:40] - DPC Timers - !timer
[35:22] - !timer <addr>
[35:52] - Waiting Threads - !thread <addr> 17
[37:08] - Wait Start TickCount
[38:55] - Kernel Wait Routines
[41:12] - Dump Type of Kernel Thread - dt nt!_KTHREAD <addr>
[42:00] - Running, Ready and Waiting states
[44:54] - Wakable Timers
[47:22] - powercfg.exe /waketimers
[49:18] - 'Century' DPC Timer Routine
[50:43] - Post in the forums and email us at defragtools@microsoft.com!

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-26-WinDbg-Semaphores-Mutexes-and-Timers In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer. This installment goes over the commands used to diagnose Semaphores, Mutexes and (Waitable) Timers in a user mode application. For timers, we&nbsp;delve deep in to the kernel to gather more information about them. We use these commands: !handle !handle &lt;handle&gt; &lt;mask&gt; !object &lt;name&gt; !object &lt;addr&gt; !timer !timer &lt;addr&gt; ub @rip dt nt!_KTHREAD &lt;addr&gt; Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution. Resources:Synchronization FunctionsSemaphore ObjectsMutex ObjectsWaitable Timer ObjectsSysinternals LiveKDSysinternals WinObjWindows 7 and Windows Server 2008 R2 Kernel Changes&nbsp;(Timer Coalescing) Timeline:[02:47] - Demo Apps [SkyDrive][03:08] - Semaphores[09:32] - Mutexes[15:32] - Waitable Timers[15:58] - Clock Resolution[17:05] - Timer Coalescing[19:45] - Timer demo application[25:05] - LiveKD makes a kernel dump[26:37] - Object Manager - !object[29:40] - DPC Timers - !timer[35:22] - !timer &lt;addr&gt;[35:52] - Waiting Threads - !thread &lt;addr&gt; 17[37:08] - Wait Start TickCount[38:55] - Kernel Wait&nbsp;Routines[41:12] - Dump Type of Kernel Thread - dt nt!_KTHREAD &lt;addr&gt;[42:00] - Running, Ready and Waiting states[44:54] - Wakable Timers[47:22] - powercfg.exe /waketimers[49:18] - 'Century' DPC Timer Routine[50:43] - Post in the forums and email us at defragtools@microsoft.com! 3060 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-26-WinDbg-Semaphores-Mutexes-and-Timers Mon, 04 Feb 2013 18:11:10 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-26-WinDbg-Semaphores-Mutexes-and-Timers Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 0 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-26-WinDbg-Semaphores-Mutexes-and-Timers/RSS Debugging Tech Support Defrag: High CPU Usage, Audio Interrupt, Sharing Printers and Files Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[00:11] - Forever Alone Puffer Fish [link]
[00:33] - Boot Config Data Editor using 45% of CPU  
[04:00] - Audio interface not working correctly with Line 6 USB device plugged in 
[06:15] - Norton Ghost 15 uninstall failed. 
[10:50] - Mouse Without Borders getting error. [link] (new version)
[12:05] - Internet doesn't connect until IE10 runs. 
[13:35] - Using Windows backup tools for backups.
[16:03] - Sharing printers and documents between Vista and Win8. 
[19:16] - Pick of the Week: 3D printed dress and call for 3D printer questions. [link]

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-High-CPU-Usage-Audio-Interrupt-Sharing-Printers-and-Files Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this&nbsp;for details on how) and send us the zip file to&nbsp;DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[00:11] - Forever Alone Puffer Fish [link][00:33] - Boot Config Data Editor using 45% of CPU &nbsp;[04:00] - Audio interface not working correctly with Line 6 USB device plugged in&nbsp;[06:15] - Norton Ghost 15 uninstall failed.&nbsp;[10:50] - Mouse Without Borders getting error. [link] (new version)[12:05] - Internet doesn't connect until IE10 runs.&nbsp;[13:35] - Using Windows backup tools for backups.[16:03] - Sharing printers and documents between Vista and Win8.&nbsp;[19:16] - Pick of the Week: 3D printed dress and call for 3D printer questions. [link] 1482 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-High-CPU-Usage-Audio-Interrupt-Sharing-Printers-and-Files Wed, 30 Jan 2013 22:32:21 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-High-CPU-Usage-Audio-Interrupt-Sharing-Printers-and-Files Larry Larsen Larry Larsen 17 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-High-CPU-Usage-Audio-Interrupt-Sharing-Printers-and-Files/RSS Tech Support Defrag Tools: #25 - WinDbg - Events In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the commands used to diagnose an Event hang in a user mode application. We talk about single and multiple event hangs, automatic and manual events, waitable object handles and common design patterns that you will encounter. We use these commands:

  • ~*k
  • ~*kv
  • ~
  • ~~[TID]s
  • dp <addr>
  • !handle
  • !handle <handle> <mask>
  • .dumpdebug
  • !uniqstack
  • !findstack <text>

Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution.

Resources:
Synchronization Functions
Sysinternals WinObj

Timeline:
[00:00] - Event objects
[03:56] - Waitable objects and Design Patterns
[08:00] - Handles
[10:52] - x64/x86/ARM calling conventions and 32/64bit addressing
[14:10] - WaitForSingleObject with a single Auto-Reset Event
[14:55] - !handle
[16:02] - .dumpdebug -- MiniDumpWithHandleData
[16:36] - !handle <handle> <mask>
[19:48] - Sysinternals WinObj
[24:14] - WaitForMultipleObjects with multiple Thread Handles
[30:00] - Work and Quit Event Design Pattern
[33:45] - WaitForMultipleObjects with multiple Event Handles
[38:52] - Windows Explorer example
[44:50] - Process Explorer also shows Handles (Ctrl-H)

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-25-WinDbg-Events In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer. This installment goes over the commands used to diagnose an Event hang in a user mode application. We&nbsp;talk about single and multiple event hangs,&nbsp;automatic and manual events, waitable object handles and common design patterns that you will encounter. We use these commands: ~*k ~*kv ~ ~~[TID]s dp &lt;addr&gt; !handle !handle &lt;handle&gt; &lt;mask&gt; .dumpdebug !uniqstack !findstack &lt;text&gt; Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution. Resources:Synchronization FunctionsSysinternals WinObj Timeline:[00:00] - Event objects[03:56] - Waitable objects and Design Patterns[08:00] - Handles[10:52] - x64/x86/ARM&nbsp;calling conventions and 32/64bit addressing[14:10] - WaitForSingleObject with a single Auto-Reset Event[14:55] - !handle[16:02] - .dumpdebug -- MiniDumpWithHandleData[16:36] - !handle &lt;handle&gt; &lt;mask&gt;[19:48] - Sysinternals WinObj[24:14] - WaitForMultipleObjects with multiple Thread Handles[30:00] -&nbsp;Work and Quit Event Design Pattern[33:45] - WaitForMultipleObjects with multiple Event Handles[38:52] - Windows Explorer example[44:50] - Process Explorer also shows Handles (Ctrl-H) 2796 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-25-WinDbg-Events Mon, 28 Jan 2013 17:57:16 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-25-WinDbg-Events Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 2 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-25-WinDbg-Events/RSS Debugging Tech Support Defrag: Multi-mon, Mouse Latency, Ransomware Okay, okay, we're back! After a brief winter break Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this for details on how) and send us the zip file to DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.

[01:00] - When is the next Defrag show? 
[01:44] - Slow boot time on a Vaio, using Xbootmgr. [link] [link]
[04:34] - Audio problem with Windows Store apps. [link] [link]
[05:00] - Downloading the Windows 8 DVD. 
[06:40] - Apps that support notifications not populating. 
[07:50] - Win7 starting slow, file not found entries in Autoruns. 
[09:00] - Is there a way to not have a security information pop up on a web application. 
[09:45] - Start screen with multiple monitors. 
[11:00] - Error 0x80070522 when dragging files from network to root of C. [link]
[14:08] - Problems uninstalling Symantec Endpoint Protection 2012. 
[18:15] - Bad latency on mouse response with Touch Mouse.  
[19:27] - IE 10 and IE 9 stop responding after a period of time. 
[22:00] - Second hard drive became read-only in Disk Management. [link]
[23:48] - Third monitor isn't working with video card.  
[25:13] - Can you make Control-Alt-Delete go to task manager directly. 
[26:00] - Pick of the Week: SiliconDust HDHomeRun [link]
[27:45] - Pick of the Week: Saving images from browser to folders using hotkeys [link]
[28:35] - Pick of the Week: Mark Russinovich - Hunting Down and Killing Ransomware [link]

]]> http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Multi-mon-Mouse-Latency-Ransomware Okay, okay, we're back! After a brief winter break Microsoft tech troubleshooter extraordinaire Gov Maharaj and I help walk you through troubleshooting solutions to your tech support problems. If you have a problem you want to send us, you can use the Problem Step Recorder in Windows 7 (see this&nbsp;for details on how) and send us the zip file to&nbsp;DefragShow@microsoft.com. We will also be checking comments for problems, but the email address will let us contact you if needed.[01:00] - When is the next Defrag show?&nbsp;[01:44] - Slow boot time on a Vaio, using Xbootmgr. [link] [link][04:34] - Audio problem with Windows Store apps. [link] [link][05:00] - Downloading the Windows 8 DVD.&nbsp;[06:40] - Apps that support notifications not populating.&nbsp;[07:50] - Win7 starting slow, file not found entries in Autoruns.&nbsp;[09:00] - Is there a way to not have a security information pop up on a web application.&nbsp;[09:45] - Start screen with multiple monitors.&nbsp;[11:00] - Error 0x80070522 when dragging files from network to root of C. [link][14:08] - Problems uninstalling Symantec Endpoint Protection 2012.&nbsp;[18:15] - Bad latency on mouse response with Touch Mouse. &nbsp;[19:27] - IE 10 and IE 9 stop responding after a period of time.&nbsp;[22:00] - Second hard drive became read-only in Disk Management. [link][23:48] - Third monitor isn't working with video card. &nbsp;[25:13] - Can you make Control-Alt-Delete go to task manager directly.&nbsp;[26:00] - Pick of the Week: SiliconDust HDHomeRun [link][27:45] - Pick of the Week: Saving images from browser to folders using hotkeys [link][28:35] - Pick of the Week: Mark Russinovich - Hunting Down and Killing Ransomware [link] 2021 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Multi-mon-Mouse-Latency-Ransomware Wed, 23 Jan 2013 23:16:59 GMT http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Multi-mon-Mouse-Latency-Ransomware Larry Larsen Larry Larsen 8 http://channel9.msdn.com/Shows/The-Defrag-Show/Defrag-Multi-mon-Mouse-Latency-Ransomware/RSS Tech Support Defrag Tools: #24 - WinDbg - Critical Sections In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the commands used to diagnose a Critical Section hang in a user mode application. We start with an overview of the four synchronization primitives and then delve deep in to temporary hangs, orphaned Critical Sections and deadlocks. We use these commands:

  • ~*k
  • ~*kv
  • ~
  • ~~[TID]s
  • !cs
  • !cs <pointer>
  • !locks

Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbols and source code resolution.

Resources:
Critical Section Objects

Timeline:
[01:00] - Hang types - CPU Looping, Temporary Hangs and Permanent Hangs
[02:00] - Synchronization Objects - Event, Semaphore, Mutex, Critical Section
[06:54] - Critical Sections
[11:45] - Debugging a Hang
[28:08] - Debugging an Orphan
[32:40] - Debugging a Deadlock

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-24-WinDbg-Critical-Sections In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer. This installment goes over the commands used to diagnose a Critical Section hang in a user mode application. We start with an overview of the four&nbsp;synchronization primitives and then delve deep in to temporary hangs, orphaned Critical Sections and deadlocks. We use these commands: ~*k ~*kv ~ ~~[TID]s !cs !cs &lt;pointer&gt; !locks Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbols and source code resolution. Resources:Critical Section Objects Timeline:[01:00] - Hang types - CPU Looping, Temporary Hangs and Permanent Hangs[02:00] - Synchronization Objects - Event, Semaphore, Mutex, Critical Section[06:54] - Critical Sections[11:45] - Debugging a Hang[28:08] - Debugging an Orphan[32:40] - Debugging a Deadlock 2340 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-24-WinDbg-Critical-Sections Mon, 21 Jan 2013 18:24:14 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-24-WinDbg-Critical-Sections Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 10 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-24-WinDbg-Critical-Sections/RSS Debugging Tech Support Defrag Tools: #23 - Windows 8 SDK In this episode of Defrag Tools, Andrew Richards and Larry Larsen upgrade the software we downloaded in Episode #1 to the Windows 8 (x86 &x64) and Windows RT (ARM) versions.

Resources:
Windows Software Development Kit (SDK) for Windows 8
Sysinternals
USB3 Debugging Cable
- Note, you must use a USB3 A-A cable designed for debugging, otherwise it will fry your box!

Timeline:
[00:00] - Table tablets and 4K screens at CES 2013
[02:30] - Time to upgrade our tools to the Windows 8\Windows RT versions!
[03:20] - www.sysinternals.com
[05:34] - Win7SP1 and Win8RTM folders
[06:16] - Bing: "Windows 8 SDK"
[06:53] - Bing: "Debugging Tools for Windows"
[07:25] - New web installer does installation or download.
[10:02] - MSI files are in the ..\Windows Kits\8.0\StandaloneSDK\Installers
[13:00] - Sync your 'My' folder with SkyDrive so it is always available!
[13:30] - Install the Debugging Tools for Windows to gather the files for xcopy deployment
[15:33] - Visual Studio 2012 builds PDBs with Inline Frame information
[17:23] - Visual Studio 2012 builds PDBs with Local Variable information
[18:55] - Windows 8 supports Network and USB3 kernel debugging
[21:10] - Visual Studio 2012 now supports both the VS and DbgEng debugger engines
[21:40] - Keep posting questions and sending email to defragtools@microsoft.com!

CES 2013:
Microsoft PixelSense
The Hobbit - Production Diary #4 - Film shot at 5K 48fps 3D

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-23-Windows-8-SDK In this episode of Defrag Tools, Andrew Richards and Larry Larsen upgrade the software we downloaded in Episode #1&nbsp;to the Windows 8 (x86 &amp;x64) and Windows RT&nbsp;(ARM) versions. Resources: Windows Software Development Kit (SDK) for Windows 8SysinternalsUSB3 Debugging Cable- Note, you must use&nbsp;a USB3 A-A cable designed for debugging, otherwise it will fry your box!Timeline: [00:00] - Table tablets and 4K screens at CES 2013[02:30] - Time to upgrade our tools to the Windows 8\Windows RT versions![03:20] - www.sysinternals.com[05:34] -&nbsp;Win7SP1 and Win8RTM folders[06:16] -&nbsp;Bing: &quot;Windows 8 SDK&quot;[06:53] - Bing: &quot;Debugging Tools for Windows&quot;[07:25] - New web installer does installation or download.[10:02] - MSI files are in the ..\Windows Kits\8.0\StandaloneSDK\Installers[13:00] - Sync your 'My' folder with SkyDrive so it is always available![13:30] - Install the Debugging Tools for Windows to gather the files for xcopy deployment[15:33] - Visual Studio 2012 builds&nbsp;PDBs with Inline Frame information[17:23] - Visual Studio 2012 builds&nbsp;PDBs with Local Variable information[18:55] - Windows 8 supports Network and USB3 kernel debugging[21:10] - Visual Studio 2012 now supports both the VS and DbgEng debugger engines[21:40] - Keep posting questions and sending email to defragtools@microsoft.com! CES 2013: Microsoft PixelSenseThe Hobbit - Production Diary #4 - Film shot at 5K 48fps 3D 1424 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-23-Windows-8-SDK Mon, 14 Jan 2013 16:57:44 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-23-Windows-8-SDK Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 16 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-23-Windows-8-SDK/RSS Debugging sysinternals Tech Support Defrag Tools: #22 - WinDbg - Memory Kernel Mode In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the commands used to show the memory used in a kernel mode debug session. We cover these commands:

  • !vm
  • !vm 1
  • !memusage 8
  • !poolused 2
  • !poolused 4
  • !poolfind <tag>
  • !pool <addr>
  • !pool <addr> 2
  • !pte

Make sure you watch Defrag Tools Episode #1 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbols and source code resolution.

Resources:
Microsoft Windows SDK for Windows 7 and .NET Framework 4
Sysinternals LiveKD
Sysinternals RAMMap

Timeline:
[00:45] - Sysinternals LiveKD debug of the machine
[01:47] - Virtual Memory summary (!vm 1)
[05:10] - Sysinternals LiveKD live kernel dump (livekd.exe -m -o kernel.dmp)
[09:30] - Sysinternals RAMMap
[11:10] - Memory List summary (!memusage 8)
[16:15] - Pool Usage by Non-Paged Pool (!poolused 2)
[20:16] - Pool Tags (c:\debuggers\triage\pooltag.txt)
[28:06] - Pool Usage by Paged Pool (!poolused 4)
[29:27] - Pool issues lead to Bugchecks
[34:00] - Find Pool by Address (!pool <addr>)
[36:05] - Find Pool by Tag (!poolfind <tag>)
[40:30] - Page Table Entry (PTE) and Page Frame Number (PFN) (!pte <addr>)
[42:45] - Sometimes it is a physical hardware failure

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-22-WinDbg-Memory-Kernel-Mode In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer. This installment goes over the commands used to show the memory used in a kernel mode debug session. We cover these commands: !vm !vm 1 !memusage 8 !poolused 2 !poolused 4 !poolfind &lt;tag&gt; !pool &lt;addr&gt; !pool &lt;addr&gt; 2 !pte Make sure you watch Defrag Tools Episode #1 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbols and source code resolution. Resources:Microsoft Windows SDK for Windows 7 and .NET Framework 4 Sysinternals LiveKDSysinternals RAMMap Timeline:[00:45] - Sysinternals LiveKD debug of the machine[01:47] - Virtual Memory summary (!vm 1)[05:10] - Sysinternals LiveKD live kernel dump (livekd.exe -m -o kernel.dmp)[09:30] - Sysinternals RAMMap[11:10] - Memory List summary (!memusage 8)[16:15] - Pool Usage by Non-Paged Pool (!poolused 2)[20:16] - Pool Tags (c:\debuggers\triage\pooltag.txt)[28:06] - Pool Usage by Paged Pool (!poolused 4)[29:27] - Pool issues lead to Bugchecks[34:00] - Find Pool by Address&nbsp;(!pool &lt;addr&gt;)[36:05] - Find Pool by Tag (!poolfind &lt;tag&gt;)[40:30] - Page Table Entry (PTE) and Page Frame Number (PFN) (!pte &lt;addr&gt;)[42:45] - Sometimes it is a physical hardware failure 2723 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-22-WinDbg-Memory-Kernel-Mode Mon, 07 Jan 2013 20:31:31 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-22-WinDbg-Memory-Kernel-Mode Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 5 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-22-WinDbg-Memory-Kernel-Mode/RSS Drivers sysinternals Tech Support Defrag Tools: #21 - WinDbg - Memory User Mode In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the commands used to show the memory used in a user mode debug session. We cover these commands:

  • !address -summary
  • !address <addr>
  • !vprot <addr>
  • !mapped_file <addr>

Make sure you watch Defrag Tools Episode #1 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbols and source code resolution.

Resources:
Microsoft Windows SDK for Windows 7 and .NET Framework 4
Sysinternals VMMap
Performance and Memory Consumption Under WOW64
MEMORY_BASIC_INFORMATION structure
Memory Protection Constants

Timeline:
[00:50] - Live Debug of Notepad
[01:10] - VMMap of Notepad
[02:08] - Virtual Address Space summary (!address -summary)
[04:30] - 'Large Address Space Aware' increases the VA space from 2GB to 4GB
[08:11] - Memory Mapped Files
[10:11] - Memory Type, State and Protection (inc. Guard Pages)
[21:22] - Allocation Base vs. Base Address (!address <addr>)
[26:52] - Virtual Protection shows the Alloc. Base Protection (!vprot <addr>)
[29:14] - Mapped Files (!mapped_file <addr>)

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-21-WinDbg-Memory-User-Mode In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer. This installment goes over the commands used to show the memory used in a user mode debug session. We cover these commands: !address -summary !address &lt;addr&gt; !vprot &lt;addr&gt; !mapped_file &lt;addr&gt; Make sure you watch Defrag Tools Episode #1 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbols and source code resolution. Resources: Microsoft Windows SDK for Windows 7 and .NET Framework 4Sysinternals VMMapPerformance and Memory Consumption Under WOW64MEMORY_BASIC_INFORMATION structureMemory Protection Constants Timeline: [00:50] - Live Debug of Notepad [01:10] -&nbsp;VMMap of Notepad[02:08] - Virtual Address Space summary&nbsp;(!address -summary)[04:30] - 'Large Address Space Aware' increases the VA space from 2GB&nbsp;to 4GB[08:11] - Memory Mapped Files[10:11] - Memory Type, State and Protection (inc. Guard Pages)[21:22] - Allocation Base vs. Base Address (!address &lt;addr&gt;)[26:52] - Virtual Protection shows the Alloc. Base Protection (!vprot &lt;addr&gt;)[29:14] - Mapped Files (!mapped_file &lt;addr&gt;) 2028 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-21-WinDbg-Memory-User-Mode Tue, 01 Jan 2013 08:46:14 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-21-WinDbg-Memory-User-Mode Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 2 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-21-WinDbg-Memory-User-Mode/RSS Tech Support Defrag Tools: #20 - WinDbg - Basic Commands In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the commands used to show the state of debug session. It also shows some of the basic commands used to view process and thread information of a user mode process. We cover these commands:

  • version
  • vertarget
  • |
  • ||
  • .sympath
  • .srcpath
  • .exepath
  • .extpath
  • .chain
  • !analyze -v
  • .bugcheck
  • !error
  • ~
  • ~NNs
  • ~~[TID]s
  • ~*k
  • ~*r
  • !process 0 17
  • !threads
  • !findstack
  • !uniqstack
  • !peb
  • !teb
  • k= <addr> <addr> <frames>
  • dps
  • dpu
  • dpa
  • dpp
  • .reload /f
  • .reload /user
  • !gle
  • !tls

Make sure you watch Defrag Tools Episode #1 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbols and source code resolution.

Resources:
Microsoft Windows SDK for Windows 7 and .NET Framework 4
System Error Codes

Timeline:
[01:01] - Live Debug of Notepad
[02:14] - Overview of the debug session (version)
[03:10] - OS Version/Architecture and System/Debug/User/Kernel times (vertarget)
[09:03] - Process and System Status (| {pipe}, || {double pipe})
[10:16] - Symbol Path (.sympath)
[10:52] - Source Path (.srcpath)
[11:00] - Executable Path (.exepath, lmvm - Memory Mapped Image File)
[11:40] - Extension Path (.extpath)
[12:20] - Loaded Extensions (.chain)
[13:43] - !analyze is for both User and Kernel crashes (!analyze -v)
[14:56] - Bugcheck code and arguments (.bugcheck)
[15:26] - Error Code Lookup (!error)
[16:04] - Threads in a User Process (~ {tilde})
[17:33] - Change Current Thread Context (~NNs) 
[20:13] - Show all the call stacks or registers (~*k, ~*r)
[21:04] - Change Current Thread Context by TID (~~[TID]s) 
[24:18] - Show all the call stacks in all the processes in a kernel session (!process 0 17)
[25:29] - Configuration summary of all thread (!threads)
[26:54] - Find call stack (!findstack)
[27:35] - Unique call stacks (!uniqstack)
[28:30] - Process Environment Block (!peb)
[30:50] - Thread Environment Block (!teb)
[32:02] - Buffer Overflow of a stack variable
[33:11] - Call Stack Recreation (k= <addr> <addr> <frames> {x64})
[34:40] - Display Pointers as a Symbol, Unicode, ANSI or Pointer (dps, dpu, dpa, dpp)
[37:40] - Force the loading of symbols (.reload /f)
[38:43] - Force the loading of user symbols in the kernel when you change thread context (.reload /user)
Note: /u is for unload, not load user symbols - that's why Chad is the kernel guy!
[39:18] - SetLastError/GetLastError value in the TEB (!gle)
[40:14] - Thread Local Storage values in the TEB (!tls)

 

]]> http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-20-WinDbg-Basic-Commands In this episode of Defrag Tools, Andrew Richards, Chad Beeder&nbsp;and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer. This installment goes over the commands used to show the state of debug session. It also shows some of the basic commands used to view process and thread information of a user mode process. We&nbsp;cover these commands: version vertarget | || .sympath .srcpath .exepath .extpath .chain !analyze -v .bugcheck !error ~ ~NNs ~~[TID]s ~*k ~*r !process 0 17 !threads !findstack !uniqstack !peb !teb k= &lt;addr&gt; &lt;addr&gt; &lt;frames&gt; dps dpu dpa dpp .reload /f .reload /user !gle !tls Make sure you watch Defrag Tools Episode #1 for instructions on how to get the Debugging Tools for Windows and how to set&nbsp;the required environment variables for symbols and source code resolution. Resources: Microsoft Windows SDK for Windows 7 and .NET Framework 4 System Error Codes Timeline: [01:01] - Live Debug of Notepad[02:14] - Overview of the debug session (version)[03:10] - OS Version/Architecture&nbsp;and System/Debug/User/Kernel times (vertarget)[09:03] - Process and System Status (| {pipe}, || {double pipe})[10:16] - Symbol Path (.sympath)[10:52] - Source Path (.srcpath)[11:00] - Executable Path (.exepath, lmvm - Memory Mapped Image File)[11:40] - Extension Path (.extpath)[12:20] - Loaded Extensions (.chain)[13:43] - !analyze is for both User and Kernel crashes (!analyze -v)[14:56] - Bugcheck code and arguments&nbsp;(.bugcheck)[15:26] - Error Code Lookup (!error)[16:04] - Threads in a User Process (~ {tilde})[17:33] - Change Current Thread Context (~NNs)&nbsp;[20:13] - Show all the call stacks or registers (~*k, ~*r)[21:04] - Change Current Thread Context by TID (~~[TID]s)&nbsp;[24:18] - Show all the call stacks in all the processes in a kernel session (!process 0 17)[25:29] - Configuration summary of all th 2557 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-20-WinDbg-Basic-Commands Tue, 25 Dec 2012 04:19:23 GMT http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-20-WinDbg-Basic-Commands Larry Larsen, Andrew Richards, Chad Beeder Larry Larsen, Andrew Richards, Chad Beeder 3 http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-20-WinDbg-Basic-Commands/RSS Debugging Tech Support