Just like his blog in sysinternals.com, Mark's technet blog investigates complex problems. He shows the full details of how he approach the problem, how to progress the investigation, and how the culprit is found. Subscribed. http://blogs.technet.com...

I was searching for filter driver doucmentations in microsoft Windows Hardware Developer Central site, and I was surprised to find many interesting information about Windows Vista System Internals. http://www.microsoft.com/whdc/system/vista/default.mspx...

Still on the topic on knowing what DllRegisterServer does without impacting the system. Before I found RegOverridePredefKey , I was thinking about hijacking all the registry APIs so that I can just record them without actually making any system change...

I was trying to find a way to figure out what changes a particular dll's DllRegisterServer make without actually changing the system. Then I found this: RegOverridePredefKey <quote> Remarks The RegOverridePredefKey function is intended for software...

There are times you may wonder which application handles a certain file extension. In Windows there are really two concepts: File Extension and File Type. File extension can be associated to a file type. Applications work on file type, not directly...

We discovered a bug internally. Since people may encounter the same problem, I am posting the bug description and the workaround. In Windows Server 2003, if the application has the following SxS manifest, then CLR will not use the application config...

Reg.exe in Vista has gain a new command line option "flags". You can use it to see some interesting things, for example, whether a registry key is virtualized. C:\>reg flags /? REG FLAGS KeyName [QUERY | SET [DONT_VIRTUALIZE] [DONT_SILENT_FAIL...

Every new Windows release introduces new features, which means new APIs. Vista is no different. As Vista is approaching RTM, documentation of new Vista APIs starts to show up on MSDN web site. The following is a short summary of changes in...