Browse by Tags


  • Blog Post: Hunting for Bugs, but Found a Worm

    Hi All, my name is Ron Riddle and I’m an Escalation Engineer on the core Windows team. I worked an issue recently wherein a svchost.exe was crashing due to heap corruption; so, after enabling Page Heap and breaking out the services as needed, I received a user-mode dump that would show me the culprit...
  • Blog Post: Debugging services startup in Svchost from a kernel mode debug session

    Windows shared services allow us to run system services together in a single service by having multiple DLLs run in a single process called Svchost. This allows Windows to have many services to run with the overhead of a single process. You can find more information about shared services here and here...
Page 1 of 1 (2 items)