sysinternals Questions

6

Solved

Does anyone know, how to disable "copyright header" from appearing when running PSExec? Everutime I run "./psexec ..." command I see this message: PsExec v2.11 - Execute processes remotely Copyrig...
Headstone asked 12/5, 2015 at 13:56

3

Solved

I have a Hudson build script which calls the SysInternals PsExec utility. Normally, when PsExec is run for the first time by a given user it pops up a dialog box asking the user to accept the licen...
Beggarweed asked 1/3, 2011 at 5:58

6

Solved

Has anyone found such behavior when Command Processor (cmd.exe) closes immediately after calling it? I’ve run McAfee AV and Windows System File Check (sfc.exe) and nothing wrong was detected, I’ve ...
Corner asked 21/3, 2011 at 2:3

1

I'm using Windows 7 and I'd like to monitor for new Process Create events. (i.e. get an entry for each process that's created, with full details about it.) I succeeded in doing this in Procmo...
Elsie asked 9/10, 2018 at 16:50

1

What I mean: If I... run runas /netonly /user:computername\username cmd enter the password for the local admin account "username" then type psexec \\computername cmd I now have a w...
Attest asked 3/4, 2018 at 20:28

6

Solved

I have a process I spawn with a Cygwin shell script, and I am unable to kill it with the kill command. Even with the Cygwin kill with the -f option, I get this message: kill: couldn't open pid 123...
Antibes asked 5/11, 2009 at 9:24

4

Solved

I have installed PS 1.0 on a remote PC(RPC001). I used Windows Sysinternals tool PSExec.exe to execute the following process on the remote: PSExec \\RPC001 -u myID -p myPWD PowerShell C:\script\S...
Hereford asked 23/11, 2009 at 21:39

2

Solved

Process Monitor shows disposition option for CreateFile operation as "Open", "OpenIf", "Overwrite", "OverwriteIf" (may be something else). How does the options which contain "If" differ from those ...
Oblige asked 21/3, 2014 at 7:26

2

Solved

I am trying to run a batch file (in the batch file I have just written 'notepad') on a remote PC through PSExec. The psexec command below runs in my laptop but fails to do anything on the remote PC...
Pentamerous asked 3/2, 2015 at 13:12

1

Solved

I've got two Remote Desktops hosted by a Hyper-V. On Remote Desktop "A", I've got a .bat file, which I want to execute. On Remote Desktop "B", I've got a cmd open with psexec cmd ready to invoke...
Dyeing asked 24/6, 2016 at 3:1

1

Solved

I'm currently having an error while trying to remove the flag "Enable heap tagging by DLL" with the debug tool GFlags for so-called "image": the application I was debugging. I get an "Unable to sa...
Sitsang asked 27/8, 2014 at 17:46

1

Solved

Is it possible that windows leaks sockets connection and these sockets are not shown in tcpview and netstat? After running a few applications that perform many network connections, my windows mach...

1

Solved

Is it possible to see managed stack traces in Process Monitor for file access events of a given process? If not, is there the other way to accomplish such task?
Foliolate asked 16/3, 2014 at 10:7

6

Solved

I'm using Sysinternals DebugView for debugging/logging during testing, and it's pretty good. However I was thinking is there more advanced tool. Features I'm looking for: Live filters - log ever...
Sexdecillion asked 4/8, 2011 at 9:6

3

Solved

I'm using VMMap from SysInternals to look at memory allocated by my Win32 C++ process on WinXP, and I see a bunch of allocations where portions of the allocated memory are reserved but not committe...
Marcionism asked 21/12, 2010 at 19:47

1

Solved

Process Explorer has a nice feature Replace Task Manager I just wondered how Mark Russinovich implements this. What trick is used for implementing this?
Urbanism asked 14/9, 2011 at 12:50

1

Solved

I'm doing various OS management and querying tasks using WMI, but it allways take a long time for first WMI call(10 to 15s). When I tried few tools from sysinternals I found that they are so much f...
Louettalough asked 29/8, 2011 at 19:29

1

From where does this structure originates? I know that it is declared in famous ntdll.h and is a part of undocumented windows API. But isn't it vary between different versions of windows? Is there ...
Compartmentalize asked 30/3, 2010 at 18:20

2

I am working with a legacy VB6/COM application which sometimes causes Windows 7 to crash. I have now generated a .dmp file of one of these crashes using the ProcDump tool from Sysinternals. However...
Fulgent asked 14/2, 2011 at 13:32
1

© 2022 - 2024 — McMap. All rights reserved.