My CCleaner Premium Duplicate Finder displays multiple .dll files. What to do?
I ran my CCleaner Premium app today. The Duplicate Finder displays tons of duplicate files. I usually know how to handle them regarding deleting some and which ones. Today I ran into something I'm unfamiliar with. It displayed approximately 30 .dll files…

Sysmon signature verification error
We use Sysmon to monitor events on our Windows 10 endpoinds. We randomly get Sysmon signature verification error, which occurs on 30% of endpoints regardless of their amount of RAM or build number. The example of an error: <13>Mar 27 15:57:19 XXXXX…
Autoruns latest version not detecting scheduled tasks on windows 11
Windows 10 detects them fine all as it should
How to remove (none) from BGInfo output?
Computers these days have so many network connection options the BGInfo is providing useless info for network adapters that are not being used. As seen here this PC is only using one network connection but because it has a WiFi adapter, Ble and…
Why is the GUI app DebugView included in the SysInternals Nano Suite?
Why is the GUI app DebugView included in the SysInternals Nano Suite?
How to fix error in system test ?
Test to see if there are any issues that could prevent your exam from launching. The issues below could prevent exam launch. Please close the following applications and then select the Retest button. • desktopextension How can I close this in my…
Process Explorer: "Owning process is not currently visible in the Process list"
I tried using a freeware tool called "Ghostbuster" to list ghost devices. I looked for it in Process Explorer but couldn't find it's process. So I tried the "Find Windows Process (drag over window)" icon. I get a message its…
One of my home IP addresses can't access sites hosted in Azure
Hi, I have a slightly odd issue - traffic coming from my default home IP address (82.68.8.222) seems to be being dropped by some websites hosted on Azure (Microsoft learn, Nationwide Building Society). If I masquerade my laptops as coming from a…
Print Monitors gone after changing them in Autorun
Hi, Mocking around (uncheck to disable) with printer monitors in Autorun64 (14.0.9.0). Got an errors "Failed to disable" from Autorun and when I was finished HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors was empty.…

Azure pulling wrong MAC address
Hello, I hope I can get some clarification as to how or why this is happening. Here is the "issue" we are currently experiencing. We made changes to our WiFi network to have faculty devices validate connection to our network through their MAC…


PROCMON 4.1.0.0 deletes backing files
I start procmon over powershell. It starts creating output.pml, output-1.pml up to output-22.pml. In the background the file output.pml up to output-5.pml are deleted. I'm not using the ring buffer. If I analyze the backing files entries from the…
How to detect the count of P & E cores in Intel CPUs?
Is there a programmatic way to detect the current P & E cores? The Intel® Processor Identification Utility for the Intel® Core™ 12th generation and newer shows the number of the P-Cores and E-Cores in the…
Can you please consider to open source all Sysinternals tools ?
Many old versions of Sysinternals tools are no longer available. Parts of Sysinternals tools would be useful to many others applications. Becoming open source will be a major step forward.
Procmon: Latest version (4.01) shows wrong Windows version
Tools -> System details shows version of Windows that Procmon is running on. Not the version where trace was captured on. Older Procmon (3.89) shows Windows version correctly.
New startup registry key in Windows 10/11, NOT captured within autoruns
Hi All, While researching the startup behavior of Windows Container (Windows Metro) Apps , like the ones installed through Microsoft Store or native to System (xbox/phone, etc), I came across a new registry key location (different from the known…
Auto logon for Win 11
In our manufacturing facility, we have minicomputers used for scan stations (numeric keypad, scan gun, touch screen monitor). We need these to auto login (supply user name and password) silently. This wasn't a problem for Win 10 but we don't see the…
Crash: Filtering on process that disappears and re-appears.
Process Explorer v16.43 crashes when I am filtering on a process name and processes with that name terminate and then re-start. It happens every time with any process. I use the filter to help debug a multi-process application. When I shut down the…
Sysinternals Procmon Unable to Sort Columns
Can you sort columns in Procmon? Have tried logging in as user and Admin same result Clicked on header column and nothing Moved col to far left and no response.
How to Configure Sysmon to Log the Parent Process Hash in Process Creation Events
I am using Sysmon to monitor process creation in my Windows environment. Currently, process creation events (Event ID 1) log detailed information about the parent process, such as the full path (ParentImage) and command line (ParentCommandLine). However,…
[Bug report] proc list scroll suddenly freezes when scrolling by mouse wheel
When I try to scroll the process list with a mouse wheel, the scroll stops / sticks / freezes at the end of a single wheel move. Look at the screenshot: a hint on yellow background pops up under cursor (cursor is not visible on screenshot,…