TroubleshootingWithWindowsSysinternalsTools2.pdf

(30692 KB) Pobierz
Troubleshooting
with the Windows
Sysinternals Tools
Mark Russinovich
Aaron Margosis
PUBLISHED BY
Microsoft Press
A division of Microsoft Corporation
One Microsoft Way
Redmond, Washington 98052-6399
Copyright © 2016 by Mark Russinovich and Aaron Margosis
All rights reserved. No part of the contents of this book may be reproduced or transmitted in any form or by any
means without the written permission of the publisher.
Library of Congress Control Number: 2014951871
ISBN: 978-0-7356-8444-7
Printed and bound in the United States of America.
First Printing
Microsoft Press books are available through booksellers and distributors worldwide. If you need support related
to this book, email Microsoft Press Support at mspinput@microsoft.com. Please tell us what you think of this
book at http://aka.ms/tellpress.
This book is provided “as-is” and expresses the author’s views and opinions. The views, opinions and information
expressed in this book, including URL and other Internet website references, may change without notice.
Some examples depicted herein are provided for illustration only and are fictitious. No real association or
connection is intended or should be inferred.
Microsoft and the trademarks listed at http://www.microsoft.com on the “Trademarks” webpage are trademarks
of the Microsoft group of companies. All other marks are property of their respective owners.
Acquisitions Editor:
Devon Musgrave
Developmental Editor:
Carol Dillingham
Project Editor:
Carol Dillingham
Editorial Production:
Waypoint Press
Technical Reviewer:
Christophe Nasarre; Technical review services provided by Content Master, a
member of CM Group, Ltd.
Copyeditor:
Roger LeBlanc
Indexer:
Christina Palaia
Cover:
Twist Creative
Seattle
Contents at a glance
PART I
CHAPTER 1
CHAPTER 2
CHAPTER 3
CHAPTER 4
GETTING STARTED
Getting started with the Sysinternals utilities
Windows core concepts
Process Explorer
Autoruns
USAGE GUIDE
Process Monitor
ProcDump
PsTools
Process and diagnostic utilities
Security utilities
Active Directory utilities
Desktop utilities
File utilities
Disk utilities
Network and communication utilities
System information utilities
Miscellaneous utilities
145
193
219
259
301
351
373
389
401
423
437
461
3
15
41
113
PART II
CHAPTER 5
CHAPTER 6
CHAPTER 7
CHAPTER 8
CHAPTER 9
CHAPTER 10
CHAPTER 11
CHAPTER 12
CHAPTER 13
CHAPTER 14
CHAPTER 15
CHAPTER 16
PART III
CHAPTER 17
CHAPTER 18
CHAPTER 19
CHAPTER 20
CHAPTER 21
CHAPTER 22
TROUBLESHOOTING—“THE CASE OF THE UNEXPLAINED…”
Error messages
Crashes
Hangs and sluggish performance
Malware
Understanding system behavior
Developer troubleshooting
467
495
509
545
607
631
This page intentionally left blank
Zgłoś jeśli naruszono regulamin