Mfartura's blog
Marcelo Fartura's blog about debugging and general troubleshooting
How to manually translate virtual addresses into physical ones
In previous posts we talked about virtual address space and how virtual memory is managed. I've...
Date: 11/20/2008
A new phase...
Even though this has been a strictly technical channel (I've never posted about anything else other...
Date: 11/20/2008
Kernel dump analysis - Bugcheck 0xA (IRQL_NOT_LESS_OR_EQUAL)
Yet another kernel memory dump to be analyzed - The bugcheck this time is the 0xA -...
Date: 06/25/2008
Kernel dump analysis - Bugcheck 1E (KMODE_EXCEPTION_NOT_HANDLED)
It’s been a long time since my last post, but for some reason lately I’ve been receiving so many...
Date: 06/17/2008
How to attach a debugger from the creation time of the Worker Process (w3wp.exe)
Normally the answer for this would be as simple as use the file image execution options (through...
Date: 08/09/2007
Real case: Application Pool’s worker process (w3wp.exe) crashing during recycling
I was teaching a workshop in London last week and one of the students brought a very interesting...
Date: 08/09/2007
Tip: How many users are hitting my web site?
This is a question we hear very often from our customers, in forums or through distribution lists....
Date: 07/31/2007
Logparser fails when using the ChartType option
I'm posting this as I couldn't find this solution documented anywhere (including within MSFT through...
Date: 07/29/2007
How to identify the process and thread being called in a COM call from a thread stack
I’ve just published a post on how to manually identify which classic ASP page is being processed by...
Date: 07/13/2007
Tip: Kernel Debugging a VPC Server
Here is little tip for you that want to practice kernel mode debugging but either don’t have 2...
Date: 06/20/2007
Real Case: .Net Apps - "No connection could be made because the target machine actively refused it" (basic)
Recently we’ve been receiving (by coincidence) some escalations to troubleshoot the same issue. It’s...
Date: 11/03/2006
A Virus Infection: Contolling the Outbreak (tip)
This weekend I had the opportunity to work along our security specialists (from PSSSec group) in...
Date: 10/24/2006
Lab: Win32 Application causing 100% CPU condition (Advanced)
This is lab for simulating a real 100% CPU condition being caused by a generic Win32 application...
Date: 09/18/2006
/3GB, /PAE, AWE what??? (basic)
I've been following the discussions about these options for a long time. When it seems that...
Date: 09/14/2006
Perfmon's counters output format (tip)
The System Monitor (Perfmon.exe) reports the data gathered through some of its objects and counters...
Date: 09/13/2006