Mystery-Ware
-
Do we have a group for questions about Windows 10 in specific ? Mine is, about once every two or three weeks, doing something weird (no clue what that "weird" something is). After the weird thing... - I am **NOT** able to connect to any https:// type of site - I **AM** able to connect to any http:// type of site The current "Fix" is windows restore; generally to go back X-Number of days; where X is highly indeterminate Again, if there's a better place to ask this on this site, please point me.
-
Do we have a group for questions about Windows 10 in specific ? Mine is, about once every two or three weeks, doing something weird (no clue what that "weird" something is). After the weird thing... - I am **NOT** able to connect to any https:// type of site - I **AM** able to connect to any http:// type of site The current "Fix" is windows restore; generally to go back X-Number of days; where X is highly indeterminate Again, if there's a better place to ask this on this site, please point me.
-
Do we have a group for questions about Windows 10 in specific ? Mine is, about once every two or three weeks, doing something weird (no clue what that "weird" something is). After the weird thing... - I am **NOT** able to connect to any https:// type of site - I **AM** able to connect to any http:// type of site The current "Fix" is windows restore; generally to go back X-Number of days; where X is highly indeterminate Again, if there's a better place to ask this on this site, please point me.
It'll probably be hard to track that sort of thing down unless you do some extensive logging, or catch it in the act. It just so happens that last week I was playing with WMI's event watcher...essentially, tracking and logging each and every process that launches, its path on disk, and any command line args it received. It's amazing how much crap nowadays is taking place automatically, all the time, on Windows - recent versions about 10x as worse as, say, 7. Anyway, if you could log every process that launches/shuts down, and then eliminated the noise, and you had a decent idea *when* the problem starts, I'd bet you could narrow it down somewhat quickly. The gist of it is: private bool SetupEventWatcher() { if (Watcher != null) return false; int nTimespanInSeconds = 1; string strScope = @"\\.\root\CIMv2"; string strWQL = $"SELECT * FROM __InstanceOperationEvent WITHIN {nTimespanInSeconds} WHERE TargetInstance ISA 'Win32_Process'"; Watcher = new ManagementEventWatcher(strScope, strWQL); Watcher.EventArrived += new EventArrivedEventHandler(OnEventArrived); Watcher.Start(); return true; } private void OnEventArrived(object sender, EventArrivedEventArgs e) { // Ignore __InstanceModificationEvent, you'll get tons and they're useless TrackedEventType tet = TrackedEventType.Unknown; if (e.NewEvent.ClassPath.ClassName == "__InstanceCreationEvent") tet = TrackedEventType.Creation; if (e.NewEvent.ClassPath.ClassName == "__InstanceDeletionEvent") tet = TrackedEventType.Deletion; if (tet == TrackedEventType.Unknown) return; foreach (PropertyData pd in e.NewEvent.Properties) { // pd.Name = SECURITY_DESCRIPTOR, TargetInstance, TIME_CREATED if (pd.Name == "TargetInstance") { if (pd.Value is ManagementBaseObject mbo) { if ( mbo.Properties is PropertyDataCollection pdc ) { // ~45 properties ListViewItem lvi = CreateEventLVI(tet, mbo.Properties); if (lvi != null) InsertEventLVI(lvi); } } } } } private ListViewItem CreateEventLVI(TrackedEventType tet, PropertyDataCollection pdc) { foreach (PropertyData pd in pdc) { if (pd.Name == "Name") ...pd.Value is the name of the EXE if (pd.Name == "CommandLine") ...pd.Value contains the cmd line args } // foreach PropertyData I'm using a ListView to show processes that got created/deleted, but I suggest you just dump it to a plain-text file
-
Do we have a group for questions about Windows 10 in specific ? Mine is, about once every two or three weeks, doing something weird (no clue what that "weird" something is). After the weird thing... - I am **NOT** able to connect to any https:// type of site - I **AM** able to connect to any http:// type of site The current "Fix" is windows restore; generally to go back X-Number of days; where X is highly indeterminate Again, if there's a better place to ask this on this site, please point me.
I think the group for Win 10 weirdness, now, is "The Weird & The Wonderful" ... but, I think you are right: we need to have another forum, perhaps named "Windowssuks."
«The mind is not a vessel to be filled but a fire to be kindled» Plutarch