Tripredacus

I wonder how exactly the program works. As I know that Explorer can have little information about things the were originally executed before it, and such "ghosts" can be seen with other programs like Process Explorer. Is it also possible that Session isolation is being a problem? Is whatever is running with CM16 in Session 0 and that is the reason why you can't see anything beyond that it exists?

Whistler is either the Windows codename or the name of that character from the Sneakers movie.

Topic locked.

In this other, but similar, thread on superuser, there is a screenshot of xperf analysis screen showing where CM31 tag can be seen. Perhaps if you could get to that screen you could find out more about what is using that tag. https://superuser.com/questions/1269549/memory-usage-doesnt-add-up-in-windows-10 In that is a post linked by our old friend magicandre, who posts the full instructions for those wanting to play at home: https://superuser.com/questions/949244/windows-10-high-memory-usage-unknown-reason/949246#949246

Yes Xper would be the one.

One thing to note about the name suggestions that have been made, and which are in the poll threads. I did a search on google (without quotes) for the new names to see how many results would appear. For some, there are millions of results for the same terms, some get the millions of results due to google changing the search. When naming a new product, it is always best to research the names being used to make sure there are a low amount of false positive hits, or none if possible. That is the reason I will never vote for "Whistler" because of that term's tie with previous versions of Windows. And that is also why I pick the "New Moon" name to stay as is, because there is precedent and active search results for this exact product using that name.

I only looked at two of the polls. This one (because it is one that I have installed... I think) and the other one, but it was that other one that (at the time) had private voting. Apparently it is has since been fixed. I didn't post about it here due to some sensitivity situation, but just that I had seen one that was public and one that was private. The poll options are as described. There is no "change votes" option anymore. It used to be a feature on IPB and is a feature on other forum software. It is possible the option does exist but is not enabled in group permissions. As for why it won't let people vote. There are two possibilities. 1. The forum may count the option to view results as a null vote. Users who choose to view results prior to voting may not get the option to vote. 2. It is possible those you say they cannot vote had voted in the previous poll. Edit: I voted in the previous poll, and cannot now. I never clicked to view results. I recommend the poll thread itself be re-created. Once it is done, a global or super-v can lock this topic.

I would choose that option, to keep it named as is, rather than what I ended up choosing. Note: poll is set to public, should have been set to private results. Also, poll should be set to allow for users to change votes, as it is often the case a person may change their mind after reading some discussion.

Interesting, I know of a DOS game that doesn't poll the clock, but only once when the program is launched. If you leave it open for over 12 (or 24) hours, the time will go over 24:00. I've seen it over 38:00 but I learned to just not run the game for that long. I do not know if the clock is used for any calculations, it seemed to work normally on the wrong time.

You'll need to trace or debug the application to see what it is looking at to determine what OS is on the host.

Is there any particular reason why the current name "New Moon" is not a poll option and (apparently) cannot be used?

Welcome to the MSFN!

This current trend of spammers creating copy topics and posts is starting to get annoying.

Disable "Controlled Folder Access" in Defender. ref: https://www.tenforums.com/performance-maintenance/129008-chkdsk-f-fails-unspecified-error-occurred.html

I am on Windows 7, but look at the second line of the link I posted. To me (at least) the cacls explanation for usage is laid out easier than that on the icacls page. However, icacls doesn't support SDDL like cacls does.

You should be able to get into the bios setup with no HDD installed. Since it is a notebook try this. Power it off. Remove the battery and unplug AC adapter. Remove HDD. Press power button. Reconnect AC adapter but leave battery out. Turn on and see if you can get into bios. It might take a few tries. Just so you are aware, a misuse of terminology happened here. It is best to point it out because it can cause confusion in certain circumstances. UEFI is a firmware type and a booting method. A disk cannot be UEFI. It can have a GPT disk type as well as an EFI boot application, which will only boot on UEFI firmware or firmware with UEFI support.

Welcome to the MSFN!

Take a look at this Answer: https://answers.microsoft.com/en-us/windows/forum/windows_7-hardware/windows-couldnt-automatically-bind-the-ip-protocol/a2f074cf-be62-435e-b951-42dfbb9351c2 I also have read that some antivirus programs can prevent he binding to occur.

I suspect ACL issues. The security context that Paint runs under may be different than with the Office Picture Manager. Windows Explorer isn't always accurate when showing whether a file is read-only or not. I would recommend going to the command prompt and using attrib to see. Example: E:\Brute!\msfn>attrib installer.bat A E:\Brute!\msfn\installer.bat E:\Brute!\msfn>attrib remover.bat A R E:\Brute!\msfn\remover.bat E:\Brute!\msfn>attrib -r remover.bat E:\Brute!\msfn>attrib remover.bat A E:\Brute!\msfn\remover.bat E:\Brute!\msfn> The attrib command is only showing the file system attributes, A is archive, R is read-only. Two others may appear S for system and H for hidden. Any user accoun in the Everyone group should be able to change any file with A or H attributes. R cannot be changed by anything, and S may only be changed by an Administrator account or one of the security contexts. You can then use cacls to view the security priveledges of files: E:\Brute!\msfn>cacls remover.bat E:\Brute!\msfn\remover.bat BUILTIN\Administrators:(ID)F NT AUTHORITY\SYSTEM:(ID)F NT AUTHORITY\Authenticated Users:(ID)C BUILTIN\Users:(ID)R In the above example, R is Read, C is change and F is full control. An account in the Administrators group can do anything with this file, but an account in the Users group would only be able to read it. An account in the Users group would recieve a message similar to what you had gotten, that the file already exists and cannot be saved, that the file is read-only and/or that you can save it with a different file name. You can use cacls to grant permission to files or directories. https://ss64.com/nt/cacls.html

It is probably because the enhanced security mode is enabled by default on IE on Server OS. With luweitest PoC above, does this always depend on creating an ActiveX control? If so, aren't we well past the point of even thinking of having ActiveX enabled on a device that can access the internet?

The Pittsburgh Penguins tweeted a video about how watching videos online in the 1990s was like and besides not showing 240i RealPlayer videos, they also think Windows XP was the predominant OS of the era.

On the old version I had downloaded, the sample ULs inside of the ULz (you can open those with an archiving program) have links to microsoft.com.

I use it, but on Windows 10. It is an actual program, not something I ever have run in a browser. I recommend you do not use that method of hiding details. Use solid block pen type, use Black or similar color to the text you are trying to hide. Using red in this way means you can easily use a "decoder" image to view and get the text underneath.

If it were me, the 0patch solution is no solution at all, as long as it requires communicating with an external web server that may some day disappear from the internet.

This is a copypasta of this post, for whatever reason: https://msfn.org/board/topic/177638-need-help-getting-error-failed-to-set-data-for-start_searchprograms/ The answer, which apparently is not on the original thread, is: "Do not use compatibility modes on program. Find Start_searchPrograms value in your registry and delete it." Which comes from this page which also has the same exact question: https://muut.com/i/startisback/general:need-help-getting-error-fa