As a full-time writer and researcher, I am forever compiling materials that need to be combed for nuggets of information. Sometimes, particularly in connection with my occasional work as an expert witness, this means LOTS of text and/or source code to search for specific strings — gigabytes of material, on some recent cases. Finding the proverbial needle in the haystack takes time and good tools to accomplish. Caught in a hurry-up pinch recently, I found myself buying and using a tool called Text Finding Professional (V2.1.0, $40 retail download).
Point TFP at a directory tree, let it index the material therein, and it’ll find stuff fast, fast, fast.
As you can see from the foregoing screenshot, the tool will index and search just about any kind of file that contains text (it can handle ASCII, UTF, and other formats with equal aplomb) and show you the names of the files in which hits occur in the results pane at the center. For any given file selected in that pane, it will also show where those hits occur on a line-by-line basis. At $40 for a single-PC license the price is right, too. I had no trouble pointing it at networked or shared drives, though I did have to map them to local drive letters, so it isn’t strictly limited to indexing or reporting on files on a single machine, though that may be thanks to Windows flexible Multiple UNC Provider (MUP) file access abilities.
If you have occasional or regular needs to search files on your PC, especially large collections of textual data, I recommend this tool highly.
Over the years, I’ve always struggled with some Windows drivers that prove more tricky or difficult to install than others. This goes double for those devices whose vendors provide installable executables to handle driver and environment updates, such as Nvidia, Intel, RealTek, Atheros, and others. I don’t blame them for taking this approach because it shields most users from the complexities of updating drivers manually (Device Manager, select device, right-click, Update Driver software, and so forth). But sometimes, the automated tools omit to install some drivers either by accident, oversight, or for more mysterious reasons. That’s when my bag of tricks gets hauled out and brought into play.
1. I use 7zip more or less exclusively as my decompression and unpacking tool. It just so happens to be great at unpacking files inside most executables (like the aforementioned “installable executables”) and letting me inspect their contents. Often, I can find the .cat, .inf, and other driver files in some nicely named directory (e.g. x64Drivers) and use them to attempt a manual driver update. Surprisingly, this works about half the time. The other half requires further fooling around, especially for those executables that don’t unpack into usable files (like the latest Intel chipset drivers, for example).
2. When the unpack and manual update technique fails, it’s time to get more creative. I’ll often turn next to the fantastic and incredibly well-stocked French driver site Station-Drivers (where do they find that stuff? I wonder…) For all the major device makers — Intel, RealTek, most laptop and desktop OEMs, all the networking players, USB, and oodles more) — this site usually has the latest and greatest drivers including stuff that may not ever be officially released or that won’t go public for months and months. Often, a driver found here will bring my devices more up-to-date.
If some of the rumors I hear are true the vendors whose drivers appear here would also like to know where they come from and how they get here!
3. Sometimes, I have to digging inside the driver itself to figure out what it is and starting chasing down related software. Inside the Device Manager, click a Device’s Properties, then the Details tab, then copy the Hardware IDs field(s). These are typically strings that look like this:
Jump onto your favorite search engine, and enter these strings accurately, and you’ll find info and drivers to match quite readily.
You can then look these strings up in your favorite search engine, and sift carefully through whatever pops up in response. This technique is particularly helpful when Windows itself can’t find a driver for some device and it shows up in the Unknown Device category in Device Manager. It can also be helpful when you can’t find a driver using either of the two preceding approaches I’ve described here.
With a little persistence, a certain amount of doggedness, you can use these tricks to solve most driver problems. They’ve served me well in the past decade and more as I’ve worked to keep up with the never-ending parade of new devices and drivers to go with them, and new versions of Windows to help uncover their deficiencies (or outright absence).
Over the weekend, I saw an interesting news item on the Windows 10 Forums. Entitled “Ask Toolbar gets the banhammer on Windows,” it observes that “the Ask Toolbar is a bad thing that nobody wants on their PC.” Having been faced with extirpating this toolbar more times than I would like to recall, and having now trained myself to always refuse its “install by default” behavior when updating Oracle Java, I have to agree with the prevailing consensus that whether or not the Ask Toolbar qualifies as malware, it is indisputably unwanted software for most ordinary mortals. It also includes certain built-in persistence features that make its removal more challenging than most people would like.
For the past 5 or 6 months, Microsoft has agreed with this assessment, primarily because prior versions of the Ask Toolbar caused a pop-up window to appear recommending against resetting the default search provider to some engine other than ask.com. The posting from the Win10 Forums folks starts from the presumption that Microsoft now agrees with other assessments of Ask as “unwanted software.” But when I went to visit the Ask listing at the Microsoft Malware Center this morning, here’s what I found there:
No sooner found than changed: recent updates to the Ask toolbar cause MS to reclassify the Ask toolbar.
I’m not sure that the current and revised MS assessment is warranted — I concur with the ongoing prevailing consensus that the Ask Toolbar remains at least a major PITA, if not something worse than that — but MS has its rules, and it apparently applies them equally to all contenders. Now that Ask has changed its behaviors to no longer “restrict or limit your control over your search provider” and no longer “prevent[s] you from disabling or modifying your search provider,” MS no longer needs to classify it as unwanted software. But at least from February 12 through June 13 of this year, that’s exactly what they called it, and older versions do still retain that classification. Go figure!
What with running two Win10 test machines — a desktop and tablet/convertible — I’ve been banging up against the limits of this new software from time to time, and have had to refurbish some troubleshooting skills. This was called to mind yesterday by two very nice bits of information I came across, each of which related to at least one of those gotchas that helped me formulated to the title for today’s blog post.
When it comes to shooting trouble nothing beats good technique, except perhaps good automated tools.
Those two items are:
1. Sergey Tkachenko runs a small but potent Website called WinAero.com where he comments on Windows stuff, and publishes a wide variety of useful little Windows utilities and tools. Several of them, such as the Winaero WEI (Windows Experience Index, which brings the quick-n-dirty performance ranking back to Win 8 and 10 versions), have showed up in my own postings to this very blog. This particular item popped up a couple of days ago and is entitled “Change network location type (Public or Private) in Windows 10.” Apparently Sergey and I have often experienced the same problem, which is that after updates, between reboots, or upon waking from sleep Win10 often resets the network type from “Private” to “Public.” As he notes in this June 11 post, there actually is a way to get to this setting from the Network and Sharing Center. But it does require a reboot. I’ve found what I think is a simpler, if less direct method: I simply open Homegroup, which tells me that the network is the wrong type to participate. Click Fix and it resets the network type to Private, after which I can again use RDP to remote into my test machines.
2. I subscribe to the great and informative Windows Secrets Newsletter for the princely sum of $15 a year. I like it so much, in fact, that I have it set up to bill my credit card annually for ongoing coverage. Longtime Windows maven Fred Langa has a piece in this week’s offering, also posted 6/11, entitled Free first aid for a wide range of Windows ills, wherein he reminded me of the many windows FixIt tools available and taught me about Microsoft’s Support Diagnostics Program (SDP) and the Microsoft Automated Troubleshooting Server (MATS), two programs about which I’d heard bits and pieces but had never bothered to dig into more deeply than hearsay would allow. What I discovered was a treasure trove of tools for detecting Windows ills, often with fixes to match, that address all kinds of problems from the merely persnickety to the downright catastrophic. Just for grins, I ran MATS on my production PC, and it seemed to chunk through its lengthy laundry list of checks without difficulty.
Always nice to find techniques for troubleshooting, but even better to gain access to good automated tools for that purpose. Thanks, guys!
When the Win10 flag showed up on my Windows 8.1 machines, perforce I signed up for the upgrade, knowing that I must track the latest and greatest of Windows OSes no matter what. I’ve read various opinions on Microsoft’s early upgrade offer that vary all the from clever marketing ploy to a trick from the infernal master and found myself somewhere in the middle of that spectrum. But when a congratulatory e-mail showed up in my inbox yesterday, I found myself leaning more in the former direction (clever marketing) rather than the latter (devilish trick):
If you hand over an email address when you register for the upgrade, you’ll get this e-mail, too.
Having now had a bit more time to think about what’s going on here, I’m still inclined to think of it as a clever marketing ploy and not the Devil’s handiwork. Here’s why: MS is getting an early gauge of interest in Windows 10, and grabbing an early opportunity to reduce its support burden by lowering the number of users of older products and concentrating them (or trying to, anyway) on their latest and greatest desktop offering. At the same time, MS can reduce the first- and early-days load on the Akamai servers that usually provide the downloads (and this one is bound to be 2-3 GB in size) by trickling out those big files starting days before July 29 when the real onslaught begins.
Upon further reflection I do have to say it appears to be a very clever marketing and business ploy because it helps get the word out, keeps the new release in the public’s eye (or on their notification bar, at least), and helps the company make best use of bandwidth and server resources. Very interesting, and quite possibly also, a nice piece of work.
Every now and then I like to drop into NetMarketShare.com and see what’s up on the Internet with desktop operating systems. Even as they grow increasingly passe and irrelevant, I’m still fascinated to watch those dynamics unfold. However antediluvian this makes me, I’m not ashamed that I still spend my working days staring at a big screen with big PC iron behind it. Forgive me if that’s not where you live, and I hope you’ll indulge this modest preoccupation nonetheless.
Add up Win8 and Win8.1 counts and you get 16.45% which tops XP’s 14.6% share.
[Source:NetMarketShare.com Desktop OS Marketshare by version 6/9/2015]
I guess I missed the cutover date, because the last time I checked the situation was in late April. But now, at least, the end-of-life OS that lasted so very long and ruled so very many desktops has fallen behind the current valid incarnations of Windows. I’m not sure this is cause for celebration anywhere except Redmond. However, it is an important sign that despite the occasional case of “you’ll pry my XP out of my cold, dead hands,” common sense regarding the security and stability of no-longer-supported OSes is beginning to register around the world.
With the official release of Windows 10 due at the end of next month (July 29) it will be even more interesting to see how soon Windows 10 registers on this particular radar (it’s apparently still behind Linux at 1.57%, languishing somewhere in the “Other” category). After it starts to show on the radar, I’m even more curious to learn if Win10 will surpass Win8 before Win7 shuffles off the map. Got that?
Two days ago a strange little Windows flag icon appeared in the notification bar on my Windows 8.1 PCs. A quick mouse-over on the icon produced the text “Get Windows 10.” An equally quick click produced a Window offering early access to the upcoming and already promised free upgrade to the new OS when it becomes available on July 29, as shown here:
You can reserve a copy of Windows 10, which means it will trickle onto your PC before July 29, and become installable that very day.
A fair amount of system spelunking was required to determine that update KB3035583, which appears in my Update History files on or around May 15, is responsible for the appearance of the icon, which remains lodged in your notification bar once it pops up (unless you uninstall that selfsame update, then hide it so it won’t appear again unless you decide to re-enable it later). Among the various articles I found that helped me get this all figured out, Ed Bott’s ZDNet story “Get Windows 10: Microsoft’s biggest software upgrade in history begins today” (posted 6/1/2015) was the most helpful, so I’ll give it a nod and a shout-out here.
Something I haven’t seen mentioned in other coverage is what happens to Windows Update once you do reserve an upgrade. The usual display on the home screen is replaced by a confirmation of your reservation that looks like this:
The confirmation is a novelty at first, but you must now click the “Show all…” link to see if you have any current updates pending .
As far as I can tell, the real upshot of accepting the free upgrade offer is that until it takes effect you must click the “Show all available updates” link to check for pending updates, instead of clicking a link that says “Check for updates.” Don’t ask me why, but I find this mildly irritating. Others are somewhat more galled, with Windows maven Paul Thurrott probably the most outspoken in his reaction. I got a chuckle or two from the story that voices his pique on this subject entitled “Ask Paul: Why Do You Need to Reserve the Windows 10 Upgrade?;” if you read it, perhaps you will, too!
At any rate, this is something that those Windows 7, 8, and 8.1 users who do elect to reserve their upgrade will have to get used to seeing for the next 8 weeks, as the clock ticks its way down to July 29, and users will have the opportunity to make it go away. That upgrade will be around 3GB in size, according to various sources (including the afore-cited articles) so you’ll want to make sure the target drive for your “Downloads” folder/library has sufficient free space to accommodate this item as it trickles its way onto your soon-to-be upgraded PC(s).
If you’ve been reading this blog lately, you’ve seen my recent discovery that duplicate or outmoded drivers in the Windows 10 DriverStore can unnecessarily bulk up the size of the RecoveryImage folder that Windows 10 builds each time an upgrade or clean install is performed (if not, check out the list of links at the end of this post for those pointers). I’ve been noodling away at this lately, and have learned that RecoveryImage also applies to the “Reset this PC” option available in (Settings, Update & Security, Recovery) as well. I sort of figured this might also tie into the Refresh this PC facility familiar to those who’ve worked with various Windows 8 versions (nicely documented in Steven Sinofsky’s “Refresh and reset your PC” post in the Building Windows 8 blog).
Windows 10 does not recognize the recimg.exe (“record image” AFAIK) program at all!
Once I realize that the RecoveryImage files played into the refresh/reset paradigm, I figured that I might be able to delete the bloated version on my desktop test PC (~20GB) as compared to the more svelte version on my Venue 11 Pro tablet (2.38GB). But alas, when I went to build a custom refresh image to replace the reset image created during Windows install for Build 10130, I discovered that recimg.exe was nowhere to be found and thus also unusable for that purpose, as shown in the preceding screen cap. Sigh.
Of course, I can (and still do) continue to rely on image backup through the Windows 10 OS (more easily accessed through the Control Panel widget named available since Build 10122. But it doesn’t offer the incredible convenience of “Refresh your PC” which replaces only OS components and app installs it encompasses, while leaving files, preferences, and settings alone. I sincerely hope MS has merely turned this feature off for the technical preview, and plans to add it back in for RTM and GA releases of Windows 10. I’ve already fired off a couple of urgent Windows Feedback requests in that vein, and remain hopeful that somebody back at MS Galactic HQ is listening, and interested enough to act on this. If it’s gone for good in Win10, I’ll really miss it.
Previous Posts on RecoveryImage
While perusing the postings over at the Windows 10 Forums earlier, I caught an item there entitled “Trimming down Win10TP” that taught me a new way to use the Deployment Image Servicing and Management tool (aka DISM). According to the DISM reference on TechNet, it involves adding a couple of different switches to the by-now-familiar DISM /online /cleanup-image sequence.
Lots of building blocks go into Windows images, so lots of blocks can be (occasionally) cleaned-up.
[Image Credit: Shutterstock 223942717 © IndianSummer]
Those two switches are
1. /StartComponentCleanup, which TechNet explains as intended “to clean up the superseded components and reduce the size of the component store” (WinSXS).
2. /ResetBase, which TechNet explains as intended “to reset the base of superseded components, which can further reduce the component store size.”
Nothing loath, I tried them both! I’ve already cleaned up my driver store, and gotten rid of leftover update detritus and Windows.old installations on all these machines, but I did get from just under 1 GB to 2.1 GB back on the various machines I tried it on, including both Windows 8.1 and 10 (Build 10122) installations. Here’s a short table of results:
|Results of running DISM to clean Component Store (WinSXS)|
|Machine||Brief stats||OS||B4 C: size (GB)||After C: size|
|Dell Venue 11 Pro||i5/8GB RAM/256GB SSD||Win10||36.9||34.8|
|i7-4770K Desktop||i7/32GB RAM/256GB SSD||Win10||69.9||68.3|
|Production desktop||i7/32GB RAM/500GB SSD||Win8.1||98.7||97.9|
|Surface Pro 3||i7/8GB RAM/256GB SSD||Win8.1||60.4||59.9|
I wouldn’t call these earth-shattering space savings, but any time you can save another gig (sometimes more) of space, and tidy up Windows at the same time, I’m inclined to endorse the activity involved. I can also say it took a great deal longer for Windows 8.1 to crank its way through the work involved in this clean-up as compared to Windows 10. On the Win10 PCs it took under two minutes to finish up, on each of the Windows 8.1 PCs it took between 5 and 10 minutes to complete.
There’s a caveat to keep in mind, too: If you run the /ResetBase switch, you will thenceforth be unable to roll back any Windows Updates installed on that PC. This has yet to bite me on the hindquarters, but it is worth remembering, especially in corporate environments, where updates are carefully and cautiously applied anyway.
When I wrote a blog post on May 11 entitled “The Importance of DriverStore Cleanup,” little did I know the post would turn out to be both useful and prophetic. But after investigating the disk layout for the recently-released Build 10122 of Windows 10, I was struck by the difference in size for the RecoveryImage folder on my two test machines. The Dell Venue 11 Pro showed that folder with a size of 2.4 GB, while the same folder for the i7-4770K desktop weighed in at a hefty 20.4 GB instead. “Hmmmmm” I found myself wondering, “could drivers somehow be involved in this difference?”
After the upgrade on the desktop PC, I found only 14 drivers in the DriverStore for Build 10122.
A bit of spelunking into the causes for such a difference revealed that the RecoveryImage folder includes a sub-folder named Drivers. Further spelunking showed me that this folder is 1.7 MB on the Dell, and 18.1 GB on the desktop. That sure seems to suggest that drivers can occupy a LOT of space when the Windows installer uses a current image to generate a recovery image during the installation process, don’t it?
Further investigation shows over 120 sub-folders in the /Drivers/Regular directory tree on the desktop PC, where many (80%) of those folders include duplicate content with anywhere from 2 to 40 other such folders. Alas, the names of the entries therein appear to be auto-generated, and aren’t easy to puzzle out completely, though an inspection of their contents will help point seriously interested investigators at the relevant drivers represented therein. By comparing those names to other images of the same drive and a backup from the DriverBackup utility, I was able to determine that my duplicates came primarily from two sources: the Nvidia graphics card in that PC, and the RealTek audio circuitry on its MSI motherboard.
I take three lessons from this encounter:
1. It’s a good idea to check your driver store before any Windows 10 (or other Windows) upgrade to see how big it has grown. If it’s over 5 GB in size, you’ll want to prune it to reduce the size of the RecoveryImage that Windows 10 builds automatically during the install process.
2. It looks very much as if when Windows supplies drivers via Windows Update, multiple copies of the same driver often wind up in the driver store. Any time you get a driver from WU, it’s probably worth checking the store to see what new inventory has showed up on its shelves, so to speak. The CodePlex RAPR.EXE utility is just what you need for this task.
3. It’s probably a good to best Windows maintenance practice to check your driver store anywhere from 2 to 4 times a year, to eliminate clutter therein. Those who, like me, enjoy fooling with drivers and obsess about keeping them up-to-date will need to check at the higher frequency; those who avoid drivers except under duress can check at the lower frequency.
The urgency of these tasks (especially item 1 above) will be inversely proportional to the size of the boot/system drive where the upgrades occur. Those with tablets that have only 64 or 128 GB of storage will find this effort quite rewarding, but the payback for the work diminishes for those with 500 GB or more in their boot/system volume. I want to keep monitoring the driver store to see if my theories about WU driver delivery have any merit, and I’ve already proven to myself that item 3 is worth doing, if only because I tinker so much with drivers that I tend to load my driver store down pretty heavily over time. YMMV on that last item, as the old acronym goes!