G
Guest
Hello
I notice sitting idle and running the Sysinternal program "filemon". that
Explorer.EXE is accessing a partition thats not the c: drive.
I was wondering how can I find out what and why explorer is accessing a
partition drive that is only used to store misc files ...while sitting idle?
Here is a snippet of the log file from filemon. It s the E and F drive
63 11:28:56 AM nSvcIp.exe:904 CLOSE C:\WINDOWS\system32\hnetcfg.dll SUCCESS
64 11:28:56 AM nSvcIp.exe:904 QUERY
INFORMATION C:\WINDOWS\system32\hnetcfg.dll SUCCESS Attributes: A
65 11:28:56
AM nSvcIp.exe:904 OPEN C:\WINDOWS\system32\hnetcfg.dll SUCCESS Options: Open
Access: 00100020
66 11:28:56 AM nSvcIp.exe:904 CLOSE C:\WINDOWS\system32\hnetcfg.dll SUCCESS
67 11:29:04 AM explorer.exe:156 OPEN E:\ SUCCESS Options: Open Directory
Access: 00100001
68 11:29:04 AM explorer.exe:156 QUERY
INFORMATION E:\ SUCCESS FileFsFullSizeInformation
69 11:29:04 AM explorer.exe:156 CLOSE E:\ SUCCESS
70 11:29:04 AM explorer.exe:156 OPEN F:\ SUCCESS Options: Open Directory
Access: 00100001
71 11:29:04 AM explorer.exe:156 QUERY
INFORMATION F:\ SUCCESS FileFsFullSizeInformation
72 11:29:04 AM explorer.exe:156 CLOSE F:\ SUCCESS
73 11:29:05 AM nSvcIp.exe:904 QUERY
INFORMATION C:\WINDOWS\system32\winlogon.exe SUCCESS Attributes: A
I notice sitting idle and running the Sysinternal program "filemon". that
Explorer.EXE is accessing a partition thats not the c: drive.
I was wondering how can I find out what and why explorer is accessing a
partition drive that is only used to store misc files ...while sitting idle?
Here is a snippet of the log file from filemon. It s the E and F drive
63 11:28:56 AM nSvcIp.exe:904 CLOSE C:\WINDOWS\system32\hnetcfg.dll SUCCESS
64 11:28:56 AM nSvcIp.exe:904 QUERY
INFORMATION C:\WINDOWS\system32\hnetcfg.dll SUCCESS Attributes: A
65 11:28:56
AM nSvcIp.exe:904 OPEN C:\WINDOWS\system32\hnetcfg.dll SUCCESS Options: Open
Access: 00100020
66 11:28:56 AM nSvcIp.exe:904 CLOSE C:\WINDOWS\system32\hnetcfg.dll SUCCESS
67 11:29:04 AM explorer.exe:156 OPEN E:\ SUCCESS Options: Open Directory
Access: 00100001
68 11:29:04 AM explorer.exe:156 QUERY
INFORMATION E:\ SUCCESS FileFsFullSizeInformation
69 11:29:04 AM explorer.exe:156 CLOSE E:\ SUCCESS
70 11:29:04 AM explorer.exe:156 OPEN F:\ SUCCESS Options: Open Directory
Access: 00100001
71 11:29:04 AM explorer.exe:156 QUERY
INFORMATION F:\ SUCCESS FileFsFullSizeInformation
72 11:29:04 AM explorer.exe:156 CLOSE F:\ SUCCESS
73 11:29:05 AM nSvcIp.exe:904 QUERY
INFORMATION C:\WINDOWS\system32\winlogon.exe SUCCESS Attributes: A