Monitoring of hard disk access


Warning: count(): Parameter must be an array or an object that implements Countable in /home/styllloz/public_html/qa-theme/donut-theme/qa-donut-layer.php on line 274
0 like 0 dislike
9 views
The computer has a SSD and a RAID array of two hard drives, Windows 7 Professional x64 on the SSD. When the calculator is launched there is a delay of 10 seconds, at this time heard to spin up hard drives. But in the array are only games, backups, software distributions and virtual machines, nothing systemic. The swap file is also on the SSD.
D:\\>dir /B
Backup
Games
Temp
Virtual Machines
VS_EXPBSLN_x64_enu.CAB
VS_EXPBSLN_x64_enu.MSI

D:\\>dir /A:H /B
$RECYCLE.BIN
System Volume Information

What program can monitor what the system is drawn when you start the calculator?

UPD: launched Process Monitor (FileMon is now part of it), set timer stop drives 1 minute. As it turned out, calc.exe refers not to RAID, and to two other drives. Can anyone explain this?
Log
by | 9 views

3 Answers

0 like 0 dislike
Someone (antivirus?) opened music in the context of a process calculator Windows is remembered and every now and again prefetched this music before launching the calculator.
\r
del %SystemRoot%\\Prefetch\\calc.exe*.pf
\r
From elevational console should help. If will repeat — xperf with stacktrace when referring to the files and see who will fall.
by
0 like 0 dislike
The program FileMon seems to be doing monitoring of the startup programs...
by
0 like 0 dislike
Passion that way.
Nothing in calc.exe soderjatsya code... rootkit This rootkit that collects info about copyright infringement. It analyzes the uploaded content and the folder with the music. That's why he treats these drives.
This is the only reasonable conclusion to be drawn. G)
by

Related questions

0 like 0 dislike
1 answer
0 like 0 dislike
3 answers
0 like 0 dislike
6 answers
110,608 questions
257,186 answers
0 comments
27,881 users