|
OK, I tried FileMonitor and there is a lot of activity going on, but I don't really know what it all is.
Maybe someone can tell me if they know what this all means.
While my system is sitting idle, here is what I see..........
10:42:47 AM explorer.exe:1692 IRP_MJ_CREATE C:\ SUCCESS Attributes: Any Options: Open Directory
10:42:47 AM explorer.exe:1692 IRP_MJ_QUERY_VOLUME_INFORMATION C:\ SUCCESS FileFsQuotaSetInformation
10:42:47 AM explorer.exe:1692 IRP_MJ_CLEANUP C:\ SUCCESS
10:42:47 AM explorer.exe:1692 IRP_MJ_CLOSE C:\ SUCCESS
10:42:47 AM explorer.exe:1692 IRP_MJ_CREATE D:\ SUCCESS Attributes: Any Options: Open Directory
10:42:47 AM explorer.exe:1692 IRP_MJ_QUERY_VOLUME_INFORMATION D:\ SUCCESS FileFsQuotaSetInformation
10:42:47 AM explorer.exe:1692 IRP_MJ_CLEANUP D:\ SUCCESS
10:42:47 AM explorer.exe:1692 IRP_MJ_CLOSE D:\ SUCCESS
10:42:48 AM System:4 IRP_MJ_WRITE* C:\$LogFile SUCCESS Offset: 63574016 Length: 28672
10:42:53 AM System:4 IRP_MJ_WRITE* C:\$LogFile SUCCESS Offset: 63602688 Length: 24576
10:42:54 AM System:4 IRP_MJ_WRITE* C:\$Mft SUCCESS Offset: 26845184 Length: 8192
10:42:54 AM System:4 IRP_MJ_WRITE* C:\Program Files\Common Files\Symantec Shared\VirusDefs SUCCESS Offset: 0 Length: 4096
10:42:58 AM System:4 IRP_MJ_WRITE* C:\$LogFile SUCCESS Offset: 63627264 Length: 24576
and this goes on and on..any suggestions or ideas ?
TIA
|