Re: Hard Disk Activity

"Jeremiah D. Seitz" <jseitz@xxxxxxxxxxxxxxxxx> wrote in message
news:opjmo4pasb5bv562equqlt5r7cgs5ni3oj@xxxxxxxxxx
On Thu, 5 Feb 2009 13:42:16 -0500, "expvb" <nobody@xxxxxxx> wrote:

"Lorin" <lorinm@xxxxxxxxxxx> wrote in message
news:D7418941-9D68-43E2-ABD9-244F444C6CD1@xxxxxxxxxxxxxxxx
I already did all that and do not see what is doing it.
Task Manger does not show the indexing service.
The Process Explorer does not show anything either.

What about filemon? Or using FindFirstChangeNotification?

FileMon is a good recommendation, but I wouldn't count on
FindFirstChangeNotification.

When I was working on my defragger I ran into problems on Win2K
systems where the file system was being changed, causing errors. I
tried to use FFCN to determine the cause of the problem, but it didn't
work reliably.

Apparently, an application needs to explicitly broadcast a message in
order for FFCN to detect the change. If an application modifies the
file system, but neglects to broadcast the message, no changes are
detected.

Maybe you were using SHChangeNotify?

Filemon and most SysInternals tools have device drivers embedded in the
EXE(Usually SYS/DLL/VXD file). It auto extracts and install the driver then
talks to it, so it can't be duplicated by VB6, but one can write a driver in
C++, and talk to it from VB6, but one needs to be careful as VB is not
thread safe, so callbacks should be avoided.

They have a book called Windows Internals, but it's devoid of source code.
However, it explains the process, but one needs to know how to make drivers,
by downloading and reading the DDK. Here is a link to the page about the
book and a sample chapter(67 pages) about how the Registry, Services and WMI
work. Look for subtopic called "Regmon Internals" for details about how it
works.

Windows Internals Book
http://technet.microsoft.com/en-us/sysinternals/bb963901.aspx


.

Relevant Pages

  • Re: Hard Disk Activity
    ... Task Manger does not show the indexing service. ... The Process Explorer does not show anything either. ... What about filemon? ... Or using FindFirstChangeNotification? ...
    (microsoft.public.vb.general.discussion)
  • Re: Need help: Port 445 flood
    ... with the port use. ... Process Explorer will give a lot more detail of processes if you ... Autoruns will show much more detail what ... Filemon will display live ...
    (microsoft.public.windows.server.security)
  • Re: Hard Disk Activity
    ... Or using FindFirstChangeNotification? ... FileMon is a good recommendation, ... systems where the file system was being changed, ... an application needs to explicitly broadcast a message in ...
    (microsoft.public.vb.general.discussion)
  • Re: something downloading to hard drive constantly
    ... Download SysInternal's FileMon. ... should help run down the "Culprit". ... They also have a Process Explorer ... FileMon can be back traced, ...
    (microsoft.public.windowsxp.general)
  • Re: Periodic Disc I/O at approx 1 sec
    ... Dan, ... Filemon will show what file is being accessed, and what process is accessing it. ... If it's NOT a file access, try Regmon and Process Explorer, also ...
    (microsoft.public.windowsxp.perform_maintain)