XPost: alt.comp.os.windows-10
From: nospam@needed.invalid
On Thu, 2/19/2026 4:20 PM, micky wrote:
> Using win11 but you win10 guys are pretty sharp. Did
>
> In alt.comp.os.windows-11, on Thu, 19 Feb 2026 10:59:42 -0500, Paul
> wrote:
>
>>
>> Process Monitor, Filter set to "Operation is Readfile/Writefile/Createfile",
>> then look to see if a particular partition letter is being accessed.
>>
>> https://learn.microsoft.com/en-us/sysinternals/downloads/procmon
>
> Can't get to Agent or Eudora either (like Firefox) to type results when
> procmon running. Is that normal?
>
> Fortunely I've learned the secret method in win11 to take screen shots.
> Af least that worked.
>
> 504 Create file E:\ Success Desired Access R...
> 504 File sysem cont E:\ Invalid Device R. Control 0x9023c(D...
> 504 Close file E:\ Success
>
> And more stuff like this. I'll give more details if anyone wants.
> So why is it doing this, trying to access the drive? And how can I make
> it stop?
>
On the 0x9023c IOCTL call, I can't find any examples
at all of using that. There seems to be such an IOCTL,
but maybe that activity is nefarious.
I hope the machine has been "fully rebooted" at least
once, to check and see whether this is some sort of
Windows Update side effect.
Another possibility, is the USB stick is a SONY, with a
reversed sense RMB (Removable Media Bit) and the USB
stick is claiming it is a HDD.
And as for Procmon, it should not block other activity
on the computer. Perhaps if the computer had a single
core, there could be some fighting going on for CPU
cycles.
I would test with a second USB stick, like a Cruiser Glide.
Paul
--- SoupGate-DOS v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)
|
