View previous topic :: View next topic |
Author |
Message |
duyvh0309 -
Joined: 25 Jun 2020 Posts: 4
|
Posted: Thu Jun 25, 2020 4:40 pm Post subject: Continual IO between explorer.exe and abyssws.exe |
|
|
As part of an initiative to track down bottlenecks on the system causing constant light HDD usage, I found that every second, filemon (from sysinternals.com) shows the following activity:
11:52:47 explorer.exe:2416 OPEN C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS Options: Open Access: All
11:52:47 explorer.exe:2416 QUERY INFORMATION C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS Attributes: A
11:52:47 explorer.exe:2416 CLOSE C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS
11:52:47 explorer.exe:2416 OPEN C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS Options: Open Access: Execute
11:52:47 explorer.exe:2416 QUERY INFORMATION C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS Length: 110592
11:52:47 explorer.exe:2416 CLOSE C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS
Now I know from something I read earlier that two abyss processes exchange information, but id like to know how to reduce the above constant access by explorer's inteference with abyssws.exe _________________ duyhonda0309 |
|
Back to top |
|
|
admin Site Admin
Joined: 03 Mar 2002 Posts: 1295
|
Posted: Mon Jun 29, 2020 4:36 pm Post subject: Re: Continual IO between explorer.exe and abyssws.exe |
|
|
duyvh0309,
Both abyssws.exe processes exchange information directly using pipes and do not require explorer or any other tool to act as a bridge.
What you're witnessing here is probably Windows Explorer doing some of its magic trying to poll the executable or detect its activity. It's something not standard so we suspect that it's a this party tool installed as a Shell Extension and powered by Explorer which is doing these accesses. _________________ Follow @abyssws on Twitter
Subscribe to our newsletter
_________________
Forum Administrator
Aprelium - https://aprelium.com |
|
Back to top |
|
|
|