duyvh0309
As part of an initiative to track down bottlenecks on the system causing constant light HDD usage, I found that every second, filemon (from sysinternals.com) shows the following activity:
11:52:47 explorer.exe:2416 OPEN C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS Options: Open Access: All
11:52:47 explorer.exe:2416 QUERY INFORMATION C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS Attributes: A
11:52:47 explorer.exe:2416 CLOSE C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS
11:52:47 explorer.exe:2416 OPEN C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS Options: Open Access: Execute
11:52:47 explorer.exe:2416 QUERY INFORMATION C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS Length: 110592
11:52:47 explorer.exe:2416 CLOSE C:\Secuint\Server\AbysswsV2\abyssws.exe SUCCESS
Now I know from something I read earlier that two abyss processes exchange information, but id like to know how to reduce the above constant access by explorer's inteference with abyssws.exe
admin
duyvh0309,
Both abyssws.exe processes exchange information directly using pipes and do not require explorer or any other tool to act as a bridge.
What you're witnessing here is probably Windows Explorer doing some of its magic trying to poll the executable or detect its activity. It's something not standard so we suspect that it's a this party tool installed as a Shell Extension and powered by Explorer which is doing these accesses.