lastalive0.dat lastalive1.dat

G

Guest

Hi,

I have something writing to the hard drive once every minute or so. I'm
assuming this is preventing my laptop hard disk from sleeping when off power.

It writes to 2 files, flipping between them: lastalive0.dat lastalive1.dat

The process is svchost.exe.

The files are in:

c:\windows\serviceprofiles\localservice\appdata\local\lastaliveX.dat

The stack trace (according to sysinternals process monitor) is:

0 fltmgr.sys FltRequestOperationStatusCallback +
0xd25 0x8073f843 C:\Windows\system32\drivers\fltmgr.sys
1 fltmgr.sys FltGetIrpName +
0x774 0x80741f10 C:\Windows\system32\drivers\fltmgr.sys
2 fltmgr.sys FltGetIrpName +
0x104f 0x807427eb C:\Windows\system32\drivers\fltmgr.sys
3 fltmgr.sys FltGetIrpName +
0x146b 0x80742c07 C:\Windows\system32\drivers\fltmgr.sys
4 ntkrnlpa.exe IofCallDriver +
0x64 0x81c27ecf C:\Windows\system32\ntkrnlpa.exe
5 ntkrnlpa.exe IoIsFileObjectIgnoringSharing +
0x344d 0x81d88f65 C:\Windows\system32\ntkrnlpa.exe
6 ntkrnlpa.exe NtWriteFile + 0x725 0x81d94358 C:\Windows\system32\ntkrnlpa.exe
7 ntkrnlpa.exe KeReleaseInStackQueuedSpinLockFromDpcLevel +
0xba2 0x81c8c96a C:\Windows\system32\ntkrnlpa.exe
8 ntdll.dll ZwWriteFile + 0xc 0x77dd06d0 C:\Windows\System32\ntdll.dll
9 wevtsvc.dll ServiceMain + 0xce12 0x74b4809d c:\windows\system32\wevtsvc.dll
10 wevtsvc.dll ServiceMain + 0xcbf9 0x74b47e84 c:\windows\system32\wevtsvc.dll
11 kernel32.dll BaseThreadInitThunk +
0x12 0x77913833 C:\Windows\system32\kernel32.dll
12 ntdll.dll LdrInitializeThunk +
0x4d 0x77daa9bd C:\Windows\System32\ntdll.dll

Is this a known issue?

D.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top