RE Excessive Hard Drive activity.

H

Harold A. Climer

In reference to my recent message about Hard Drive activity I also I
have noted several strange things about my Hard Drives. (C:/
especially.)
Using Norton Speeeddisk I have only been able to only get down to 25%
fragmentation from about 46%.
When I used the Windows defragmenter utility it reports from 2% down
to less than 1%.
Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?
Could it be that the hard drive controller on the motherboard is
flaky?
Once defragmented it, takes less that a day to get back up to 40+%
fragmentation.

The excessive read or writes is still occurring. Each event lasts
from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.
There is no evidence of it in the event log. No error messages
Is there a program that records HD read and write activity?
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)
 
N

Nate Grossman

Harold A. Climer said:
In reference to my recent message about Hard Drive activity

[snip]

You were stupid starting a new thread. You should have posted this to
that "recent" thread.
 
H

Harold A. Climer

Harold A. Climer said:
In reference to my recent message about Hard Drive activity

[snip]

You were stupid starting a new thread. You should have posted this to
that "recent" thread.

I do not want to start a flame war, but who in the hell do you think
you are!
I asked a simple polite question and I at least expect a reply that
is the same. Or no reply at all.
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)
 
G

Gerry

Harold

I would be interested in seeing a Disk Defragmenter report . Open Disk
Defragmenter and click on Analyse. Select View Report and click on Save
As and Save. Now find VolumeC.txt in your My Documents Folder and post a
copy.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
U

Unknown

Does this still occur if you shut down virus scanning programs?
Have you checked Taskmanager to see whets running
Harold A. Climer said:
Harold A. Climer said:
In reference to my recent message about Hard Drive activity

[snip]

You were stupid starting a new thread. You should have posted this to
that "recent" thread.

I do not want to start a flame war, but who in the hell do you think
you are!
I asked a simple polite question and I at least expect a reply that
is the same. Or no reply at all.
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)
 
D

Daave

Harold said:
In reference to my recent message about Hard Drive activity I also I
have noted several strange things about my Hard Drives. (C:/
especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the same
issue. It makes it difficult for people to get all the relevant
information. If it has been a long while, I can understand wanting to
start a new thread (I'm not sure two weeks is considered a long
time...). At the least, a link to that other thread should have been
included in your post. Fortunately, I haven't deleted your other post
yet, so as a public service, here is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with SP3
installed.
I have two hard drives installed with partitions C and D on the master
drive and K and L on the slave drive. I also have a Maxtor USB I TB
drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it has
been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in disk
access compared to before de fragmentation. At times the little yellow
disk activity light is on almost constantly on and for long periods of
time.
Originally I had my Page File on Drive C (400GB and about half full).
Today I moved the page file to Drive K( 300GB with about 50GB of files
on it). As per Microsoft article on Virtual memory etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond to a
mouse click to get it started or to access the Start menu, etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with the
placement of the pagefile on a separate hard drive (which *may* yield
*slightly* better performance... then again you might not notice any
improvement at all...), let's get back to basics. Only your system drive
(C:) needs a pagefile. Let's make sure (first) that *none* of your
drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the current
total physical size of all page files that may be in existence is shown.
Click Change to make settings for the Virtual memory operation. Here you
can select any drive partition and set either 'Custom'; 'System Managed'
or 'No page file'; then always click Set before going on to the next
partition.

So, in your case, Harold, for each of your four partitions, select "No
paging file."

By the way, it is at *this* time (with no pagefiles), that you should
want to defrag your hard drive! There will be no fragmentation in your
pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time select
"System managed size," which is almost always the best (or close to it)
setting.

At some point in the future, you can experiment with locating your
system drive's pagefile on either K: or L: (whichever one is the "basic"
drive... note in Alex's info that "n relocating the page file, it
must be on a 'basic' drive. Windows XP appears not to be willing to
accept page files on 'dynamic' drives.), but for now, it's not a
priority.
Using Norton Speeeddisk I have only been able to only get down to 25%
fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help your
curiosity, use its defrag function after you delete your pagefile. Just
make sure to recreate it when you are finished! Windows XP needs it to
operate efficiently.
When I used the Windows defragmenter utility it reports from 2% down
to less than 1%.

Sounds good.
Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP like it
used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can certainly
cause excessive hard drive activity. What is the current malware status
of your PC? What antimalware programs do you use? Do they have the most
up-to-date definitions?
Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.
Once defragmented it, takes less that a day to get back up to 40+%
fragmentation.

The excessive read or writes is still occurring. Each event lasts
from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting in the
way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the "Processes"
tab. Click CPU (third column probably) twice so that the processes using
the most resources are at the top. Jot down the top five. What are their
names?

Finally, while you are in Task Manager, click on the "Performace" tab.
Look under Commit Charge (K) in the lower left-hand corner. What are the
values for Total, Limit, and Peak? Knowing these figures along with how
much RAM is installed will give us a good idea on how much you are
paging.
 
H

Harold A. Climer

Harold

I would be interested in seeing a Disk Defragmenter report . Open Disk
Defragmenter and click on Analyse. Select View Report and click on Save
As and Save. Now find VolumeC.txt in your My Documents Folder and post a
copy.
Volume HP_PAVILION (C:)
Volume size = 362 GB
Cluster size = 4 KB
Used space = 192 GB
Free space = 170 GB
Percent free space = 47 %

Volume fragmentation
Total fragmentation = 2 %
File fragmentation = 5 %
Free space fragmentation = 0 %

File fragmentation
Total files = 208,266
Average file size = 1 MB
Total fragmented files = 4,243
Total excess fragments = 180,580
Average fragments per file = 1.86

Pagefile fragmentation
Pagefile size = 3.00 GB
Total fragments = 55

Folder fragmentation
Total folders = 15,527
Fragmented folders = 32
Excess folder fragments = 267

Master File Table (MFT) fragmentation
Total MFT size = 238 MB
MFT record count = 230,572
Percent MFT in use = 94 %
Total MFT fragments = 3

--------------------------------------------------------------------------------
Fragments File Size Most fragmented files
2,117 132 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP534\A0269095.REG
1,825 202 MB \System Volume
Information\catalog.wci\00010006.ci
644 58 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP533\snapshot\_REGISTRY_MACHINE_SOFTWARE
642 58 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP534\snapshot\_REGISTRY_MACHINE_SOFTWARE
580 58 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\snapshot\_REGISTRY_MACHINE_SOFTWARE
429 289 MB \Program
Files\Qualcomm\Eudora\Mailbox\In.mbx
360 23 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP528\A0264208.exe
354 2 MB \Documents and Settings\All
Users\Application Data\Intuit\Common\Update
Service\v2\Logs\ClientLog.txt
275 17 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\A0268906.dll
251 22 MB \Documents and
Settings\HP_Administrator\Local Settings\Application
Data\Mozilla\Firefox\Profiles\2ssyj1ex.default\urlclassifier3.sqlite
224 14 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\A0268912.dll
200 13 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\A0268945.dll
191 12 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\A0268970.dll
186 12 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\A0268934.dll
176 11 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP528\A0264436.dll
170 11 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\A0268880.dll
164 10 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\A0268915.dll
163 11 MB \RECYCLER\NPROTECT\00719478.SQL
152 10 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP531\A0266443.dll
151 11 MB
\WINDOWS\pchealth\helpctr\DataColl\CollectedData_6615.xml
148 9 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP529\A0265467.dll
143 20 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\snapshot\Repository\FS\OBJECTS.DATA
141 4 MB \Documents and Settings\All
Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate
127 1 KB \Documents and
Settings\HP_Administrator\ntuser.dat.LOG
126 8 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\A0268899.dll
123 19 MB \Documents and Settings\All
Users\Application
Data\Microsoft\eHome\EPG\ec921793b63947359a0318b537ccd6da.sdf
112 20 MB \Documents and Settings\All
Users\Application
Data\Microsoft\eHome\EPG\3f6a6cbeecfa47f9a7c5ad6ab4fec275.sdf
107 8 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP531\A0266445.dll
107 7 MB \System Volume
Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP532\A0268892.dll
105 11 MB
\WINDOWS\pchealth\helpctr\DataColl\CollectedData_6525.xml


Note: Norton Speed Disk reports 49% file fragmentation.
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)
 
H

Harold A. Climer

Harold said:
In reference to my recent message about Hard Drive activity I also I
have noted several strange things about my Hard Drives. (C:/
especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the same
issue. It makes it difficult for people to get all the relevant
information. If it has been a long while, I can understand wanting to
start a new thread (I'm not sure two weeks is considered a long
time...). At the least, a link to that other thread should have been
included in your post. Fortunately, I haven't deleted your other post
yet, so as a public service, here is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with SP3
installed.
I have two hard drives installed with partitions C and D on the master
drive and K and L on the slave drive. I also have a Maxtor USB I TB
drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it has
been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in disk
access compared to before de fragmentation. At times the little yellow
disk activity light is on almost constantly on and for long periods of
time.
Originally I had my Page File on Drive C (400GB and about half full).
Today I moved the page file to Drive K( 300GB with about 50GB of files
on it). As per Microsoft article on Virtual memory etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond to a
mouse click to get it started or to access the Start menu, etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with the
placement of the pagefile on a separate hard drive (which *may* yield
*slightly* better performance... then again you might not notice any
improvement at all...), let's get back to basics. Only your system drive
(C:) needs a pagefile. Let's make sure (first) that *none* of your
drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the current
total physical size of all page files that may be in existence is shown.
Click Change to make settings for the Virtual memory operation. Here you
can select any drive partition and set either 'Custom'; 'System Managed'
or 'No page file'; then always click Set before going on to the next
partition.

So, in your case, Harold, for each of your four partitions, select "No
paging file."

By the way, it is at *this* time (with no pagefiles), that you should
want to defrag your hard drive! There will be no fragmentation in your
pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time select
"System managed size," which is almost always the best (or close to it)
setting.

At some point in the future, you can experiment with locating your
system drive's pagefile on either K: or L: (whichever one is the "basic"
drive... note in Alex's info that "n relocating the page file, it
must be on a 'basic' drive. Windows XP appears not to be willing to
accept page files on 'dynamic' drives.), but for now, it's not a
priority.
Using Norton Speeeddisk I have only been able to only get down to 25%
fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help your
curiosity, use its defrag function after you delete your pagefile. Just
make sure to recreate it when you are finished! Windows XP needs it to
operate efficiently.
When I used the Windows defragmenter utility it reports from 2% down
to less than 1%.

Sounds good.
Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP like it
used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can certainly
cause excessive hard drive activity. What is the current malware status
of your PC? What antimalware programs do you use? Do they have the most
up-to-date definitions?
Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.
Once defragmented it, takes less that a day to get back up to 40+%
fragmentation.

The excessive read or writes is still occurring. Each event lasts
from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting in the
way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the "Processes"
tab. Click CPU (third column probably) twice so that the processes using
the most resources are at the top. Jot down the top five. What are their
names?

Finally, while you are in Task Manager, click on the "Performace" tab.
Look under Commit Charge (K) in the lower left-hand corner. What are the
values for Total, Limit, and Peak? Knowing these figures along with how
much RAM is installed will give us a good idea on how much you are
paging.

Handles 20151 Physical Memory 3144172
Threads 670 Available 2364672
Processes 71 System Cache 2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged 143156
Peak 1257692 Non-paged 62212


Note: The Total commit charge went up to 875*** during what I am
calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual disk
activity.
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)
 
G

Gerry

Harold

Your pagefile is badly fragmented and this is leading to other files
being fragmented. You would do better with a fixed minimum=maximum
pagefile.

First you should cleanup the disk. Select Start, All Programs,
accessories, System Tools, Disk CleanUp, More Options, System Restore
and remove all but the latest System Restore point. I would then
download and run cCleaner.

cCleaner (freeware) which does a more thorough job than Disk CleanUp.
Disk CleanUp has to be run for each user profile, whereas cCleaner only
needs to be run once.
http://www.ccleaner.com/ccdownload.asp
http://www.ccleaner.com/

When using cCleaner think twice before checking Autocomplete Form
History under Internet Explorer. You do get a warning but this one has
irritating consequences. You may need to restore your system's
recollection of passwords after use so keep a record off computer so
that they can easily be re-entered.

Now reset the system to no pagefile and restart the computer. Run Disk
Defragmenter and on completion reset the pagefile to a minimum = maximum
figure and restart the computer. Job done.


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
T

Twayne

Harold A. Climer said:
Harold said:
In reference to my recent message about Hard Drive activity I also I
have noted several strange things about my Hard Drives. (C:/
especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the relevant
information. If it has been a long while, I can understand wanting to
start a new thread (I'm not sure two weeks is considered a long
time...). At the least, a link to that other thread should have been
included in your post. Fortunately, I haven't deleted your other post
yet, so as a public service, here is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with SP3
installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it has
been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in disk
access compared to before de fragmentation. At times the little
yellow disk activity light is on almost constantly on and for long
periods of time.
Originally I had my Page File on Drive C (400GB and about half full).
Today I moved the page file to Drive K( 300GB with about 50GB of
files on it). As per Microsoft article on Virtual memory etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond to a
mouse click to get it started or to access the Start menu, etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with the
placement of the pagefile on a separate hard drive (which *may* yield
*slightly* better performance... then again you might not notice any
improvement at all...), let's get back to basics. Only your system
drive (C:) needs a pagefile. Let's make sure (first) that *none* of
your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions, select
"No paging file."

By the way, it is at *this* time (with no pagefiles), that you should
want to defrag your hard drive! There will be no fragmentation in
your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time select
"System managed size," which is almost always the best (or close to
it) setting.

At some point in the future, you can experiment with locating your
system drive's pagefile on either K: or L: (whichever one is the
"basic" drive... note in Alex's info that "n relocating the page
file, it must be on a 'basic' drive. Windows XP appears not to be
willing to accept page files on 'dynamic' drives.), but for now,
it's not a priority.
Using Norton Speeeddisk I have only been able to only get down to
25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help your
curiosity, use its defrag function after you delete your pagefile.
Just make sure to recreate it when you are finished! Windows XP
needs it to operate efficiently.
When I used the Windows defragmenter utility it reports from 2% down
to less than 1%.

Sounds good.
Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP like
it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the current
malware status of your PC? What antimalware programs do you use? Do
they have the most up-to-date definitions?
Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.
Once defragmented it, takes less that a day to get back up to 40+%
fragmentation.

The excessive read or writes is still occurring. Each event lasts
from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting in
the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that the
processes using the most resources are at the top. Jot down the top
five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory 3144172
Threads 670 Available 2364672
Processes 71 System Cache 2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged 143156
Peak 1257692 Non-paged 62212


Note: The Total commit charge went up to 875*** during what I am
calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual disk
activity.
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)


Harold,

You mentioned Norton's Speed disk somewhere IIRC. It's a good program
but can on occasion get confused in such a way that it has a lot of
trouble getting things straight. Also, the fragmentaiton of your
pagefile is excessive and depending on just where some of those
fragments are and when they have to be read, could easily be adding to
your sluggishness.
So if you've been using Speed Disk, for the time being, switch to
XP's Defrag utility; it doesn't get so confused and is more reliable.

To repair the pagefile:
Set its size to 100 Meg min/max. Or you could even turn it off.
Windows refuses to work without a pagefile, so if you turn it off, you
might encounter some messages complaining about the pagefile size and
that windows is adjusting it. That's OK and no reason to worry for this
part of the process.

Then use XP's Disk Defragmenter to defrag the drive. You might have to
run it more than once; it'll run faster on each succeeding pass.
Usually twice suffices on a badly fragmented drive; the idea is to run
it until there is no or very little fragmentation in the reports.
There are also 3rd party apps that will specifically defrag the
pagefile, but they're not what you need at this point.

After defragging as best as it will do, turn the pagefile back on. The
benefits of forcing specific sizes to a pagefile are usually nil unless
you have a very specific application that suggests you do so, so set it
for System Managed Size. If windows thinks you need, say, 1536 Meg
total for a pagefile, it won't write to a continguous area of that much
space unless/until there is nowhere else to write to; then it'll begin
to use that area, which is when it begins to get defragmented.
So, that says to make sure you have plenty of room on the drive that
has the pagefile on it. At 20% free space it's time to start
considering the drive full and something should be done to increase the
space (another hard drive, move the pagefile to another physical drive,
etc.) available. Two or three fragments to a pagefile aren't that
ususual and are seldom in any way noticeable from a speed perspective of
the user.
Another thing that fragements the pageile is, say you have a 1536M XP
PF size, the full 1536 is used for some reason: THEN, since it's not set
aside, the pf will likely create another fragment. NOTE that "pagefile
size" does NOT equate to "pagefile used". If you have sufficient RAM,
you may never see more than a couple hundred M of pagefile space used,
yet the pagefile size will still be reported as the 1536 or whatever it
came out to be. And the less the pf is used, the faster things continue
to work, and of course, the less chance of it fragementing.

Here are some links that may help you a lot with understanding some of
what I've mentioned above:

http://support.microsoft.com/kb/308417
http://www.theeldergeek.com/paging_file.htm
http://www.aumha.org/win5/a/xpvm.php
http://articles.techrepublic.com.com/5100-10878_11-1056269.html

http://techblissonline.com/configur...ys-in-windows-vistaxp-to-improve-performance/

http://www.ehow.com/how_5105699_calculate-file-size.html

For what it's worth, my current pf size is showing as 1534.7 Meg with
212.1MB of it used (Norton's Monitor System Performance). CPU occupation
is varying from 3 or 4 % to around 53% (I have some background number
crunching going on). I seldom see those figures change unless I'm doing
video rendering which is very memory intensive, and I have 1.5 Gig of
RAM. 2 Gig would help a little more and after 2 Gig you're getting less
and less benefit from each additional byte of RAM. e.g. 3 Gig and 4 Gig
will give about the same performance and not a lot more than with 2 Gig.

HTH a little at least,

Twayne`
 
D

Daave

Harold said:
Harold said:
In reference to my recent message about Hard Drive activity I also I
have noted several strange things about my Hard Drives. (C:/
especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the relevant
information. If it has been a long while, I can understand wanting to
start a new thread (I'm not sure two weeks is considered a long
time...). At the least, a link to that other thread should have been
included in your post. Fortunately, I haven't deleted your other post
yet, so as a public service, here is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with SP3
installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it has
been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in disk
access compared to before de fragmentation. At times the little
yellow disk activity light is on almost constantly on and for long
periods of time.
Originally I had my Page File on Drive C (400GB and about half full).
Today I moved the page file to Drive K( 300GB with about 50GB of
files on it). As per Microsoft article on Virtual memory etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond to a
mouse click to get it started or to access the Start menu, etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with the
placement of the pagefile on a separate hard drive (which *may* yield
*slightly* better performance... then again you might not notice any
improvement at all...), let's get back to basics. Only your system
drive (C:) needs a pagefile. Let's make sure (first) that *none* of
your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions, select
"No paging file."

By the way, it is at *this* time (with no pagefiles), that you should
want to defrag your hard drive! There will be no fragmentation in
your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time select
"System managed size," which is almost always the best (or close to
it) setting.

At some point in the future, you can experiment with locating your
system drive's pagefile on either K: or L: (whichever one is the
"basic" drive... note in Alex's info that "n relocating the page
file, it must be on a 'basic' drive. Windows XP appears not to be
willing to accept page files on 'dynamic' drives.), but for now,
it's not a priority.
Using Norton Speeeddisk I have only been able to only get down to
25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help your
curiosity, use its defrag function after you delete your pagefile.
Just make sure to recreate it when you are finished! Windows XP
needs it to operate efficiently.
When I used the Windows defragmenter utility it reports from 2% down
to less than 1%.

Sounds good.
Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP like
it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the current
malware status of your PC? What antimalware programs do you use? Do
they have the most up-to-date definitions?
Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.
Once defragmented it, takes less that a day to get back up to 40+%
fragmentation.

The excessive read or writes is still occurring. Each event lasts
from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting in
the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that the
processes using the most resources are at the top. Jot down the top
five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory 3144172
Threads 670 Available 2364672
Processes 71 System Cache 2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged 143156
Peak 1257692 Non-paged 62212


Note: The Total commit charge went up to 875*** during what I am
calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual disk
activity.


You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another time,
there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my assistance.
:)

Have you gotten rid of the pagefiles, defragged, and set a new pagefile
on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware programs
do you use? Do they have the most up-to-date definitions?
 
H

Harold A. Climer

Harold said:
Harold A. Climer wrote:
In reference to my recent message about Hard Drive activity I also I
have noted several strange things about my Hard Drives. (C:/
especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the relevant
information. If it has been a long while, I can understand wanting to
start a new thread (I'm not sure two weeks is considered a long
time...). At the least, a link to that other thread should have been
included in your post. Fortunately, I haven't deleted your other post
yet, so as a public service, here is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with SP3
installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it has
been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in disk
access compared to before de fragmentation. At times the little
yellow disk activity light is on almost constantly on and for long
periods of time.
Originally I had my Page File on Drive C (400GB and about half full).
Today I moved the page file to Drive K( 300GB with about 50GB of
files on it). As per Microsoft article on Virtual memory etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond to a
mouse click to get it started or to access the Start menu, etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with the
placement of the pagefile on a separate hard drive (which *may* yield
*slightly* better performance... then again you might not notice any
improvement at all...), let's get back to basics. Only your system
drive (C:) needs a pagefile. Let's make sure (first) that *none* of
your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions, select
"No paging file."

By the way, it is at *this* time (with no pagefiles), that you should
want to defrag your hard drive! There will be no fragmentation in
your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time select
"System managed size," which is almost always the best (or close to
it) setting.

At some point in the future, you can experiment with locating your
system drive's pagefile on either K: or L: (whichever one is the
"basic" drive... note in Alex's info that "n relocating the page
file, it must be on a 'basic' drive. Windows XP appears not to be
willing to accept page files on 'dynamic' drives.), but for now,
it's not a priority.

Using Norton Speeeddisk I have only been able to only get down to
25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help your
curiosity, use its defrag function after you delete your pagefile.
Just make sure to recreate it when you are finished! Windows XP
needs it to operate efficiently.

When I used the Windows defragmenter utility it reports from 2% down
to less than 1%.

Sounds good.

Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP like
it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the current
malware status of your PC? What antimalware programs do you use? Do
they have the most up-to-date definitions?

Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.

Once defragmented it, takes less that a day to get back up to 40+%
fragmentation.

The excessive read or writes is still occurring. Each event lasts
from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting in
the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that the
processes using the most resources are at the top. Jot down the top
five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory 3144172
Threads 670 Available 2364672
Processes 71 System Cache 2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged 143156
Peak 1257692 Non-paged 62212


Note: The Total commit charge went up to 875*** during what I am
calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual disk
activity.


You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another time,
there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my assistance.
:)

Have you gotten rid of the pagefiles, defragged, and set a new pagefile
on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware programs
do you use? Do they have the most up-to-date definitions?


I am sorry it took a while to answer you,but I teach first and second
semester Physics in the summers and I just gave the students their
last exam before the finals, so I have been quite busy. Also my
computer at work went loony and I had to back up all my files and
reinstall the OS(Vista). It has been quite a week!

To answer your first question:

1) I made sure all page files were off on all hard drive partitions.
2) I defraged all drives.
3) I turned on the page file for drive C:/ only and set it to let the
system decide the size.
4) I defraged again. I used the built in XP defragger.

I use Zone Alarm Pro for fire wall etc, and anti mal ware. It is up to
date.

BTW I read something the other day about graphics cards getting too
hot because the fans stops working causing problems: locking up, etc.
Could that affect the hard drive activity?

The hard drive is still showing the same high activity from time to
time. Again it lasts from about 30 seconds or a bit more.
I have recorded about twenty episodes so far and that is the average.
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)
 
T

Twayne

Harold A. Climer said:
Harold said:
Harold A. Climer wrote:
In reference to my recent message about Hard Drive activity I
also I have noted several strange things about my Hard Drives.
(C:/ especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the
relevant information. If it has been a long while, I can
understand wanting to start a new thread (I'm not sure two weeks
is considered a long time...). At the least, a link to that other
thread should have been included in your post. Fortunately, I
haven't deleted your other post yet, so as a public service, here
is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with
SP3 installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it
has been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in disk
access compared to before de fragmentation. At times the little
yellow disk activity light is on almost constantly on and for long
periods of time.
Originally I had my Page File on Drive C (400GB and about half
full). Today I moved the page file to Drive K( 300GB with about
50GB of files on it). As per Microsoft article on Virtual memory
etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond to a
mouse click to get it started or to access the Start menu, etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with the
placement of the pagefile on a separate hard drive (which *may*
yield *slightly* better performance... then again you might not
notice any improvement at all...), let's get back to basics. Only
your system drive (C:) needs a pagefile. Let's make sure (first)
that *none* of your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions, select
"No paging file."

By the way, it is at *this* time (with no pagefiles), that you
should want to defrag your hard drive! There will be no
fragmentation in your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time
select "System managed size," which is almost always the best (or
close to it) setting.

At some point in the future, you can experiment with locating your
system drive's pagefile on either K: or L: (whichever one is the
"basic" drive... note in Alex's info that "n relocating the page
file, it must be on a 'basic' drive. Windows XP appears not to be
willing to accept page files on 'dynamic' drives.), but for now,
it's not a priority.

Using Norton Speeeddisk I have only been able to only get down to
25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help your
curiosity, use its defrag function after you delete your pagefile.
Just make sure to recreate it when you are finished! Windows XP
needs it to operate efficiently.

When I used the Windows defragmenter utility it reports from 2%
down to less than 1%.

Sounds good.

Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP like
it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the current
malware status of your PC? What antimalware programs do you use? Do
they have the most up-to-date definitions?

Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.

Once defragmented it, takes less that a day to get back up to 40+%
fragmentation.

The excessive read or writes is still occurring. Each event lasts
from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting in
the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that
the processes using the most resources are at the top. Jot down
the top five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory
3144172 Threads 670 Available
2364672 Processes 71 System Cache
2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged
143156 Peak 1257692 Non-paged
62212


Note: The Total commit charge went up to 875*** during what I am
calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual disk
activity.


You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another
time, there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my
assistance. :)

Have you gotten rid of the pagefiles, defragged, and set a new
pagefile on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware
programs do you use? Do they have the most up-to-date definitions?


I am sorry it took a while to answer you,but I teach first and second
semester Physics in the summers and I just gave the students their
last exam before the finals, so I have been quite busy. Also my
computer at work went loony and I had to back up all my files and
reinstall the OS(Vista). It has been quite a week!

To answer your first question:

1) I made sure all page files were off on all hard drive partitions.
2) I defraged all drives.
3) I turned on the page file for drive C:/ only and set it to let the
system decide the size.
4) I defraged again. I used the built in XP defragger.

I use Zone Alarm Pro for fire wall etc, and anti mal ware. It is up to
date.


Those are reasonable. The general concensus is that you need a firewall
(ZA), a good antivirus software program and at least 3 anti spyware
programs, for future considerations. As yet no single spyware detector
is turn-key and catches everything; each have their own strengths, thus
multiples are a good idea.
BTW I read something the other day about graphics cards getting too
hot because the fans stops working causing problems: locking up, etc.
Could that affect the hard drive activity?

Fairly unlikely I think, unless you know one of the fans are out. There
is a program called SIW - System Information for Windows, which will
read any temperature sensor in the computer. Nearly ALL hard drives
have sensors. It's free from:

http://www.gtopala.com/

and an excellent tool to have on hand. Basically it's what the XP
System Information should have been all along, IMO.
Temperature "probably" isn't the issue, but at least it can be
eliminated easily with that program. Or proven, as the case may be<g>.
It's being a hot & humid summer so far so it is possible, especially if
the mechanical internal design for heat's chimney effects aren't the
best or cables are blocking it.

Has anyone suggested you look in Task Manager Processes tab to see what
service/task is using all that time? I don't recall if you've mentioned
it. Highlight the cpu column and click the column header two times to
get it sorted high to low and watch for the activity to start. Start TM
and leave it minimized until the problem shows itself; you'll also have
a history of the cpu activity you can view in the Performance tab.
When TM is minimized, it becomes a tray icon that shows cpu
performance.

Unless it's malware, which status I don't know as I've not followed the
whole thread, it shouldn't be hard to track down what's running. Then
it's just a matter of figuring out why with some other tools.

HTH,

Twayne`

PS You do know your e-mail address is being scraped up for spam lists by
having it in clear in your posts? Many robots scan these groups to
scrape addresses from. It shouldn't appear in your headers either.
 
D

Daave

Harold said:
Harold said:
Harold A. Climer wrote:
In reference to my recent message about Hard Drive activity I
also I have noted several strange things about my Hard Drives.
(C:/ especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the
relevant information. If it has been a long while, I can
understand wanting to start a new thread (I'm not sure two weeks
is considered a long time...). At the least, a link to that other
thread should have been included in your post. Fortunately, I
haven't deleted your other post yet, so as a public service, here
is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with
SP3 installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it
has been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in disk
access compared to before de fragmentation. At times the little
yellow disk activity light is on almost constantly on and for long
periods of time.
Originally I had my Page File on Drive C (400GB and about half
full). Today I moved the page file to Drive K( 300GB with about
50GB of files on it). As per Microsoft article on Virtual memory
etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond to a
mouse click to get it started or to access the Start menu, etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with the
placement of the pagefile on a separate hard drive (which *may*
yield *slightly* better performance... then again you might not
notice any improvement at all...), let's get back to basics. Only
your system drive (C:) needs a pagefile. Let's make sure (first)
that *none* of your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions, select
"No paging file."

By the way, it is at *this* time (with no pagefiles), that you
should want to defrag your hard drive! There will be no
fragmentation in your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time
select "System managed size," which is almost always the best (or
close to it) setting.

At some point in the future, you can experiment with locating your
system drive's pagefile on either K: or L: (whichever one is the
"basic" drive... note in Alex's info that "n relocating the page
file, it must be on a 'basic' drive. Windows XP appears not to be
willing to accept page files on 'dynamic' drives.), but for now,
it's not a priority.

Using Norton Speeeddisk I have only been able to only get down to
25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help your
curiosity, use its defrag function after you delete your pagefile.
Just make sure to recreate it when you are finished! Windows XP
needs it to operate efficiently.

When I used the Windows defragmenter utility it reports from 2%
down to less than 1%.

Sounds good.

Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP like
it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the current
malware status of your PC? What antimalware programs do you use? Do
they have the most up-to-date definitions?

Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.

Once defragmented it, takes less that a day to get back up to 40+%
fragmentation.

The excessive read or writes is still occurring. Each event lasts
from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting in
the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that
the processes using the most resources are at the top. Jot down
the top five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory
3144172 Threads 670 Available
2364672 Processes 71 System Cache
2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged
143156 Peak 1257692 Non-paged
62212


Note: The Total commit charge went up to 875*** during what I am
calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual disk
activity.


You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another
time, there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my
assistance. :)

Have you gotten rid of the pagefiles, defragged, and set a new
pagefile on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware
programs do you use? Do they have the most up-to-date definitions?


I am sorry it took a while to answer you,but I teach first and second
semester Physics in the summers and I just gave the students their
last exam before the finals, so I have been quite busy. Also my
computer at work went loony and I had to back up all my files and
reinstall the OS(Vista). It has been quite a week!

To answer your first question:

1) I made sure all page files were off on all hard drive partitions.
2) I defraged all drives.
3) I turned on the page file for drive C:/ only and set it to let the
system decide the size.
4) I defraged again. I used the built in XP defragger.

I use Zone Alarm Pro for fire wall etc, and anti mal ware. It is up to
date.

BTW I read something the other day about graphics cards getting too
hot because the fans stops working causing problems: locking up, etc.
Could that affect the hard drive activity?

The hard drive is still showing the same high activity from time to
time. Again it lasts from about 30 seconds or a bit more.
I have recorded about twenty episodes so far and that is the average.


According to this page

http://www.zonealarm.com/security/en-us/compare-anti-virus-spyware-software.htm

Zone Alarm Pro does not offer Anti-Virus protection! Before you do
anything else, it is important to rule out viral-type malware. This page
should help:

http://www.elephantboycomputers.com/page2.html#Viruses_Malware

In the event your system is compromised and installing/running AV
programs such as AVG, Avast, or Avira AntiVir is not possible, scroll
down to "B. Scanning for Viruses" and note the suggestion to run either
TrendMicro's Sysclean or David Lipman's Multi_AV. Another option is to
download the latest .iso from Avira and burn a bootable CD so that you
may boot off of it and check for viruses that way:

http://www.avira.com/en/support/antivir_removal_tool.html

Also see this page for links for creating bootable rescue CDs for
Kaspersky and BitDefender:

http://www.askvg.com/download-free-...persky-bitdefender-avira-f-secure-and-others/

Also, for all you know, Zone Alarm Pro is the cause of your hard drive
activity!

One thing you can do is configure a clean boot:

http://support.microsoft.com/kb/310353

If the hard drive acitivity goes away, then you know it is one of your
programs or processes. Methodically re-enable them until the activity
comes back and you should be able to identify the culprit that way.

Final thought: if your performance is not hindered and if have ruled out
malware, then maybe you don't have much of a problem after all. That is,
maybe something like Zone Alarm Pro is scanning regularly and just doing
its job. The only other troubleshooting methods I can recommend are
these programs:

Process Explorer
FileMon
RegMon

http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx

http://technet.microsoft.com/en-us/sysinternals/bb896652.aspx
 
H

Harold A. Climer

Harold A. Climer said:
Harold A. Climer wrote:
Harold A. Climer wrote:
In reference to my recent message about Hard Drive activity I
also I have noted several strange things about my Hard Drives.
(C:/ especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the
relevant information. If it has been a long while, I can
understand wanting to start a new thread (I'm not sure two weeks
is considered a long time...). At the least, a link to that other
thread should have been included in your post. Fortunately, I
haven't deleted your other post yet, so as a public service, here
is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with
SP3 installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it
has been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in disk
access compared to before de fragmentation. At times the little
yellow disk activity light is on almost constantly on and for long
periods of time.
Originally I had my Page File on Drive C (400GB and about half
full). Today I moved the page file to Drive K( 300GB with about
50GB of files on it). As per Microsoft article on Virtual memory
etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond to a
mouse click to get it started or to access the Start menu, etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with the
placement of the pagefile on a separate hard drive (which *may*
yield *slightly* better performance... then again you might not
notice any improvement at all...), let's get back to basics. Only
your system drive (C:) needs a pagefile. Let's make sure (first)
that *none* of your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions, select
"No paging file."

By the way, it is at *this* time (with no pagefiles), that you
should want to defrag your hard drive! There will be no
fragmentation in your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time
select "System managed size," which is almost always the best (or
close to it) setting.

At some point in the future, you can experiment with locating your
system drive's pagefile on either K: or L: (whichever one is the
"basic" drive... note in Alex's info that "n relocating the page
file, it must be on a 'basic' drive. Windows XP appears not to be
willing to accept page files on 'dynamic' drives.), but for now,
it's not a priority.

Using Norton Speeeddisk I have only been able to only get down to
25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help your
curiosity, use its defrag function after you delete your pagefile.
Just make sure to recreate it when you are finished! Windows XP
needs it to operate efficiently.

When I used the Windows defragmenter utility it reports from 2%
down to less than 1%.

Sounds good.

Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP like
it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the current
malware status of your PC? What antimalware programs do you use? Do
they have the most up-to-date definitions?

Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.

Once defragmented it, takes less that a day to get back up to 40+%
fragmentation.

The excessive read or writes is still occurring. Each event lasts
from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting in
the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that
the processes using the most resources are at the top. Jot down
the top five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory
3144172 Threads 670 Available
2364672 Processes 71 System Cache
2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged
143156 Peak 1257692 Non-paged
62212


Note: The Total commit charge went up to 875*** during what I am
calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual disk
activity.

You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another
time, there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my
assistance. :)

Have you gotten rid of the pagefiles, defragged, and set a new
pagefile on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware
programs do you use? Do they have the most up-to-date definitions?


I am sorry it took a while to answer you,but I teach first and second
semester Physics in the summers and I just gave the students their
last exam before the finals, so I have been quite busy. Also my
computer at work went loony and I had to back up all my files and
reinstall the OS(Vista). It has been quite a week!

To answer your first question:

1) I made sure all page files were off on all hard drive partitions.
2) I defraged all drives.
3) I turned on the page file for drive C:/ only and set it to let the
system decide the size.
4) I defraged again. I used the built in XP defragger.

I use Zone Alarm Pro for fire wall etc, and anti mal ware. It is up to
date.


Those are reasonable. The general concensus is that you need a firewall
(ZA), a good antivirus software program and at least 3 anti spyware
programs, for future considerations. As yet no single spyware detector
is turn-key and catches everything; each have their own strengths, thus
multiples are a good idea.
BTW I read something the other day about graphics cards getting too
hot because the fans stops working causing problems: locking up, etc.
Could that affect the hard drive activity?

Fairly unlikely I think, unless you know one of the fans are out. There
is a program called SIW - System Information for Windows, which will
read any temperature sensor in the computer. Nearly ALL hard drives
have sensors. It's free from:

http://www.gtopala.com/

and an excellent tool to have on hand. Basically it's what the XP
System Information should have been all along, IMO.
Temperature "probably" isn't the issue, but at least it can be
eliminated easily with that program. Or proven, as the case may be<g>.
It's being a hot & humid summer so far so it is possible, especially if
the mechanical internal design for heat's chimney effects aren't the
best or cables are blocking it.

Has anyone suggested you look in Task Manager Processes tab to see what
service/task is using all that time? I don't recall if you've mentioned
it. Highlight the cpu column and click the column header two times to
get it sorted high to low and watch for the activity to start. Start TM
and leave it minimized until the problem shows itself; you'll also have
a history of the cpu activity you can view in the Performance tab.
When TM is minimized, it becomes a tray icon that shows cpu
performance.

Unless it's malware, which status I don't know as I've not followed the
whole thread, it shouldn't be hard to track down what's running. Then
it's just a matter of figuring out why with some other tools.

HTH,

Twayne`

PS You do know your e-mail address is being scraped up for spam lists by
having it in clear in your posts? Many robots scan these groups to
scrape addresses from. It shouldn't appear in your headers either.

The hard drive is still showing the same high activity from time to
time. Again it lasts from about 30 seconds or a bit more.
I have recorded about twenty episodes so far and that is the average.
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)



I used two anti malware programs SuperAntiSpyware and Malwarebytes.
The found some Adware and some bots that was all; got rid of them
still much disk activity.
I used the processes part of the Task Manager and saw that the System
Idle Process 0 used a lot of CPU time, up to 99% at times.
Is this bad?
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)
 
T

Twayne

Harold A. Climer said:
Harold A. Climer said:
Harold A. Climer wrote:
Harold A. Climer wrote:
In reference to my recent message about Hard Drive activity I
also I have noted several strange things about my Hard Drives.
(C:/ especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the
relevant information. If it has been a long while, I can
understand wanting to start a new thread (I'm not sure two weeks
is considered a long time...). At the least, a link to that other
thread should have been included in your post. Fortunately, I
haven't deleted your other post yet, so as a public service, here
is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with
SP3 installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it
has been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in
disk access compared to before de fragmentation. At times the
little yellow disk activity light is on almost constantly on and
for long periods of time.
Originally I had my Page File on Drive C (400GB and about half
full). Today I moved the page file to Drive K( 300GB with about
50GB of files on it). As per Microsoft article on Virtual memory
etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond
to a mouse click to get it started or to access the Start menu,
etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with
the placement of the pagefile on a separate hard drive (which
*may* yield *slightly* better performance... then again you
might not notice any improvement at all...), let's get back to
basics. Only your system drive (C:) needs a pagefile. Let's make
sure (first) that *none* of your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions,
select "No paging file."

By the way, it is at *this* time (with no pagefiles), that you
should want to defrag your hard drive! There will be no
fragmentation in your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time
select "System managed size," which is almost always the best (or
close to it) setting.

At some point in the future, you can experiment with locating
your system drive's pagefile on either K: or L: (whichever one
is the "basic" drive... note in Alex's info that "n
relocating the page file, it must be on a 'basic' drive. Windows
XP appears not to be willing to accept page files on 'dynamic'
drives.), but for now, it's not a priority.

Using Norton Speeeddisk I have only been able to only get down
to 25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help
your curiosity, use its defrag function after you delete your
pagefile. Just make sure to recreate it when you are finished!
Windows XP needs it to operate efficiently.

When I used the Windows defragmenter utility it reports from 2%
down to less than 1%.

Sounds good.

Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP
like it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the
current malware status of your PC? What antimalware programs do
you use? Do they have the most up-to-date definitions?

Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.

Once defragmented it, takes less that a day to get back up to
40+% fragmentation.

The excessive read or writes is still occurring. Each event
lasts from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting
in the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that
the processes using the most resources are at the top. Jot down
the top five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory
3144172 Threads 670 Available
2364672 Processes 71 System Cache
2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged
143156 Peak 1257692 Non-paged
62212


Note: The Total commit charge went up to 875*** during what I
am calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual
disk activity.

You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another
time, there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my
assistance. :)

Have you gotten rid of the pagefiles, defragged, and set a new
pagefile on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware
programs do you use? Do they have the most up-to-date definitions?


I am sorry it took a while to answer you,but I teach first and
second semester Physics in the summers and I just gave the students
their last exam before the finals, so I have been quite busy. Also
my computer at work went loony and I had to back up all my files and
reinstall the OS(Vista). It has been quite a week!

To answer your first question:

1) I made sure all page files were off on all hard drive
partitions. 2) I defraged all drives.
3) I turned on the page file for drive C:/ only and set it to let
the system decide the size.
4) I defraged again. I used the built in XP defragger.

I use Zone Alarm Pro for fire wall etc, and anti mal ware. It is up
to date.


Those are reasonable. The general concensus is that you need a
firewall (ZA), a good antivirus software program and at least 3 anti
spyware programs, for future considerations. As yet no single
spyware detector is turn-key and catches everything; each have their
own strengths, thus multiples are a good idea.
BTW I read something the other day about graphics cards getting too
hot because the fans stops working causing problems: locking up,
etc. Could that affect the hard drive activity?

Fairly unlikely I think, unless you know one of the fans are out.
There is a program called SIW - System Information for Windows,
which will read any temperature sensor in the computer. Nearly ALL
hard drives have sensors. It's free from:

http://www.gtopala.com/

and an excellent tool to have on hand. Basically it's what the XP
System Information should have been all along, IMO.
Temperature "probably" isn't the issue, but at least it can be
eliminated easily with that program. Or proven, as the case may
be<g>. It's being a hot & humid summer so far so it is possible,
especially if the mechanical internal design for heat's chimney
effects aren't the best or cables are blocking it.

Has anyone suggested you look in Task Manager Processes tab to see
what service/task is using all that time? I don't recall if you've
mentioned it. Highlight the cpu column and click the column header
two times to get it sorted high to low and watch for the activity to
start. Start TM and leave it minimized until the problem shows
itself; you'll also have a history of the cpu activity you can view
in the Performance tab. When TM is minimized, it becomes a tray
icon that shows cpu performance.

Unless it's malware, which status I don't know as I've not followed
the whole thread, it shouldn't be hard to track down what's running.
Then it's just a matter of figuring out why with some other tools.

HTH,

Twayne`

PS You do know your e-mail address is being scraped up for spam
lists by having it in clear in your posts? Many robots scan these
groups to scrape addresses from. It shouldn't appear in your
headers either.

The hard drive is still showing the same high activity from time to
time. Again it lasts from about 30 seconds or a bit more.
I have recorded about twenty episodes so far and that is the
average. Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)



I used two anti malware programs SuperAntiSpyware and Malwarebytes.
The found some Adware and some bots that was all; got rid of them
still much disk activity.
I used the processes part of the Task Manager and saw that the System
Idle Process 0 used a lot of CPU time, up to 99% at times.
Is this bad?


No, not at all; it's good in fact. System Idle is just what is sounds
like; the cpu is 99% idle or in other words, only 1 to near 2% of its
time is occupied with tasks.

No luck finding a process in Task Manager that corresponds to the 30
Seconds of thrashing?

I -think- I'm seeing a lot of questions asked that aren't getting
answered. It's important to asnwer all questions no matter how trivial
they may seem. Maybe I'm wrong; not sure.


Just for grins, take a look at the Event Viewer and see if there are any
meaningful ERRORs listed in it. Don't panic if you see a bunch of
Warnings, but make a note of ERRORs and what the error says.
Double-click the ERROR to get a properties window with data.
Start; Programs; Administrative Tools; Event Viewer.
ONLY be concerned with entries of the last few days; not much more.
List any ERRORs here, please.

If you haven't already, there are a couple of tools you can try that
might give some hints.

-- Autoruns will list all programs that start when XP starts. One of
those may be an obvious one for doing things during idle times.
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

-- Filemon, a program that reports ALL file activity. It can create a
long list in a hurry, so find the start/stop icon to use it when it's
advantageous.
http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx
If the disk is thrashing, it's possible it's file activity causing
it - as in, perhaps you've been Zombied. Hmm, that's a good point: Does
the thrasing go away if you turn off your modem/router?

-- REgmon, same as above but for the registry.
http://technet.microsoft.com/en-us/sysinternals/bb896652.aspx

Even if you end up not needing them now, they're very handy tools to
have around. All are free programs and safe downloads; no malware at
the addresses given.

My bet is you simply have something running in the background that you
didn't realize was there or have forgotten you installed<g>.

-- Have you tried turning off Indexing to see if that stops the
thrashing?

-- How about anti-virus programs that scan during idle times?

-- Have you defragmented or at least analyzed the drive to see how
fragmented it is?

HTH,

Twayne`
 
T

Twayne

PS - Forgot:
Note: FileMon and RegMon have been replaced by Process Monitor on
versions of Windows starting with Windows 2000 SP4, Windows XP SP2,
Windows Server 2003 SP1, and Windows Vista. FileMon and RegMon remain
for legacy operating system support, including Windows 9x.



Harold A. Climer said:
Harold A. Climer said:
Harold A. Climer wrote:
Harold A. Climer wrote:
In reference to my recent message about Hard Drive activity I
also I have noted several strange things about my Hard Drives.
(C:/ especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the
relevant information. If it has been a long while, I can
understand wanting to start a new thread (I'm not sure two weeks
is considered a long time...). At the least, a link to that other
thread should have been included in your post. Fortunately, I
haven't deleted your other post yet, so as a public service, here
is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with
SP3 installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it
has been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in
disk access compared to before de fragmentation. At times the
little yellow disk activity light is on almost constantly on and
for long periods of time.
Originally I had my Page File on Drive C (400GB and about half
full). Today I moved the page file to Drive K( 300GB with about
50GB of files on it). As per Microsoft article on Virtual memory
etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond
to a mouse click to get it started or to access the Start menu,
etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with
the placement of the pagefile on a separate hard drive (which
*may* yield *slightly* better performance... then again you
might not notice any improvement at all...), let's get back to
basics. Only your system drive (C:) needs a pagefile. Let's make
sure (first) that *none* of your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions,
select "No paging file."

By the way, it is at *this* time (with no pagefiles), that you
should want to defrag your hard drive! There will be no
fragmentation in your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time
select "System managed size," which is almost always the best (or
close to it) setting.

At some point in the future, you can experiment with locating
your system drive's pagefile on either K: or L: (whichever one
is the "basic" drive... note in Alex's info that "n
relocating the page file, it must be on a 'basic' drive. Windows
XP appears not to be willing to accept page files on 'dynamic'
drives.), but for now, it's not a priority.

Using Norton Speeeddisk I have only been able to only get down
to 25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help
your curiosity, use its defrag function after you delete your
pagefile. Just make sure to recreate it when you are finished!
Windows XP needs it to operate efficiently.

When I used the Windows defragmenter utility it reports from 2%
down to less than 1%.

Sounds good.

Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP
like it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the
current malware status of your PC? What antimalware programs do
you use? Do they have the most up-to-date definitions?

Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.

Once defragmented it, takes less that a day to get back up to
40+% fragmentation.

The excessive read or writes is still occurring. Each event
lasts from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting
in the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that
the processes using the most resources are at the top. Jot down
the top five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory
3144172 Threads 670 Available
2364672 Processes 71 System Cache
2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged
143156 Peak 1257692 Non-paged
62212


Note: The Total commit charge went up to 875*** during what I
am calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual
disk activity.

You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another
time, there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my
assistance. :)

Have you gotten rid of the pagefiles, defragged, and set a new
pagefile on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware
programs do you use? Do they have the most up-to-date definitions?


I am sorry it took a while to answer you,but I teach first and
second semester Physics in the summers and I just gave the students
their last exam before the finals, so I have been quite busy. Also
my computer at work went loony and I had to back up all my files and
reinstall the OS(Vista). It has been quite a week!

To answer your first question:

1) I made sure all page files were off on all hard drive
partitions. 2) I defraged all drives.
3) I turned on the page file for drive C:/ only and set it to let
the system decide the size.
4) I defraged again. I used the built in XP defragger.

I use Zone Alarm Pro for fire wall etc, and anti mal ware. It is up
to date.


Those are reasonable. The general concensus is that you need a
firewall (ZA), a good antivirus software program and at least 3 anti
spyware programs, for future considerations. As yet no single
spyware detector is turn-key and catches everything; each have their
own strengths, thus multiples are a good idea.
BTW I read something the other day about graphics cards getting too
hot because the fans stops working causing problems: locking up,
etc. Could that affect the hard drive activity?

Fairly unlikely I think, unless you know one of the fans are out.
There is a program called SIW - System Information for Windows,
which will read any temperature sensor in the computer. Nearly ALL
hard drives have sensors. It's free from:

http://www.gtopala.com/

and an excellent tool to have on hand. Basically it's what the XP
System Information should have been all along, IMO.
Temperature "probably" isn't the issue, but at least it can be
eliminated easily with that program. Or proven, as the case may
be<g>. It's being a hot & humid summer so far so it is possible,
especially if the mechanical internal design for heat's chimney
effects aren't the best or cables are blocking it.

Has anyone suggested you look in Task Manager Processes tab to see
what service/task is using all that time? I don't recall if you've
mentioned it. Highlight the cpu column and click the column header
two times to get it sorted high to low and watch for the activity to
start. Start TM and leave it minimized until the problem shows
itself; you'll also have a history of the cpu activity you can view
in the Performance tab. When TM is minimized, it becomes a tray
icon that shows cpu performance.

Unless it's malware, which status I don't know as I've not followed
the whole thread, it shouldn't be hard to track down what's running.
Then it's just a matter of figuring out why with some other tools.

HTH,

Twayne`

PS You do know your e-mail address is being scraped up for spam
lists by having it in clear in your posts? Many robots scan these
groups to scrape addresses from. It shouldn't appear in your
headers either.

The hard drive is still showing the same high activity from time to
time. Again it lasts from about 30 seconds or a bit more.
I have recorded about twenty episodes so far and that is the
average. Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)



I used two anti malware programs SuperAntiSpyware and Malwarebytes.
The found some Adware and some bots that was all; got rid of them
still much disk activity.
I used the processes part of the Task Manager and saw that the System
Idle Process 0 used a lot of CPU time, up to 99% at times.
Is this bad?
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)
 
T

Twayne

PPS Just came across this:
http://technet.microsoft.com/en-us/sysinternals/bb896646.aspx
DiskMon for Windows v2.01

Twayne



Harold A. Climer said:
Harold A. Climer said:
Harold A. Climer wrote:
Harold A. Climer wrote:
In reference to my recent message about Hard Drive activity I
also I have noted several strange things about my Hard Drives.
(C:/ especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the
relevant information. If it has been a long while, I can
understand wanting to start a new thread (I'm not sure two weeks
is considered a long time...). At the least, a link to that other
thread should have been included in your post. Fortunately, I
haven't deleted your other post yet, so as a public service, here
is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with
SP3 installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it
has been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in
disk access compared to before de fragmentation. At times the
little yellow disk activity light is on almost constantly on and
for long periods of time.
Originally I had my Page File on Drive C (400GB and about half
full). Today I moved the page file to Drive K( 300GB with about
50GB of files on it). As per Microsoft article on Virtual memory
etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond
to a mouse click to get it started or to access the Start menu,
etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with
the placement of the pagefile on a separate hard drive (which
*may* yield *slightly* better performance... then again you
might not notice any improvement at all...), let's get back to
basics. Only your system drive (C:) needs a pagefile. Let's make
sure (first) that *none* of your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions,
select "No paging file."

By the way, it is at *this* time (with no pagefiles), that you
should want to defrag your hard drive! There will be no
fragmentation in your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time
select "System managed size," which is almost always the best (or
close to it) setting.

At some point in the future, you can experiment with locating
your system drive's pagefile on either K: or L: (whichever one
is the "basic" drive... note in Alex's info that "n
relocating the page file, it must be on a 'basic' drive. Windows
XP appears not to be willing to accept page files on 'dynamic'
drives.), but for now, it's not a priority.

Using Norton Speeeddisk I have only been able to only get down
to 25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help
your curiosity, use its defrag function after you delete your
pagefile. Just make sure to recreate it when you are finished!
Windows XP needs it to operate efficiently.

When I used the Windows defragmenter utility it reports from 2%
down to less than 1%.

Sounds good.

Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP
like it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the
current malware status of your PC? What antimalware programs do
you use? Do they have the most up-to-date definitions?

Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.

Once defragmented it, takes less that a day to get back up to
40+% fragmentation.

The excessive read or writes is still occurring. Each event
lasts from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting
in the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that
the processes using the most resources are at the top. Jot down
the top five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory
3144172 Threads 670 Available
2364672 Processes 71 System Cache
2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged
143156 Peak 1257692 Non-paged
62212


Note: The Total commit charge went up to 875*** during what I
am calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual
disk activity.

You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another
time, there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my
assistance. :)

Have you gotten rid of the pagefiles, defragged, and set a new
pagefile on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware
programs do you use? Do they have the most up-to-date definitions?


I am sorry it took a while to answer you,but I teach first and
second semester Physics in the summers and I just gave the students
their last exam before the finals, so I have been quite busy. Also
my computer at work went loony and I had to back up all my files and
reinstall the OS(Vista). It has been quite a week!

To answer your first question:

1) I made sure all page files were off on all hard drive
partitions. 2) I defraged all drives.
3) I turned on the page file for drive C:/ only and set it to let
the system decide the size.
4) I defraged again. I used the built in XP defragger.

I use Zone Alarm Pro for fire wall etc, and anti mal ware. It is up
to date.


Those are reasonable. The general concensus is that you need a
firewall (ZA), a good antivirus software program and at least 3 anti
spyware programs, for future considerations. As yet no single
spyware detector is turn-key and catches everything; each have their
own strengths, thus multiples are a good idea.
BTW I read something the other day about graphics cards getting too
hot because the fans stops working causing problems: locking up,
etc. Could that affect the hard drive activity?

Fairly unlikely I think, unless you know one of the fans are out.
There is a program called SIW - System Information for Windows,
which will read any temperature sensor in the computer. Nearly ALL
hard drives have sensors. It's free from:

http://www.gtopala.com/

and an excellent tool to have on hand. Basically it's what the XP
System Information should have been all along, IMO.
Temperature "probably" isn't the issue, but at least it can be
eliminated easily with that program. Or proven, as the case may
be<g>. It's being a hot & humid summer so far so it is possible,
especially if the mechanical internal design for heat's chimney
effects aren't the best or cables are blocking it.

Has anyone suggested you look in Task Manager Processes tab to see
what service/task is using all that time? I don't recall if you've
mentioned it. Highlight the cpu column and click the column header
two times to get it sorted high to low and watch for the activity to
start. Start TM and leave it minimized until the problem shows
itself; you'll also have a history of the cpu activity you can view
in the Performance tab. When TM is minimized, it becomes a tray
icon that shows cpu performance.

Unless it's malware, which status I don't know as I've not followed
the whole thread, it shouldn't be hard to track down what's running.
Then it's just a matter of figuring out why with some other tools.

HTH,

Twayne`

PS You do know your e-mail address is being scraped up for spam
lists by having it in clear in your posts? Many robots scan these
groups to scrape addresses from. It shouldn't appear in your
headers either.

The hard drive is still showing the same high activity from time to
time. Again it lasts from about 30 seconds or a bit more.
I have recorded about twenty episodes so far and that is the
average. Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)



I used two anti malware programs SuperAntiSpyware and Malwarebytes.
The found some Adware and some bots that was all; got rid of them
still much disk activity.
I used the processes part of the Task Manager and saw that the System
Idle Process 0 used a lot of CPU time, up to 99% at times.
Is this bad?
Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)
 
H

Harold A Climer

Harold A. Climer said:
Harold A. Climer wrote:
Harold A. Climer wrote:
In reference to my recent message about Hard Drive activity I
also I have noted several strange things about my Hard Drives.
(C:/ especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about the
same issue. It makes it difficult for people to get all the
relevant information. If it has been a long while, I can
understand wanting to start a new thread (I'm not sure two weeks
is considered a long time...). At the least, a link to that other
thread should have been included in your post. Fortunately, I
haven't deleted your other post yet, so as a public service, here
is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE with
SP3 installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a Maxtor
USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since it
has been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in
disk access compared to before de fragmentation. At times the
little yellow disk activity light is on almost constantly on and
for long periods of time.
Originally I had my Page File on Drive C (400GB and about half
full). Today I moved the page file to Drive K( 300GB with about
50GB of files on it). As per Microsoft article on Virtual memory
etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing a
program it takes quite a while for another program to respond
to a mouse click to get it started or to access the Start menu,
etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with
the placement of the pagefile on a separate hard drive (which
*may* yield *slightly* better performance... then again you
might not notice any improvement at all...), let's get back to
basics. Only your system drive (C:) needs a pagefile. Let's make
sure (first) that *none* of your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent reference
BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the Virtual
memory operation. Here you can select any drive partition and set
either 'Custom'; 'System Managed' or 'No page file'; then always
click Set before going on to the next partition.

So, in your case, Harold, for each of your four partitions,
select "No paging file."

By the way, it is at *this* time (with no pagefiles), that you
should want to defrag your hard drive! There will be no
fragmentation in your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time
select "System managed size," which is almost always the best (or
close to it) setting.

At some point in the future, you can experiment with locating
your system drive's pagefile on either K: or L: (whichever one
is the "basic" drive... note in Alex's info that "n
relocating the page file, it must be on a 'basic' drive. Windows
XP appears not to be willing to accept page files on 'dynamic'
drives.), but for now, it's not a priority.

Using Norton Speeeddisk I have only been able to only get down
to 25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help
your curiosity, use its defrag function after you delete your
pagefile. Just make sure to recreate it when you are finished!
Windows XP needs it to operate efficiently.

When I used the Windows defragmenter utility it reports from 2%
down to less than 1%.

Sounds good.

Both programs report some files can't be defragmented. ( Volume
information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP
like it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the
current malware status of your PC? What antimalware programs do
you use? Do they have the most up-to-date definitions?

Could it be that the hard drive controller on the motherboard is
flaky?

I doubt it.

Once defragmented it, takes less that a day to get back up to
40+% fragmentation.

The excessive read or writes is still occurring. Each event
lasts from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks or
movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!) getting
in the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so that
the processes using the most resources are at the top. Jot down
the top five. What are their names?

Finally, while you are in Task Manager, click on the "Performace"
tab. Look under Commit Charge (K) in the lower left-hand corner.
What are the values for Total, Limit, and Peak? Knowing these
figures along with how much RAM is installed will give us a good
idea on how much you are paging.

Handles 20151 Physical Memory
3144172 Threads 670 Available
2364672 Processes 71 System Cache
2478716


Commit Charge Kernel Memory
Total 641640 Total 204956

Limit 6123360 Paged
143156 Peak 1257692 Non-paged
62212


Note: The Total commit charge went up to 875*** during what I
am calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual
disk activity.

You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another
time, there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my
assistance. :)

Have you gotten rid of the pagefiles, defragged, and set a new
pagefile on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware
programs do you use? Do they have the most up-to-date definitions?


I am sorry it took a while to answer you,but I teach first and
second semester Physics in the summers and I just gave the students
their last exam before the finals, so I have been quite busy. Also
my computer at work went loony and I had to back up all my files and
reinstall the OS(Vista). It has been quite a week!

To answer your first question:

1) I made sure all page files were off on all hard drive
partitions. 2) I defraged all drives.
3) I turned on the page file for drive C:/ only and set it to let
the system decide the size.
4) I defraged again. I used the built in XP defragger.

I use Zone Alarm Pro for fire wall etc, and anti mal ware. It is up
to date.

Those are reasonable. The general concensus is that you need a
firewall (ZA), a good antivirus software program and at least 3 anti
spyware programs, for future considerations. As yet no single
spyware detector is turn-key and catches everything; each have their
own strengths, thus multiples are a good idea.


BTW I read something the other day about graphics cards getting too
hot because the fans stops working causing problems: locking up,
etc. Could that affect the hard drive activity?

Fairly unlikely I think, unless you know one of the fans are out.
There is a program called SIW - System Information for Windows,
which will read any temperature sensor in the computer. Nearly ALL
hard drives have sensors. It's free from:

http://www.gtopala.com/

and an excellent tool to have on hand. Basically it's what the XP
System Information should have been all along, IMO.
Temperature "probably" isn't the issue, but at least it can be
eliminated easily with that program. Or proven, as the case may
be<g>. It's being a hot & humid summer so far so it is possible,
especially if the mechanical internal design for heat's chimney
effects aren't the best or cables are blocking it.

Has anyone suggested you look in Task Manager Processes tab to see
what service/task is using all that time? I don't recall if you've
mentioned it. Highlight the cpu column and click the column header
two times to get it sorted high to low and watch for the activity to
start. Start TM and leave it minimized until the problem shows
itself; you'll also have a history of the cpu activity you can view
in the Performance tab. When TM is minimized, it becomes a tray
icon that shows cpu performance.

Unless it's malware, which status I don't know as I've not followed
the whole thread, it shouldn't be hard to track down what's running.
Then it's just a matter of figuring out why with some other tools.

HTH,

Twayne`

PS You do know your e-mail address is being scraped up for spam
lists by having it in clear in your posts? Many robots scan these
groups to scrape addresses from. It shouldn't appear in your
headers either.



The hard drive is still showing the same high activity from time to
time. Again it lasts from about 30 seconds or a bit more.
I have recorded about twenty episodes so far and that is the
average. Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)



I used two anti malware programs SuperAntiSpyware and Malwarebytes.
The found some Adware and some bots that was all; got rid of them
still much disk activity.
I used the processes part of the Task Manager and saw that the System
Idle Process 0 used a lot of CPU time, up to 99% at times.
Is this bad?


No, not at all; it's good in fact. System Idle is just what is sounds
like; the cpu is 99% idle or in other words, only 1 to near 2% of its
time is occupied with tasks.

No luck finding a process in Task Manager that corresponds to the 30
Seconds of thrashing?

I -think- I'm seeing a lot of questions asked that aren't getting
answered. It's important to asnwer all questions no matter how trivial
they may seem. Maybe I'm wrong; not sure.


Just for grins, take a look at the Event Viewer and see if there are any
meaningful ERRORs listed in it. Don't panic if you see a bunch of
Warnings, but make a note of ERRORs and what the error says.
Double-click the ERROR to get a properties window with data.
Start; Programs; Administrative Tools; Event Viewer.
ONLY be concerned with entries of the last few days; not much more.
List any ERRORs here, please.

If you haven't already, there are a couple of tools you can try that
might give some hints.

-- Autoruns will list all programs that start when XP starts. One of
those may be an obvious one for doing things during idle times.
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

-- Filemon, a program that reports ALL file activity. It can create a
long list in a hurry, so find the start/stop icon to use it when it's
advantageous.
http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx
If the disk is thrashing, it's possible it's file activity causing
it - as in, perhaps you've been Zombied. Hmm, that's a good point: Does
the thrasing go away if you turn off your modem/router?

-- REgmon, same as above but for the registry.
http://technet.microsoft.com/en-us/sysinternals/bb896652.aspx

Even if you end up not needing them now, they're very handy tools to
have around. All are free programs and safe downloads; no malware at
the addresses given.

My bet is you simply have something running in the background that you
didn't realize was there or have forgotten you installed<g>.

-- Have you tried turning off Indexing to see if that stops the
thrashing?

-- How about anti-virus programs that scan during idle times?

-- Have you defragmented or at least analyzed the drive to see how
fragmented it is?

HTH,

Twayne`



Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)

I am going to try all the stuff you suggested after I give my final
lab exams on Monday.
If none of it works I think I will just re install the OS.
I have about 10 days between the end of summer session and the
beginning of the Fall Semester to get the thing up and running again.
Before I do this I will look at the various processes at the top of
the list to see which is using lots of CPU resources.
Since my computer has a dual core processor, is there a utility that
looks at each processor individuallly to see what each one is doing?
 
T

Twayne

Harold A Climer said:
Harold A. Climer said:
On Sat, 25 Jul 2009 11:46:38 -0400, "Twayne"

Harold A. Climer wrote:
Harold A. Climer wrote:
In reference to my recent message about Hard Drive activity I
also I have noted several strange things about my Hard Drives.
(C:/ especially.)

Hi, Harold.

As a rule, you should never start a new thread if it is about
the same issue. It makes it difficult for people to get all the
relevant information. If it has been a long while, I can
understand wanting to start a new thread (I'm not sure two
weeks is considered a long time...). At the least, a link to
that other thread should have been included in your post.
Fortunately, I haven't deleted your other post yet, so as a
public service, here is the original:

[start]

I have an HP pavilion A1520N computer running Windows XP MCE
with SP3 installed.
I have two hard drives installed with partitions C and D on the
master drive and K and L on the slave drive. I also have a
Maxtor USB I TB drive as the O drive.
The D drive is the system restore drive.
In the last week I decided to de fragment all my drives since
it has been since Christmas vacation since I did it last.
After doing this I noticed that there was a large increase in
disk access compared to before de fragmentation. At times the
little yellow disk activity light is on almost constantly on
and for long periods of time.
Originally I had my Page File on Drive C (400GB and about half
full). Today I moved the page file to Drive K( 300GB with about
50GB of files on it). As per Microsoft article on Virtual
memory etc.
I also noticed that since de fragmentation it seems as if the
computer sometimes locks up. By this I mean that after closing
a program it takes quite a while for another program to
respond to a mouse click to get it started or to access the
Start menu, etc.

Thread:

http://groups.google.com/group/micr...ead/56022d22c9460b34/225aa2fc391e1a0?hl=en&q=

[end]

Oh, and whenever you come across someone rude, just killfile
him!

How much RAM do you have?

You need to walk before you run. Instead of experimenting with
the placement of the pagefile on a separate hard drive (which
*may* yield *slightly* better performance... then again you
might not notice any improvement at all...), let's get back to
basics. Only your system drive (C:) needs a pagefile. Let's
make sure (first) that *none* of your drives has a pagefile:

From http://www.aumha.org/win5/a/xpvm.php (an excellent
reference BTW):

Where do I set the placing and size of the page file?

At Control Panel | System | Advanced, click Settings in the
"Performance" Section. On the Advanced page of the result, the
current total physical size of all page files that may be in
existence is shown. Click Change to make settings for the
Virtual memory operation. Here you can select any drive
partition and set either 'Custom'; 'System Managed' or 'No
page file'; then always click Set before going on to the next
partition.

So, in your case, Harold, for each of your four partitions,
select "No paging file."

By the way, it is at *this* time (with no pagefiles), that you
should want to defrag your hard drive! There will be no
fragmentation in your pagefile because there *is* no pagefile!

Once you are ready, reboot. Repeat the steps above, this time
select "System managed size," which is almost always the best
(or close to it) setting.

At some point in the future, you can experiment with locating
your system drive's pagefile on either K: or L: (whichever one
is the "basic" drive... note in Alex's info that "n
relocating the page file, it must be on a 'basic' drive.
Windows XP appears not to be willing to accept page files on
'dynamic' drives.), but for now, it's not a priority.

Using Norton Speeeddisk I have only been able to only get down
to 25% fragmentation from about 46%.

Frankly, I wouldn't worry about that at all. If you can't help
your curiosity, use its defrag function after you delete your
pagefile. Just make sure to recreate it when you are finished!
Windows XP needs it to operate efficiently.

When I used the Windows defragmenter utility it reports from
2% down to less than 1%.

Sounds good.

Both programs report some files can't be defragmented. (
Volume information files(Restore Point information I think)

Does anyone know if there is malicious software out there that
deliberately increases the fragmentation of a hard drive?

Stop worrying about fragmentation! It's not a big deal with XP
like it used to be with earlier OSes.

That being said, *do* be concerned about malware. Malware can
certainly cause excessive hard drive activity. What is the
current malware status of your PC? What antimalware programs do
you use? Do they have the most up-to-date definitions?

Could it be that the hard drive controller on the motherboard
is flaky?

I doubt it.

Once defragmented it, takes less that a day to get back up to
40+% fragmentation.

The excessive read or writes is still occurring. Each event
lasts from 15 to 45 seconds or more(I have timed it).
During this time the computer is unresponsive to mouse clicks
or movement of icons etc using the mouse.

Could be malware. Could be a resource hog like Norton(!)
getting in the way. How much RAM do you have?

The next time you notice lots of hard drive activity, try this:

Open up Task Manager (Control + Alt + Delete). Click on the
"Processes" tab. Click CPU (third column probably) twice so
that the processes using the most resources are at the top.
Jot down the top five. What are their names?

Finally, while you are in Task Manager, click on the
"Performace" tab. Look under Commit Charge (K) in the lower
left-hand corner. What are the values for Total, Limit, and
Peak? Knowing these figures along with how much RAM is
installed will give us a good idea on how much you are paging.

Handles 20151 Physical Memory
3144172 Threads 670 Available
2364672 Processes 71 System Cache
2478716


Commit Charge Kernel
Memory Total 641640 Total 204956

Limit 6123360 Paged
143156 Peak 1257692
Non-paged 62212


Note: The Total commit charge went up to 875*** during what I
am calling the very high disk activity.
The above values were taken during very low disk activity.
None of the other reading changed very much during the unusual
disk activity.

You answered *some* of my questions. The amount of RAM is 3MB,
apparently. And even if your peak was as high as 875,000+ another
time, there is no excessive paging. That is good to know.

Now, please answer my *other* questions if you would like my
assistance. :)

Have you gotten rid of the pagefiles, defragged, and set a new
pagefile on C: only, using "System managed size"?

And...

What is the current malware status of your PC? What antimalware
programs do you use? Do they have the most up-to-date
definitions?


I am sorry it took a while to answer you,but I teach first and
second semester Physics in the summers and I just gave the
students their last exam before the finals, so I have been quite
busy. Also my computer at work went loony and I had to back up
all my files and reinstall the OS(Vista). It has been quite a
week!

To answer your first question:

1) I made sure all page files were off on all hard drive
partitions. 2) I defraged all drives.
3) I turned on the page file for drive C:/ only and set it to let
the system decide the size.
4) I defraged again. I used the built in XP defragger.

I use Zone Alarm Pro for fire wall etc, and anti mal ware. It is
up to date.

Those are reasonable. The general concensus is that you need a
firewall (ZA), a good antivirus software program and at least 3
anti spyware programs, for future considerations. As yet no single
spyware detector is turn-key and catches everything; each have
their own strengths, thus multiples are a good idea.


BTW I read something the other day about graphics cards getting
too hot because the fans stops working causing problems: locking
up, etc. Could that affect the hard drive activity?

Fairly unlikely I think, unless you know one of the fans are out.
There is a program called SIW - System Information for Windows,
which will read any temperature sensor in the computer. Nearly ALL
hard drives have sensors. It's free from:

http://www.gtopala.com/

and an excellent tool to have on hand. Basically it's what the XP
System Information should have been all along, IMO.
Temperature "probably" isn't the issue, but at least it can be
eliminated easily with that program. Or proven, as the case may
be<g>. It's being a hot & humid summer so far so it is possible,
especially if the mechanical internal design for heat's chimney
effects aren't the best or cables are blocking it.

Has anyone suggested you look in Task Manager Processes tab to see
what service/task is using all that time? I don't recall if you've
mentioned it. Highlight the cpu column and click the column header
two times to get it sorted high to low and watch for the activity
to start. Start TM and leave it minimized until the problem shows
itself; you'll also have a history of the cpu activity you can view
in the Performance tab. When TM is minimized, it becomes a tray
icon that shows cpu performance.

Unless it's malware, which status I don't know as I've not followed
the whole thread, it shouldn't be hard to track down what's
running. Then it's just a matter of figuring out why with some
other tools.

HTH,

Twayne`

PS You do know your e-mail address is being scraped up for spam
lists by having it in clear in your posts? Many robots scan these
groups to scrape addresses from. It shouldn't appear in your
headers either.



The hard drive is still showing the same high activity from time
to time. Again it lasts from about 30 seconds or a bit more.
I have recorded about twenty episodes so far and that is the
average. Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)




I used two anti malware programs SuperAntiSpyware and Malwarebytes.
The found some Adware and some bots that was all; got rid of them
still much disk activity.
I used the processes part of the Task Manager and saw that the
System Idle Process 0 used a lot of CPU time, up to 99% at times.
Is this bad?


No, not at all; it's good in fact. System Idle is just what is
sounds like; the cpu is 99% idle or in other words, only 1 to near
2% of its time is occupied with tasks.

No luck finding a process in Task Manager that corresponds to the 30
Seconds of thrashing?

I -think- I'm seeing a lot of questions asked that aren't getting
answered. It's important to asnwer all questions no matter how
trivial they may seem. Maybe I'm wrong; not sure.


Just for grins, take a look at the Event Viewer and see if there are
any meaningful ERRORs listed in it. Don't panic if you see a bunch
of Warnings, but make a note of ERRORs and what the error says.
Double-click the ERROR to get a properties window with data.
Start; Programs; Administrative Tools; Event Viewer.
ONLY be concerned with entries of the last few days; not much more.
List any ERRORs here, please.

If you haven't already, there are a couple of tools you can try that
might give some hints.

-- Autoruns will list all programs that start when XP starts. One of
those may be an obvious one for doing things during idle times.
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

-- Filemon, a program that reports ALL file activity. It can
create a long list in a hurry, so find the start/stop icon to use it
when it's advantageous.
http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx
If the disk is thrashing, it's possible it's file activity causing
it - as in, perhaps you've been Zombied. Hmm, that's a good point:
Does the thrasing go away if you turn off your modem/router?

-- REgmon, same as above but for the registry.
http://technet.microsoft.com/en-us/sysinternals/bb896652.aspx

Even if you end up not needing them now, they're very handy tools to
have around. All are free programs and safe downloads; no malware at
the addresses given.

My bet is you simply have something running in the background that
you didn't realize was there or have forgotten you installed<g>.

-- Have you tried turning off Indexing to see if that stops the
thrashing?

-- How about anti-virus programs that scan during idle times?

-- Have you defragmented or at least analyzed the drive to see how
fragmented it is?

HTH,

Twayne`



Harold A Climer
Dept. Of Physics Geology, and Astronomy
U.T, Chattanooga
Rm. 406A Engineering, Math & Computer Science Building
615 McCallie Ave. Chattanooga TN 37403
(e-mail address removed)

I am going to try all the stuff you suggested after I give my final
lab exams on Monday.
If none of it works I think I will just re install the OS.
I have about 10 days between the end of summer session and the
beginning of the Fall Semester to get the thing up and running again.
Before I do this I will look at the various processes at the top of
the list to see which is using lots of CPU resources.
Since my computer has a dual core processor, is there a utility that
looks at each processor individuallly to see what each one is doing?


Task Manager can do that; just change the View to one window per
processor should do it, I'm pretty sure. Yes, there are other 3rd party
apps too but I'm not aware of any of them to recommend one. You might
try a search on Google for

monitor +"dual cpu"

or

"dual cpu" +monitor

exactly as I typed them, and see what you get.

HTH,

Twayne`
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top