From Newsgroup: alt.comp.os.windows-10

Using win11 but you win10 guys are pretty sharp. Did

In alt.comp.os.windows-11, on Thu, 19 Feb 2026 10:59:42 -0500, Paul <nospam@needed.invalid> wrote:

Process Monitor, Filter set to "Operation is Readfile/Writefile/Createfile", >then look to see if a particular partition letter is being accessed.

https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

Can't get to Agent or Eudora either (like Firefox) to type results when
procmon running. Is that normal?

Fortunely I've learned the secret method in win11 to take screen shots.
Af least that worked.

504 Create file E:\ Success Desired Access R...
504 File sysem cont E:\ Invalid Device R. Control 0x9023c(D...
504 Close file E:\ Success

And more stuff like this. I'll give more details if anyone wants.
So why is it doing this, trying to access the drive? And how can I make
it stop?
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-10

micky wrote on 2/19/2026 3:20 PM:

Using win11 but you win10 guys are pretty sharp. Did

In alt.comp.os.windows-11, on Thu, 19 Feb 2026 10:59:42 -0500, Paul <nospam@needed.invalid> wrote:

Process Monitor, Filter set to "Operation is Readfile/Writefile/Createfile", >> then look to see if a particular partition letter is being accessed.

https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

Can't get to Agent or Eudora either (like Firefox) to type results when procmon running. Is that normal?

Fortunely I've learned the secret method in win11 to take screen shots.
Af least that worked.

504 Create file E:\ Success Desired Access R...
504 File sysem cont E:\ Invalid Device R. Control 0x9023c(D...
504 Close file E:\ Success

And more stuff like this. I'll give more details if anyone wants.
So why is it doing this, trying to access the drive? And how can I make
it stop?

Black vinyl electrical tape usually works well for me.


--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-10

On Thu, 2/19/2026 4:20 PM, micky wrote:

Using win11 but you win10 guys are pretty sharp. Did

In alt.comp.os.windows-11, on Thu, 19 Feb 2026 10:59:42 -0500, Paul <nospam@needed.invalid> wrote:

Process Monitor, Filter set to "Operation is Readfile/Writefile/Createfile", >> then look to see if a particular partition letter is being accessed.

https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

Can't get to Agent or Eudora either (like Firefox) to type results when procmon running. Is that normal?

Fortunely I've learned the secret method in win11 to take screen shots.
Af least that worked.

504 Create file E:\ Success Desired Access R...
504 File sysem cont E:\ Invalid Device R. Control 0x9023c(D...
504 Close file E:\ Success

And more stuff like this. I'll give more details if anyone wants.
So why is it doing this, trying to access the drive? And how can I make
it stop?

When you use Process Monitor, in a shell you can use

tasklist /svc

and that will give a listing of PID (process ID) and the name
of the thing.

For example, say that "504" was a PID. Check to see if there is a
process name associated with it. It could be a service host, in which
case we'd need to learn more about it to understand what its sphere
of influence is.

*******

Yes, Shift-PrtScn works, and puts a copy of the screen
into the Clipboard. You can then paste that into a graphics
editing application.

snippingtool.exe takes screenshots, and it can be pinned to the Task Bar
so you don't have to keep typing that into the Start:Run box.

*******

File Explorer can take an interest in a USB stick, but that could happen
if the user attempts to access E: in a windows.

But if 504 has some other name besides "explorer.exe", then you would
want to know what its name is. And tasklist /svc lists both processes
and svchost definitions. Some svchost, have 16 things inside them, but
they may also be someone timid services that hardly ever run.
Whereas wuauserv is a busy-beaver, because it is related to
Windows Update and scanning the side by side tree for work to do. And there
is no good reason for that to be "interested in E: " .

A slack-jawed svchost...

svchost.exe 3532 OneSyncSvc_a49aa,
PimIndexMaintenanceSvc_a49aa,
UnistoreSvc_a49aa, UserDataSvc_a49aa

The OS boots up in a dynamic fashion, and the assignment of process
ID numbers (PID) is in a sense "random". That's why you have to
dump a copy of that info, when doing a Procmon at the time.

Paul
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-10

On 2026/2/19 23:46:9, Paul wrote:
[]

Yes, Shift-PrtScn works, and puts a copy of the screen
into the Clipboard. You can then paste that into a graphics
editing application.

[]

PrtScn usually works on its own for me - no need for shift. Alt-PrtScn, however, just copies the currently-active window, which saves cropping
effort if you only wanted that (which is usually the case for me).
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G()ALIS-Ch++(p)Ar++T+H+Sh0!:`)DNAf

Reality television. It's eroding the ability of good scripted
television to survive. - Patrick Duffy in Radio Times 2-8 February 2013
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-10

On Thu, 2/19/2026 4:20 PM, micky wrote:

Using win11 but you win10 guys are pretty sharp. Did

In alt.comp.os.windows-11, on Thu, 19 Feb 2026 10:59:42 -0500, Paul <nospam@needed.invalid> wrote:

Process Monitor, Filter set to "Operation is Readfile/Writefile/Createfile", >> then look to see if a particular partition letter is being accessed.

https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

Can't get to Agent or Eudora either (like Firefox) to type results when procmon running. Is that normal?

Fortunely I've learned the secret method in win11 to take screen shots.
Af least that worked.

504 Create file E:\ Success Desired Access R...
504 File sysem cont E:\ Invalid Device R. Control 0x9023c(D...
504 Close file E:\ Success

And more stuff like this. I'll give more details if anyone wants.
So why is it doing this, trying to access the drive? And how can I make
it stop?

On the 0x9023c IOCTL call, I can't find any examples
at all of using that. There seems to be such an IOCTL,
but maybe that activity is nefarious.

I hope the machine has been "fully rebooted" at least
once, to check and see whether this is some sort of
Windows Update side effect.

Another possibility, is the USB stick is a SONY, with a
reversed sense RMB (Removable Media Bit) and the USB
stick is claiming it is a HDD.

And as for Procmon, it should not block other activity
on the computer. Perhaps if the computer had a single
core, there could be some fighting going on for CPU
cycles.

I would test with a second USB stick, like a Cruiser Glide.

Paul
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-10

In alt.comp.os.windows-10, on Thu, 19 Feb 2026 16:20:07 -0500, micky <NONONOmisc07@fmguy.com> wrote:

Using win11 but you win10 guys are pretty sharp. Did

In alt.comp.os.windows-11, on Thu, 19 Feb 2026 10:59:42 -0500, Paul ><nospam@needed.invalid> wrote:

Process Monitor, Filter set to "Operation is Readfile/Writefile/Createfile", >>then look to see if a particular partition letter is being accessed.

https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

Can't get to Agent or Eudora either (like Firefox) to type results when >procmon running. Is that normal?

Fortunely I've learned the secret method in win11 to take screen shots.
Af least that worked.

504 Create file E:\ Success Desired Access R...
504 File sysem cont E:\ Invalid Device R. Control 0x9023c(D...
504 Close file E:\ Success

And more stuff like this. I'll give more details if anyone wants.
So why is it doing this, trying to access the drive? And how can I make
it stop?

There were other references later, not the same as this.

I was going to adjust the column widths so none of the messages would be truncated. And I was going to take photos with my phone, so I could
get more than one photo, of different parts of the file, in one session.
But I actually loaded the file with songs, tested it, and moved it to my suitcase, soI'll never know what it was doing, but I hated that light.
It was like the phone was ringing. It's quiet now. zzzzzzzz.
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-10

On Sun, 2/22/2026 4:04 PM, micky wrote:

In alt.comp.os.windows-10, on Thu, 19 Feb 2026 16:20:07 -0500, micky <NONONOmisc07@fmguy.com> wrote:

Using win11 but you win10 guys are pretty sharp. Did

In alt.comp.os.windows-11, on Thu, 19 Feb 2026 10:59:42 -0500, Paul
<nospam@needed.invalid> wrote:

Process Monitor, Filter set to "Operation is Readfile/Writefile/Createfile",
then look to see if a particular partition letter is being accessed.

https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

Can't get to Agent or Eudora either (like Firefox) to type results when
procmon running. Is that normal?

Fortunely I've learned the secret method in win11 to take screen shots.
Af least that worked.

504 Create file E:\ Success Desired Access R...
504 File sysem cont E:\ Invalid Device R. Control 0x9023c(D...
504 Close file E:\ Success

And more stuff like this. I'll give more details if anyone wants.
So why is it doing this, trying to access the drive? And how can I make
it stop?

There were other references later, not the same as this.

I was going to adjust the column widths so none of the messages would be truncated. And I was going to take photos with my phone, so I could
get more than one photo, of different parts of the file, in one session.
But I actually loaded the file with songs, tested it, and moved it to my suitcase, soI'll never know what it was doing, but I hated that light.
It was like the phone was ringing. It's quiet now. zzzzzzzz.

Have a play with SnippingTool.exe . You can pin that to the Taskbar.

SnippingTool has three groups of icons in the top row.

"New" and four icons on the left. These are the
icons controlling the initial screen capture. The "rectangular"
option for capture, is convenient when only wanting to do OCR.

The middle icons are for post-processing. The sixth icon
from the left, of those middle ones, if you hold your mouse
over it, it says "Text Actions". Clicking that does OCR,
but it is relatively dumb OCR in that lines of text can be
split up into smaller chunks we don't need. There will be
a "Copy Text" button for copying the OCRed text. You can paste
that text into Notepad.

On the right, are "Save As" icons and so on. You can save
a picture and then continue to do OCR. The pictures collected
can also be in your Pictures folder somewhere (date stamped).

The only thing it doesn't do well, is the timer should have
applied to everything, and it does not. When I want to capture
an open menu, that isn't always possible. Then I have to use
the capture tool in GIMP to do it.

It's possible the XBOX gaming or some NVidia panel also have
screen capturing options, but I've not used them.

Paul
--- Synchronet 3.21b-Linux NewsLink 1.2