observation

Hi!

Some experiment under Win2000:

  1. Please run well known “filemon” :).
  2. Choose system drive only to filter.
  3. Run Task Manager.

Question: for why so many read(execute?) requests?

Eugene.


You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

Every time some program updates its icon in tray, Windows Explorer opens
that program’s executable with Execute flag. This behavior annoyed our
anti-virus monitor once.

Alexey Logachyov
xxxxx@vba.com.by
VirusBlokAda ltd.
http://www.vba.com.by

----- Original Message -----
From: “Eugene Lomovsky”
To: “NT Developers Interest List”
Sent: Friday, December 14, 2001 11:41 AM
Subject: [ntdev] observation

> Hi!
>
> Some experiment under Win2000:
> 1. Please run well known “filemon” :).
> 2. Choose system drive only to filter.
> 3. Run Task Manager.
>
> Question: for why so many read(execute?) requests?
>
> Eugene.
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@vba.com.by
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com


You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com