Tons of random files being read when closing temp.exe

[Arima]

Every time I close temp.exe (on this specific .cap - blank one does not do this), the computer runs the hard drive for a little while. I opened up the resource monitor, and it appears to be reading dozens of random files - exes, pngs, .caps that I haven't used in months - totally random stuff, but often the same random stuff, some of which involves construct, some doesn't. Does anyone have any idea why? Other applications don't appear to do anything of the sort.

Edit - Hmm, it appears to only happen with one of the .caps I'm working on.

Process Explorer (and Process Monitor) can tell you more.

[url:1u472m1q]http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx[/url:1u472m1q]

[Arima]

That program doesn't tell me anything else, in fact, resource monitor tells me more. For some reason, this specific .cap is somehow causing my computer (via svchost.exe (LocalSystemNetworkRestricted)) to read dozens or hundreds of random files after I close it.

[Ashley]

That's weird. It does delete some temporary files it created when running, but it shouldn't access any other files. Maybe it's something to do with when DirectX is shut down. Does the application runtime do it?

[Arima]

It claims svchost.exe "(LocalSystemNetworkRestricted)" is doing the reading of files, and the flurry of disk activity doesn't start until about 5 seconds after the app has been closed, and is off the applications/processes lists (with them updating at high speed).

All the random files are listed as 'background' IO priority - might it be prefetching or something? Why would it prefetch so much for that specific .cap and not others? I'm not doing anything weird with it.

Upon checking what's running, it claims PID 1064 is doing the reading of files - the services running under that are:

wudfsvc - Windows Driver Foundation - User-mode Driver Framework
WPDBusEnum - Portable Device Enumerator Service
WdiSystemHost - Diagnostic System Host
UxSms - Desktop Window Manager Session Manager
TrkWks - Distributed Link Tracking Client
TabletInputService - Tablet PC Input Service
SysMain - Superfetch
PcaSvc - Program Compatibility Assistant Service
Netman - Network Connections
hidserv - Human Interface Device Access
EMDMgmt - ReadyBoost
AudioEndpointBuilder - Windows Audio Endpoint Builder

That's a lot of stuff that I don't know what is. This is a new PC with little on it other than construct and a few graphics apps, and it's not hooked up to the internet.

[deadeye]

It's probably ReadyBoost. Google around and see what you can do about it, there's lots of info on the web with people having similar problems.

[Arima]

Turned out to be superfetch. I should have realized why it was only happening for this .cap - it's huge, and therefore needs to kick a lot of the stuff that's been pre-cached out of ram, then Vista promptly loads a whole bunch of stuff back into ram again. Man, it's really lousy at guessing what I'm going to work with. :/

[Ashley]

[quote="Arima":25793os1]Turned out to be superfetch. I should have realized why it was only happening for this .cap - it's huge, and therefore needs to kick a lot of the stuff that's been pre-cached out of ram, then Vista promptly loads a whole bunch of stuff back into ram again. Man, it's really lousy at guessing what I'm going to work with. :/[/quote:25793os1]
Wow, I was gonna say - if it's 5 sec after then the application has certainly quit and the operating system must be doing it. Yes, it does sound like really dumb caching, I'm not sure if there's anything I can do about it. The runtime doesn't do anything particularly surprising. It does load DLLs from temporary files which might confuse the superfetch cacher, but it deletes them after the app quits, and there's no other way to load a DLL - it must be on disk.

[Arima]

Yeah, I found a way to turn it off. Definitely not something you could do anything about, since it's on by default with vista, and construct's obviously got to use ram.

I also doubt it's confusing anything - I think superfetch is loading lots of random stuff, then dumps it when my game runs because my game needs the ram, then when I quit there's ram free, which makes vista recache everything - which explains why it kept loading the same random files each time.

I'm glad it didn't have anything to do with construct!

@Arima @Ashley



we find "svchost.exe" in index.html when we export the capx into html5.

does it a trojan horses??

after we reinstall C2 and put any plugin, it does not matter.

so can you help us??

thanks!!!!!