我在使用 Windows 资源管理器时遇到了一些严重问题。我创建了相关问题,但没有缩小问题范围。我的问题是 Windows 资源管理器刷新文件夹太慢 - 我的意思是:一切都运行正常,我删除了一个文件,刷新后文件仍然存在,您可以想象很多程序都因为这种行为而崩溃。所有程序都出现了 IOException,我通过 Process Monitor 跟踪了问题并得到了以下信息:
Explorer.EXE 2296 IRP_MJ_CREATE * DELETE PENDING Desired Access: Read Attributes, Delete, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
Explorer.EXE 2296 IRP_MJ_CREATE * DELETE PENDING Desired Access: Generic Read, Disposition: Open, Options: Open Requiring Oplock, Attributes: N, ShareMode: Read, AllocationSize: n/a
svchost.exe 664 IRP_MJ_CLEANUP C:\Users\h4x0r\Desktop\ModEncryptor\ModEncryptor\bin\Release\ModEncryptor.exe SUCCESS
Explorer.EXE 2296 IRP_MJ_CREATE * DELETE PENDING Desired Access: Generic Read, Disposition: Open, Options: Open Requiring Oplock, Attributes: N, ShareMode: Read, AllocationSize: n/a
Explorer.EXE 2296 FASTIO_NETWORK_QUERY_OPEN * FAST IO DISALLOWED
Explorer.EXE 2296 IRP_MJ_CREATE * DELETE PENDING Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
Explorer.EXE 2296 FASTIO_NETWORK_QUERY_OPEN * FAST IO DISALLOWED
Explorer.EXE 2296 FASTIO_NETWORK_QUERY_OPEN *.DLL FAST IO DISALLOWED
Explorer.EXE 2296 IRP_MJ_CREATE * DELETE PENDING Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
Explorer.EXE 2296 IRP_MJ_CREATE *.DLL NAME NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
Explorer.EXE 2296 FASTIO_NETWORK_QUERY_OPEN *.DLL FAST IO DISALLOWED
Explorer.EXE 2296 IRP_MJ_CREATE *.DLL NAME NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
Explorer.EXE 2296 IRP_MJ_CREATE * DELETE PENDING Desired Access: Generic Read, Disposition: Open, Options: Open Requiring Oplock, Attributes: N, ShareMode: Read, AllocationSize: n/a
System 4 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION * SUCCESS SyncType: SyncTypeOther
System 4 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION * SUCCESS
System 4 IRP_MJ_CLOSE * SUCCESS
System 4 IRP_MJ_CLOSE * SUCCESS
这是在文件被删除后“记录”的,这就是阻止我访问它的原因。LockHunter 说锁定文件的进程是系统(没有路径,没有其他信息)。一开始,Windows 资源管理器试图删除文件,如您所见,没有成功,请注意最后 4 行 - 系统,之后可以对文件执行任何操作。我如何识别此进程?
现在我记得我使用 tweak 禁用了 LastAccess,但恢复它没有帮助。有人能帮帮我吗?这不是系统文件,运行了 sfc - 没有问题,文件不是特定的 - 基本上每个 .exe/.dll 都是这样表现的。
答案1
如果不亲眼看到机器,就很难进行诊断,因为您确实需要亲身感受问题才能进行诊断。
但是,根据您提供的信息,如果有人向我提出这个问题,我会将范围缩小到防病毒/常驻类型扫描程序、恶意软件防护,此后,您的硬盘可能就会损坏。
答案2
我找到了问题所在 - 禁用了 Microsoft 服务、程序兼容性和应用程序体验。启用此功能解决了我的问题。