ekrn.exe 不断向我的硬盘写入数据

ekrn.exe 不断向我的硬盘写入数据

大约五天前,我安装了 Windows 7,我发现该系统一直在使用我的硬盘。

我关闭了文件索引和所有其他服务,但没有任何影响。

现在我下载了 SysInternals Process Monitor,它在一秒钟内重复显示此部分十多次:

15:24:06,5987317    ekrn.exe    1492    RegQueryKey HKLM    SUCCESS Query: HandleTags, HandleTags: 0x0
15:24:06,5987627    ekrn.exe    1492    RegOpenKey  HKLM\Software\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles   SUCCESS Desired Access: Read
15:24:06,5987969    ekrn.exe    1492    RegSetInfoKey   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles   SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0
15:24:06,5988231    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\Enable    NAME NOT FOUND  Length: 144
15:24:06,5988549    ekrn.exe    1492    RegQueryKey HKLM    SUCCESS Query: HandleTags, HandleTags: 0x0
15:24:06,5988778    ekrn.exe    1492    RegOpenKey  HKLM\Software\ESET\ESET Security\CurrentVersion\Plugins\01000101\Default    NAME NOT FOUND  Desired Access: Read
15:24:06,5989098    ekrn.exe    1492    RegQueryKey HKLM    SUCCESS Query: HandleTags, HandleTags: 0x0
15:24:06,5989317    ekrn.exe    1492    RegOpenKey  HKLM\Software\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile   SUCCESS Desired Access: Read
15:24:06,5989573    ekrn.exe    1492    RegSetInfoKey   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile   SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0
15:24:06,5989768    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DiskFloppy    NAME NOT FOUND  Length: 144
15:24:06,5989979    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DiskLocal NAME NOT FOUND  Length: 144
15:24:06,5990170    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DiskNetwork   NAME NOT FOUND  Length: 144
15:24:06,5990362    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanOpen  NAME NOT FOUND  Length: 144
15:24:06,5990549    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanExecute   NAME NOT FOUND  Length: 144
15:24:06,5990737    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanCreate    NAME NOT FOUND  Length: 144
15:24:06,5990932    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanNetworkOnClose    NAME NOT FOUND  Length: 144
15:24:06,5991119    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanOnAccess  NAME NOT FOUND  Length: 144
15:24:06,5991311    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanShutdown  NAME NOT FOUND  Length: 144
15:24:06,5991498    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\OptimizeScan  NAME NOT FOUND  Length: 144
15:24:06,5991686    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\Autostart SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5991874    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\Autostart SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5992075    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\OnOpen_RuntimeArchives    NAME NOT FOUND  Length: 144
15:24:06,5992270    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\OnOpen_AutoExecArchives   NAME NOT FOUND  Length: 144
15:24:06,5992461    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\OnOpen_AdvanceHeuristic   NAME NOT FOUND  Length: 144
15:24:06,5992649    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanExecuteAH SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5992836    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanExecuteAH SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5993034    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DiskFloppyOnExecuteAH NAME NOT FOUND  Length: 144
15:24:06,5993222    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\BlockRemovableDevices NAME NOT FOUND  Length: 144
15:24:06,5993413    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DefaultArchSettings   NAME NOT FOUND  Length: 144
15:24:06,5993605    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ArchiveDepth  NAME NOT FOUND  Length: 144
15:24:06,5993796    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ArchiveMaxFilesize    NAME NOT FOUND  Length: 144
15:24:06,5993994    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AllowedDevices    NAME NOT FOUND  Length: 144
15:24:06,5994202    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\USBDevicesLikeDisk    NAME NOT FOUND  Length: 144
15:24:06,5994403    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AdvancedBlockRemovableDevices NAME NOT FOUND  Length: 144
15:24:06,5994598    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AskForScanOfRemovableDevice   NAME NOT FOUND  Length: 144
15:24:06,5994793    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AskForScanOfRemovableDeviceDefaultAction  SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5994984    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AskForScanOfRemovableDeviceDefaultAction  SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5995212    ekrn.exe    1492    RegCloseKey HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile   SUCCESS 
15:24:06,5995421    ekrn.exe    1492    RegCloseKey HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles   SUCCESS 
15:24:06,6789163    GSvr.exe    1576    CreateFile  C:\service.log  SUCCESS Desired Access: Generic Read/Write, Disposition: OpenIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Opened
15:24:06,6790420    GSvr.exe    1576    CreateFile  C:\service.log  SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
15:24:06,6790997    GSvr.exe    1576    QueryFileInternalInformationFile    C:\service.log  SUCCESS IndexNumber: 0x2000000000095
15:24:06,6791369    GSvr.exe    1576    QueryBasicInformationFile   C:\service.log  SUCCESS CreationTime: 2011.11.09. 0:04:45, LastAccessTime: 2011.11.18. 14:45:17, LastWriteTime: 2011.11.18. 15:24:06, ChangeTime: 2011.11.18. 15:24:06, FileAttributes: A
15:24:06,6795206    GSvr.exe    1576    QueryStandardInformationFile    C:\service.log  SUCCESS AllocationSize: 20 480, EndOfFile: 19 547, NumberOfLinks: 1, DeletePending: False, Directory: False
15:24:06,6795424    GSvr.exe    1576    CloseFile   C:\service.log  SUCCESS 
15:24:06,6796588    GSvr.exe    1576    QueryStandardInformationFile    C:\service.log  SUCCESS AllocationSize: 20 480, EndOfFile: 19 547, NumberOfLinks: 1, DeletePending: False, Directory: False
15:24:06,6796824    GSvr.exe    1576    ReadFile    C:\service.log  SUCCESS Offset: 19 546, Length: 1, Priority: Normal
15:24:06,6797162    GSvr.exe    1576    QueryStandardInformationFile    C:\service.log  SUCCESS AllocationSize: 20 480, EndOfFile: 19 547, NumberOfLinks: 1, DeletePending: False, Directory: False
15:24:06,6797353    GSvr.exe    1576    QueryStandardInformationFile    C:\service.log  SUCCESS AllocationSize: 20 480, EndOfFile: 19 547, NumberOfLinks: 1, DeletePending: False, Directory: False
15:24:06,6797732    GSvr.exe    1576    WriteFile   C:\service.log  SUCCESS Offset: 19 547, Length: 1, Priority: Normal
15:24:06,6798292    GSvr.exe    1576    CloseFile   C:\service.log  SUCCESS 

所以ekrn.exe(ESET Smart Security) 不是那么智能,它试图在注册表中做一些事情,但它不能,并在 service.log 中记录问题,并不断地重试......

知道如何修复它吗?

答案1

听起来 ESet 与 Windows 7 存在兼容性问题。也许您使用的是与 Windows 7 不兼容的旧版本,或者安装存在问题。我首先要确保您使用的是最新版本的 ESet。如果是,请尝试卸载并重新安装 ESet。

相关内容