我正在尝试找出导致 Windows 10 系统中的第二个驱动器旋转的原因。我已禁用该驱动器上的分页、碎片整理和索引,并将其放入 Windows Defender 的排除列表中。
但是,瞧,lowlyexplorer.exe
正在搞乱它,正如在虚假旋转时发生的事件日志所证明的那样:
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 2020-09-24 12:55:53 PM
Event ID: 4656
Task Category: File System
Level: Information
Keywords: Audit Success
User: N/A
Computer: DESKTOP-K8055OB
Description:
A handle to an object was requested.
Subject:
Security ID: DESKTOP-K8055OB\kaz
Account Name: kaz
Account Domain: DESKTOP-K8055OB
Logon ID: 0x19B1C
Object:
Object Server: Security
Object Type: File
Object Name: E:\
Handle ID: 0x162c
Resource Attributes: -
Process Information:
Process ID: 0xf00
Process Name: C:\Windows\explorer.exe
Access Request Information:
Transaction ID: {00000000-0000-0000-0000-000000000000}
Accesses: SYNCHRONIZE
ReadData (or ListDirectory)
ReadAttributes
Access Reasons: SYNCHRONIZE: Granted by D:(A;;0x1301bf;;;AU)
ReadData (or ListDirectory): Granted by D:(A;;0x1301bf;;;AU)
ReadAttributes: Granted by D:(A;;0x1301bf;;;AU)
Access Mask: 0x100081
Privileges Used for Access Check: -
Restricted SID Count: 0
有一个资源管理器窗口打开,仅显示“此电脑 > 文档”。它未被探索。
我怎样才能找出 Explorer 出现这种情况的原因,以及如何停止这种情况?