none
HD running all the time.

    Question

  • Hi all. I have a situation that I have been trying to uncover for a

    year or more. If I go to a website, one I go to a lot is called

    Redhotpawn.com a chessplaying site I like a lot.

    So I am sitting there with nothing happening on the screen and I am

    just looking, after a few minutes the HD starts whacking away but

    if I move the mouse ANY distance, the HD calms down. I go to view

    processes and I don't see anything out of the ordinary but it

    is disturbing to have the HD running so much, it can't help the

    life of the drive if nothing else and I would like to get to the root of

    what it is to at least allay my fears its something more sinister like

    spyware or something.

    Anytime I do a port security test, it always comes back no suspicious

    activity so it doesn't SEEM to be downloading anything ALA

    a keylogger. Any help here? Thanks. Don.

    Thursday, January 19, 2006 11:09 PM

All replies

  • Does it do this repeatably? Some Windows background housekeeping tasks wait until the machine's been idle for a time (i.e. no mouse or keyboard activity) before running.

    If you want to see what could be accessing the disk when the machine's idle then use Filemon. You may need to edit the filters to exclude some events. Read operations may also be seen which are being serviced out of cache without requiring disk access. It can help to run Diskmon alongside Filemon.

    Also note that some makes of drive do some random head movement when idle as part their self-maintenance.
    Friday, January 20, 2006 12:12 AM
  • Thanks for the reply. I will try that and did not know that about

    HD maintenance. I know it didn't happen to any of the machines at

    work and I access about a dozen of them in sweep of the cleanroom.

    We have Dell's at work and also at home. Even my other Dell at home

    doesn't do that but I didn't look to see if the HD were the same brand.

    Friday, January 20, 2006 6:34 AM
  • Hi back, I ran filemon and there is a bunch of obvious stuff like

    my Counterspy doing something and Roxio doing something and a few

    like that but no HD work. Then after a few minutes of that, something

    comes in called CISVC.EXE and thats when the HD activity starts going

    nuts till the mouse is hit. It accesses something called

    System volume information\catalog

    and has a bunch of read write query and flush operations and maybe

    some more but they go by so fast its hard to keep up.

    So what is CISVC.EXE, housekeeping?

    Friday, January 20, 2006 6:50 AM
  •   Process File: cisvc.exe
      Process Name: Microsoft Index Service Helper

      Description: cisvc.exe is a process that belongs to the Microsoft Windows Operating System. It is used to monitor the memory usage in CIDAEMON.exe and prevent low memory problems. This is an essential system process and should not be removed. This program is an essential system process and should not be removed.

    and

      Process File: cidaemon.exe
      Process Name: Microsoft Indexing Service

      Description: cidaemon.exe is an indexing service which catalogues files on your computer to enable for faster file searches.


    So.... it's the indexing service. Turn it off!

    Friday, January 20, 2006 6:53 AM
  • So should I or should I not turn it off? In the first statement you say

    leave it up and the second you say turn it off, but with a wink.

    Does that mean if I do, my comp goes bonkers?

    Why does just this comp do it and not the rest?

    Do you think constantly driving the HD like it does will lower the

    life of the HD?

    Friday, January 20, 2006 11:43 PM
  • It's really a matter of choice. I usually just turn it off because it bugs me. It's a non essential process.

    I find it difficult to believe it only happens on one PC though. This is a standard process and the behaviour you describe has always happened on all of my XP boxes.
    Saturday, January 21, 2006 3:07 AM
  • Also Namrehto did not say not to turn it off. The first part of his answer was a cut and paste from a site which explains what processes are for the peace of mind of folk llike us. His personal comment was the last line which told you (as I do) to just turn it off.

    You do this with a del in Process Explorer.
    Saturday, January 21, 2006 3:10 AM
  • In Admin Tools->Services, locate "Indexing Service", select it, then click "stop" to stop the service. Right-click, pick properties and set it from automatic start to manual.
    Saturday, January 21, 2006 3:56 AM