svchost.exe "DCOM launch" maltreats my harddisks


  1. Posts : 4
    Windows 7 Professional x64
       #1

    svchost.exe "DCOM launch" maltreats my harddisks


    Hi everyone,

    I just set up my new HTPC with a RAID5 consisting of three drives when I noticed a constant (~ every second) harddisk noise and HDD-LED flashing, so I downloaded Process Monitor to analyze who is penetrating my drives.

    It turns out that svchost.exe is requesting registry files of my DeviceClasses nearly every second. (svchost.exe 764 RegQueryValue / RegCloseKey / RegQueryKey)

    These are in particular my Vertex 3 SSD, the RAID 5 (Store) and so it seems a USB 3 HUB (Not a single USB device is connected, though!)

    HKLM\System\CurrentControlSet\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskOCZ-VERTEX3_____________________________2.22____#4&18f37dbf&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

    HKLM\System\CurrentControlSet\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskStore1.0.00__#4&18f37dbf&0&0.1.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

    HKLM\System\CurrentControlSet\Control\DeviceClasses\{f5f8219f-14c2-4e33-8b8b-06ee75321d07}\##?#IUSB3#ROOT_HUB30#4&a3f7854&0#{f5f8219f-14c2-4e33-8b8b-06ee75321d07}

    This constant accessing is not only annoying and doesnt let the drives to go into sleep, I am afraid it reduces the drives lifespan.

    Of course I checked the standard drive accesser like defrag, indexing et.

    I found this problem a couple of times on the internet but without a helpful answer.
    I even deleted the keys but Windows just recreates them after reboot (even the USB one without any USB device connected)

    Does anybody have an idea what is going on here? I am pretty stumped...

    Thanks in advance.
      My Computer


  2. Posts : 4
    Windows 7 Professional x64
    Thread Starter
       #2

    come on where are the nerds when you need them? :/
      My Computer


  3. Posts : 4
    Windows 7 Professional x64
    Thread Starter
       #3

    bump
      My Computer


  4. Posts : 5,642
    Windows 10 Pro (x64)
       #4

    DCOM is not doing itself, it is a host to other software, could be another application or a driver.
    Use Process Monitor and Process Explorer to determine what is opening those registry keys.
      My Computer


  5. Posts : 4
    Windows 7 Professional x64
    Thread Starter
       #5

    OK you need to help me here. Process Monitor shows me that svchost.exe is opening those keys. When I look into the event properties of this opening event I just find "C:\Windows\system32\svchost.exe -k DcomLaunch" to be the source. Where do I need to look?

    Process Explorer on the other hand does not seem to show any registry activity, just processes. How am I supposed to know which one is accessing the keys when it isnt shown.

    Thanks.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:00.
Find Us