Find out the behind-the-scenes black hand reveals the mystery of Win7 hard drive flash

A few days ago, the black man put on a new Win7 system, compared with XP who has been with him for many years, Windows7 is really much better. Aero Peek, taskbar thumbnails, Aero Snap..., right! And the one who loves the popular Aero Shake, the most important thing is that the running speed is not much slower than XP. However, in recent days, there will always be a troublesome thing to worry about, that is, the hard disk light of the computer is always bright, is it difficult for the RP to encounter the legendary Trojan? NO! ...NO! ...NO! ..., I used to use anti-virus software to bomb the fire several times before! Maybe, it's time to think about it...

1. Pull out the culprit

The best way to get out the hard drive of the hard drive is to use Win7's own " Resource Monitor." Look at it clearly, it's not the resource manager that looks at the file, but a small button hidden under the Task Manager → Performance tab.

Unlike task managers, resource monitors are more widely monitored, and one of the obvious ones is the increased monitoring of disk reads and writes. So with this module, Blackman easily finds the most frequently read and write processes on the hard disk based on three indicators: read (bytes/second)/write (bytes/second)/total (bytes/second). file. Found that the culprit turned out to be... Flashget! ! !

2. De-authentication

Of course, this is just a special case of Xiaobian simulation. In fact, it is not always clear the source of the process through the process name. For example, when this guy is dressed up as a system module, how can we tell?

Svchost.exe is a very common system service program in Windows system, can be used to start any service, so we often see a lot of Svchost.exe in the process list without knowing In fact, the resource monitor can also let us svchost.exe to spoof. Under the Disk Activity panel of the Resource Monitor, you will find that there are two levels of "image" and "file" tags. The "image" is the system process we often say, and the "file" is the specific file that triggers the process. In other words, with this feature, we can actually locate a file directly instead of a general system process.

3. If you don't understand, check

Of course you may not have studied the system process too much, and you can't understand the nouns introduced in the list. It doesn't matter, there is a question to ask Baidu! In the "Process of Disk Activity" column, we can easily query unfamiliar processes through the right-click menu, and the query results will be automatically opened by the default search engine. Less than a minute, the bottom of the process can check out the water.

Writing at the end

Catch the culprit, the black man’s mood is much better. In fact, this article is not a profound technology, but it is just a function that is rarely valued. But as you have seen before, compared with WinXP in the early years, Windows7 has more user-friendly improvements, and using them properly can not only save us a lot of time, but also easily solve some bizarre problems. This article will be a good introduction to the use of Win7.