I just noticed today that IQ seems to be constantly accessing the registry for some ExtendedError key related to Microsoft Jet 4.0 OLE DB Provider Error Lookup. Below is a dump of a few seconds from procman. I have over ten thousand of these from just a few minutes of IQ running...
Is something in my environment missing that IQ is looking for?
d
"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"8:31:35.8978608 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Read"
"8:31:35.8978829 AM","InfoQube.exe","5000","RegOpenKey","HKCR\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","SUCCESS","Desired Access: Read"
"8:31:35.8979245 AM","InfoQube.exe","5000","RegQueryKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Query: Name"
"8:31:35.8979633 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Maximum Allowed"
"8:31:35.8979974 AM","InfoQube.exe","5000","RegEnumKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Index: 0, Name: {dee35071-506b-11cf-b1aa-00aa00b8de95}"
"8:31:35.8980315 AM","InfoQube.exe","5000","RegCloseKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS",""
"8:31:35.8981097 AM","InfoQube.exe","5000","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"8:31:35.8981290 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Read"
"8:31:35.8981502 AM","InfoQube.exe","5000","RegOpenKey","HKCR\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","SUCCESS","Desired Access: Read"
"8:31:35.8981910 AM","InfoQube.exe","5000","RegQueryKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Query: Name"
"8:31:35.8982298 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Maximum Allowed"
"8:31:35.8982639 AM","InfoQube.exe","5000","RegEnumKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Index: 0, Name: {dee35071-506b-11cf-b1aa-00aa00b8de95}"
"8:31:35.8982977 AM","InfoQube.exe","5000","RegCloseKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS",""
"8:31:35.8983399 AM","InfoQube.exe","5000","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"8:31:35.8983589 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Read"
"8:31:35.8983799 AM","InfoQube.exe","5000","RegOpenKey","HKCR\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","SUCCESS","Desired Access: Read"
"8:31:35.8984204 AM","InfoQube.exe","5000","RegQueryKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Query: Name"
"8:31:35.8984586 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Maximum Allowed"
"8:31:35.8984927 AM","InfoQube.exe","5000","RegEnumKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Index: 0, Name: {dee35071-506b-11cf-b1aa-00aa00b8de95}"
"8:31:35.8985265 AM","InfoQube.exe","5000","RegCloseKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS",""
"8:31:35.8978608 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Read"
"8:31:35.8978829 AM","InfoQube.exe","5000","RegOpenKey","HKCR\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","SUCCESS","Desired Access: Read"
"8:31:35.8979245 AM","InfoQube.exe","5000","RegQueryKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Query: Name"
"8:31:35.8979633 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Maximum Allowed"
"8:31:35.8979974 AM","InfoQube.exe","5000","RegEnumKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Index: 0, Name: {dee35071-506b-11cf-b1aa-00aa00b8de95}"
"8:31:35.8980315 AM","InfoQube.exe","5000","RegCloseKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS",""
"8:31:35.8981097 AM","InfoQube.exe","5000","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"8:31:35.8981290 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Read"
"8:31:35.8981502 AM","InfoQube.exe","5000","RegOpenKey","HKCR\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","SUCCESS","Desired Access: Read"
"8:31:35.8981910 AM","InfoQube.exe","5000","RegQueryKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Query: Name"
"8:31:35.8982298 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Maximum Allowed"
"8:31:35.8982639 AM","InfoQube.exe","5000","RegEnumKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Index: 0, Name: {dee35071-506b-11cf-b1aa-00aa00b8de95}"
"8:31:35.8982977 AM","InfoQube.exe","5000","RegCloseKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS",""
"8:31:35.8983399 AM","InfoQube.exe","5000","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"8:31:35.8983589 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Read"
"8:31:35.8983799 AM","InfoQube.exe","5000","RegOpenKey","HKCR\CLSID\{DEE35070-506B-11CF-B1AA-00AA00B8DE95}\ExtendedErrors","SUCCESS","Desired Access: Read"
"8:31:35.8984204 AM","InfoQube.exe","5000","RegQueryKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Query: Name"
"8:31:35.8984586 AM","InfoQube.exe","5000","RegOpenKey","HKCU\Software\Classes\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","NAME NOT FOUND","Desired Access: Maximum Allowed"
"8:31:35.8984927 AM","InfoQube.exe","5000","RegEnumKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS","Index: 0, Name: {dee35071-506b-11cf-b1aa-00aa00b8de95}"
"8:31:35.8985265 AM","InfoQube.exe","5000","RegCloseKey","HKCR\CLSID\{dee35070-506b-11cf-b1aa-00aa00b8de95}\ExtendedErrors","SUCCESS",""
Comments
consuming your CPU, but not shown as doing so. The reason for that is due to
the way that Windows does its time accounting. "Periodically (every 10 ms on
most systems) a clock interrupt fires. In response the Windows clock
interrupt routine executes and assumes that whatever thread is currently
running is the one that's used the CPU since the last clock interrupt. 10 ms
is a long time on today's multigigahertz CPUs and many threads can execute
between clock interrupts, but never be seen by the clock interrupt routine.
Context Switch Delta column and sort by it. You will see many processes with
threads that are running that do not show up as consuming any CPU time,
because the threads are running in between the 10ms clock interval. Some of
these processes are performing needless polling (such as querying the
registry or checking for changes in a folder). That is just plain sloppy
programming. Others may be performing useful work, but are running "under
the radar" of the system's time accounting mechanisms. It's your job to
determine the wheat from the chaff."