Procmon not working as expected

[sm625]

Something keeps making my floppy drive go active. I figured I would use procmon to see what is hitting it. I configured the filter how I think it should be configured. Yet it doesnt show anything, even though the floppy LED came on like 5 times while it was running

Is there anything I'm doing wrong? Or does procmon simply not work?

 

[Nothinman]

I can say that procmon works just fine, although I've never used it to look for activity on a floppy drive. Mostly because I haven't own any for years.

The only thing I can think of is that the path's being reported aren't the normal Windows paths but the internal \device\blah paths.

 

[sm625]

Ok that helps. I set a filter for catch "RemoveableMedia" in the path, and that caught something. It appears to be soluto causing the problem. Soluto is broken anyway, it just keeps saying "soluto upgrade is in progress". I am uninstalling.

 

[sm625]

So I go to uninstall soluto. Doesnt work. It asks for a file which is there, then says the file is not valid. So I go to their site to download the latest version hoping that it will then allow me to uninstall after installing that one. But now it wants some stupid password. WTF? It is free but you need a login? No. That is not free. This product is malware and I recommend all to avoid. Had to download a utility called SolutoUninstallCleanup.exe to get rid of the infection.