Just recently (sometime last week) we started to get errors while installing an application that installs ESRI map objects 2.0. SAVOnAccess events are in the logs reporting a timeout/busy condition. Previously this never occurred during this application install.
This is what is occuring in the event log.
Communication error between on-access driver and service for a modification of file "\Device\HarddiskVolume1\Windows\SysWOW64\Unwise32.exe" by process MO24rt-.exe .
File [...\??\C:\Windows\SysWOW64\Unwise32.exe]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process MO24rt-.exe, (start check timestamp [ 1d0f0a7711ab4cf]).
Additional info from the log file:
20150916 174514
Communication error between on-access driver and service for a modification of file "\Device\HarddiskVolume1\Windows\SysWOW64\Unwise32.exe" by process MO24rt-.exe .
20150916 174514
File [...\??\C:\Windows\SysWOW64\Unwise32.exe]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process MO24rt-.exe, (start check timestamp [ 1d0f0a7711ab4cf]).
20150916 174618
File [...ibility\3881da68cb87d350299c3dd3d2404293\Accessibility.ni.dll]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process mmc.exe, (start check timestamp [ 1d0f0a797b44123]).
20150916 175335
File [...\Device\HarddiskVolume1\Windows\system32\msiltcfg.dll]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0a89bf9cbea]).
20150916 175335
File [...mgmt\S-1-5-21-823518204-651377827-682003330-22748\AppMgmt.ini]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0a89bfc2d4b]).
20150916 175858
File [...\Device\HarddiskVolume1\Windows\System32\NaturalLanguage6.dll]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process explorer.exe, (start check timestamp [ 1d0f0a95c95f54a]).
20150916 175858
File [...\Device\HarddiskVolume1\Users\fr\Searches\desktop.ini]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process explorer.exe, (start check timestamp [ 1d0f0a95cab61ac]).
20150916 175858
File [...\Device\HarddiskVolume1\Users\Public\Libraries\desktop.ini]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process explorer.exe, (start check timestamp [ 1d0f0a95cadc30d]).
20150916 175858
File [...\Device\HarddiskVolume1\Users\fr\Videos\desktop.ini]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process explorer.exe, (start check timestamp [ 1d0f0a95cadc30d]).
20150916 175858
File [...\Device\HarddiskVolume1\Users\fr\Pictures\desktop.ini]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process explorer.exe, (start check timestamp [ 1d0f0a95cadc30d]).
20150916 175858
File [...\Device\HarddiskVolume1\Users\fr\Contacts\desktop.ini]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process explorer.exe, (start check timestamp [ 1d0f0a95cadc30d]).
20150916 180439
Communication error between on-access driver and service for a modification of file "\Device\HarddiskVolume1\Windows\SysWOW64\Unwise32.exe" by process MO24rt-.exe .
20150916 180439
File [...\??\C:\Windows\SysWOW64\Unwise32.exe]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process MO24rt-.exe, (start check timestamp [ 1d0f0aa27e37dc4]).
20150916 180614
File [...ws\system32\logfiles\scm\eaca24ff-236c-401d-a1e7-b3d5267b8a50]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process services.exe, (start check timestamp [ 1d0f0aa608e4aba]).
20150916 182241
File [...\Device\HarddiskVolume1\Windows\System32\netmsg.dll]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0acac8b7571]).
20150916 184100
File [...ft\CryptnetUrlCache\MetaData\207B9FD92391B9B2A60A89B4C965D5DF]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0af3bcb3131]).
20150916 184105
File [...ft\CryptnetUrlCache\MetaData\21253908F3CB05D51B1C2DA8B681A785]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0af3e9c7224]).
20150916 184110
File [...ft\CryptnetUrlCache\MetaData\3130B1871A126520A8C47861EFE3ED4D]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0af41d8d104]).
20150916 184115
File [...ft\CryptnetUrlCache\MetaData\37C951188967C8EB88D99893D9D191FE]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0af44a7b097]).
20150916 184120
File [...ft\CryptnetUrlCache\MetaData\4C7F163ED126D5C3CB9457F68EC64E9E]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0af47769029]).
20150916 184125
File [...ft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0af4a4a327d]).
20150916 184129
File [...ft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21]'s scan succeeded following a timeout/busy condition - it is being logged in case it contributed to that condition. Process svchost.exe, (start check timestamp [ 1d0f0af4d19120f]).
20150916 190136 User (NT AUTHORITY\SYSTEM) has stopped on-access scanning for this machine.
20150916 190137 Using detection data version 5.19 (detection engine 3.60.0). This version can detect 9899384 items.
20150916 190137 User (NT AUTHORITY\SYSTEM) has started on-access scanning for this machine.
This thread was automatically locked due to age.