Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1394
  • Last Modified:

Win8: How to safely remove USB drive (this device is currently in use)?

I recently switched to Win8 x64 and regardless of whether I try to safely remove 32Gb flash drive or any WD drive 500Gb or 1Tb - I am always told that "this device is currently in use" etc.

this is what I have checked so far:
- indexing
indexing- policies
policies-handles
handle Y:\

Handle v3.51
Copyright (C) 1997-2013 Mark Russinovich
Sysinternals - www.sysinternals.com

System             pid: 4      type: File           E54: Y:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}
System             pid: 4      type: File           F30: Y:\$Extend\$RmMetadata\$Txf
System             pid: 4      type: File          10D0: Y:\System Volume Information\{862cb88b-5a4a-11e2-bf22-0019bbea298c}{3808876b-c176-4e48-b7ae-04046e6cc752}
System             pid: 4      type: File          10D8: Y:\System Volume Information\{26c06ec4-3668-11e2-8ea0-a4badbb59455}{3808876b-c176-4e48-b7ae-04046e6cc752}
System             pid: 4      type: File          1694: Y:\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000002
System             pid: 4      type: File          1700: Y:\System Volume Information\{9fe52b8b-4aee-11e2-8de8-a4badbb59455}{3808876b-c176-4e48-b7ae-04046e6cc752}
System             pid: 4      type: File          1988: Y:\System Volume Information\EfaData\SYMEFA.DB
System             pid: 4      type: File          199C: Y:\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
System             pid: 4      type: File          19EC: Y:\System Volume Information\{9fe52b75-4aee-11e2-8de8-a4badbb59455}{3808876b-c176-4e48-b7ae-04046e6cc752}
System             pid: 4      type: File          1B58: Y:\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000001
System             pid: 4      type: File          1B60: Y:\System Volume Information\EfaData\SYMEFA.DB
System             pid: 4      type: File          1BD8: Y:\System Volume Information\{862cb5d8-5a4a-11e2-bf22-0019bbea298c}{3808876b-c176-4e48-b7ae-04046e6cc752}
recordingmanager.exe pid: 5628   type: File           294: Y:\

Open in new window

tasklist /SVC /FI "PID eq 5628"

Image Name                     PID Services
========================= ======== ============================================
recordingmanager.exe          5628 N/A

tasklist /SVC /FI "PID eq 4"

Image Name                     PID Services
========================= ======== ============================================
System                           4 N/A

Open in new window


how can I establish what is causing this and/or prevent it from happening?

Thanks

G
0
ee-gd
Asked:
ee-gd
3 Solutions
 
Scott ThompsonComputer Technician / OwnerCommented:
Is System Restore turned on for those drives?
0
 
ee-gdAuthor Commented:
I don't think so
sys.protection off for Y
0
 
Scott ThompsonComputer Technician / OwnerCommented:
What is your AV? I've seen ones, especially like Kaspersky, constantly accessing and scanning ever external drives making it impossible to 'remove safely'.
0
Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
ee-gdAuthor Commented:
Norton internet security, but even if I disable it something still has a lock on the  drive
0
 
David Johnson, CD, MVPOwnerCommented:
if you chose right click on the device and select eject does it in fact remove it from the drive list?
0
 
nobusCommented:
try setting it to the other option (higher prestations) instead of quick removal - and test; then set it back to Quick removal
0
 
ee-gdAuthor Commented:
I disabled few processes and it turned to be powerdvd

disabled startup items
thanks for your help guys
0
 
ee-gdAuthor Commented:
disabling that process removed the lock and allowed the drive to be removed safely.
0
 
cantorisCommented:
For anyone else reading this, note that recordingmanager.exe locks USB drives as in use and stops their being ejected.  Just kill the process.  It's part of RealPlayer's downloader.
Drives me round the bend on my own PCs!
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now