If the indexer and Kaspersky are indeed on that list then something might be writing data to disk. Resource Monitor will show you which processes are doing disk I/O, and what files they are accessing.