Shutdown is taking forever.

[dare978devil]

If you are not certain whether your SSD controller supports TRIM, there is an easy way to find out.
Open an elevated Command Prompt (run as admin) and paste this command into the Command Prompt window:

fsutil behavior query DisableDeleteNotify

If Command Prompt returns a 0 (zero), your drive supports TRIM and it is enabled.
If it returns 1 (one), the file system has disabled TRIM for your drive. This means your drive's controller does not support TRIM.

Another thing to check is the SSD alignment. Here is how:

If you want to verify the alignment (e.g. for a SSD where you are not certain whether the proper alignment was done), you use the following commands.

Diskpart
List disk
Select disk n
List partition

Now you should see a result like this.

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 59 GB 1024 KB

The offset has to be divisible by 4.

Source: http://www.sevenforums.com/tutorials/113967-ssd-alignment.html?ltr=S[/QUOTE]

Hmm, interesting.

Part 1 : Running that command returns DisableDeleteNotify = 0

Part 2 : Diskpart returns Partition 1 - Type Primary - Size 74 GB - Offset 31 KB

Thanks,
DD.

 

[dare978devil]

Trying to run HiJack this. For now, I think my problem is that the prog seems geared towards 32-bit OS. I run Scan and Create logfile, but the subsequent logfile is blank. It correctly launches notepad at the end, but there is nothing in it to save.

DD.

 

[dare978devil]

Would you mind posting a HJT log, so we can see what's running at start up?

Download HijackThis!
HijackThis - Trend Micro USA
Right click and run as Administrator. Click 'scan and save log'. The log will be saved to Notepad.
Next go back to start HJT, click 'open misc tools section', then click "Generate startup log".

Copy and paste both logs back in your next post.

Hi,

Finally figured out I needed to right-click hijackthis.exe, choose properties, go to Compatibility, and select "Run this program as an administrator".


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:44:48 PM, on 18/10/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
D:\Program Files (x86)\Bell\Bell Internet Security Services\rps.exe
D:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
D:\Program Files (x86)\Bell\Internet Service Advisor\BISAComHandler.exe
D:\Program Files (x86)\Bell\Internet Service Advisor\BISA.exe
D:\Program Files (x86)\Mozilla Firefox\firefox.exe
D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
D:\Program Files (x86)\Bell\Bell Internet Security Services\AVG\Identity Protection\agent\Bin\AVGIDSMonitor.exe
D:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
D:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = D:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [VirtualCloneDrive] "D:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - D:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - D:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - D:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - D:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lotus Notes Diagnostics - IBM - D:\Program Files (x86)\IBM\Lotus\Notes\nsd.exe
O23 - Service: Media Center 15 Service - J. River, Inc. - D:\Program Files (x86)\J River\Media Center 15\JRService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - D:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - D:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - D:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PDAgent - Raxco Software, Inc. - D:\Program Files\Raxco\PerfectDisk10\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - D:\Program Files\Raxco\PerfectDisk10\PDEngine.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - D:\Windows\system32\lsass.exe (file missing)
O23 - Service: Bell Internet Security Services (Radialpoint Security Services) - Bell - D:\Program Files (x86)\Bell\Bell Internet Security Services\RpsSecurityAwareR.exe
O23 - Service: RadialpointIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\Bell\Bell Internet Security Services\AVG\Identity Protection\agent\Bin\AVGIDSAgent.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - D:\Windows\system32\locator.exe (file missing)
O23 - Service: Bell Internet Security Services Firewall (RP_FWS) - Bell - D:\Program Files (x86)\Bell\Bell Internet Security Services\Fws.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - D:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServicepointService - Radialpoint Inc. - D:\Program Files (x86)\Bell\Internet Service Advisor\ServicepointService.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - D:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - D:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - D:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - D:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TVersityMediaServer - Unknown owner - D:\Users\Bruce\AppData\Local\TVersity\Media Server\MediaServer.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - D:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Personal Vault Backup Manager Service (VaultClientSRV) - Bell Canada - D:\Program Files (x86)\Personal Vault Backup Manager\VaultClientSRV.exe
O23 - Service: Personal Vault Backup Manager Upgrade Service (VaultClientUpgrade) - Bell Canada - D:\Program Files (x86)\Personal Vault Backup Manager\VaultClientUpgrade.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - D:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - D:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - D:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - D:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - D:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - D:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - D:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7836 bytes

 

[dare978devil]

And the startup log

StartupList report, 18/10/2010, 9:52:47 PM
StartupList version: 1.52.2
Started from : D:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.EXE
Detected: Windows 7 (WinNT 6.00.3504)
Detected: Internet Explorer v8.00 (8.00.7600.16671)
* Using default options
==================================================

Running processes:

D:\Program Files (x86)\Bell\Bell Internet Security Services\rps.exe
D:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
D:\Program Files (x86)\Bell\Internet Service Advisor\BISAComHandler.exe
D:\Program Files (x86)\Bell\Internet Service Advisor\BISA.exe
D:\Program Files (x86)\Mozilla Firefox\firefox.exe
D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
D:\Program Files (x86)\Bell\Bell Internet Security Services\AVG\Identity Protection\agent\Bin\AVGIDSMonitor.exe
D:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
D:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = userinit.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

VirtualCloneDrive = "D:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s

--------------------------------------------------

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = D:\Windows\SysWOW64\mshta.exe "%1" %*

--------------------------------------------------

Shell & screensaver key from D:\Windows\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

SkypeIEPluginBHO - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
(no name) - D:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll - {DBC80044-A445-435b-BC74-9C25C1C588A9}

--------------------------------------------------

Enumerating Task Scheduler jobs:

GoogleUpdateTaskUserS-1-5-21-783666255-3313636775-2673751621-1000Core.job
GoogleUpdateTaskUserS-1-5-21-783666255-3313636775-2673751621-1000UA.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = D:\Windows\SysWOW64\Macromed\Flash\Flash10i.ocx
CODEBASE = http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #1: D:\Windows\system32\NLAapi.dll
NameSpace #4: D:\Windows\system32\napinsp.dll
NameSpace #5: D:\Windows\system32\pnrpnsp.dll
NameSpace #6: D:\Windows\system32\pnrpnsp.dll

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: *Registry key not found*

--------------------------------------------------
End of report, 4,052 bytes
Report generated in 0.015 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

[whs]

Hmm, interesting.

Part 1 : Running that command returns DisableDeleteNotify = 0

Part 2 : Diskpart returns Partition 1 - Type Primary - Size 74 GB - Offset 31 KB

Thanks,
DD.

Your SSD is not aligned. the offset of 31 cannot be divided by 4. An aligned SSD can be up to 300% faster versus one that is not aligned.

 

[Jacee]

The most common item listed as an Error is "RadialpointIDSAgent"

I still suggest that you disable this security suite and try Microsoft Security Essentials.

You have a couple of things that can be started manually, when needed:

O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Service: Media Center 15 Service - J. River, Inc. - D:\Program Files (x86)\J River\Media Center 15\JRService.exe

D:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
Virtual Clone Drive, part of CloneCD CD/DVD copying sofware, has been Discontinued.

 

[dare978devil]

The most common item listed as an Error is "RadialpointIDSAgent"

I still suggest that you disable this security suite and try Microsoft Security Essentials.

You have a couple of things that can be started manually, when needed:

O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Service: Media Center 15 Service - J. River, Inc. - D:\Program Files (x86)\J River\Media Center 15\JRService.exe

D:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
Virtual Clone Drive, part of CloneCD CD/DVD copying sofware, has been Discontinued.

OK, tks. I'll try a few other things, and then see if Security Essentials improves things. For the other items :

Skypeieplugin - I rarely use IE, so this should not come into play, but I will uninstall it anyway since I don't actually need it for Skype.

Media Center 15 - OK (great prog by the way, but I'll disable the service).

VirtualCloneDrive - I actually installed this on the day I ran HijackThis. I only need it for my son's "Great Eggs and Ham" CD. I copied the entire CD locally, and just mount it when he wants to play it. Much less hassle than actually finding the CD every time.

DD.

 

[dare978devil]

Think I found the answer.

Thanks for all the replies, but I may have found the culprit. Last 3 shutdowns have been quick, it is looking good.

I had originally placed my Windows SWAP file on an external disk connected via USB2. That did not cause shutdown problems in the first month of operation. However, when I moved it to the SSD and set it for 4096 min 6144 max, shutdowns ever since have been fast.

It may have been the fact of simply creating a new swap file rather than actually moving it to the SSD. I moved it off the SSD the first day I installed Win7 based on the known lifespans of SSDs and how many times they can handle writes.

Thanks,
DD.

 

[whs]

Thanks for all the replies, but I may have found the culprit. Last 3 shutdowns have been quick, it is looking good.

I had originally placed my Windows SWAP file on an external disk connected via USB2. That did not cause shutdown problems in the first month of operation. However, when I moved it to the SSD and set it for 4096 min 6144 max, shutdowns ever since have been fast.

It may have been the fact of simply creating a new swap file rather than actually moving it to the SSD. I moved it off the SSD the first day I installed Win7 based on the known lifespans of SSDs and how many times they can handle writes.

Thanks,
DD.

I would not worry about the number of writes to a SSD. It will last a lot more time than you care to keep the device. The pagefile should stay on the SSD, else you defeat the purpose of the SSD which is fast access. Rather remove the hiberfile with powercfg.exe -h off

 

[dare978devil]

WHS,

After reading those OCZ forum posts on aligning an SSD, I take it there is no way to align the drive post-install ? I only have one SSD, it's my boot drive to Win7. This system is triple booted, although Vista and XP are on another drive altogether. I am going to get rid of Vista eventually.

It looks to me as if the only way to align my drive is to either buy a second identical SSD, align and format it, then image my current drive to it. Or else see if I can make a complete image backup onto my 1.5 TB of my 80 GB SSD, align and format the SSD, and then play it back from Vista (or XP). Then reboot, and hope it works.

Anything safer I can do?

Thanks,
DD.

 

[Solarstarshines]

Here is a way to manipulate the shutdown time. Maybe that helps: Make Windows Vista Shut Down Services Quicker - How-To Geek

isnt this like using msconfig and you can change the time out to the value of 3-5?

just asking not sure cause i changed the time out through msconfig

 

[whs]

The safest would be to do a clean install of Windows7 (if you have the installation disk). Then the installer will take care of the alignment. And do disconnect the other disks with Vista and XP so that you do not get a mess with the MBR. Switching is then done with the BIOS boot sequence.
But reinstalling an image will work too. Just make sure you do the alignment first and define an active partition to which you can dump the image. The MBR question is still open in your case since I do not know where you have the Win7 MBR. Then once installed, disable automatic Defrag.

 

[dare978devil]

The safest would be to do a clean install of Windows7 (if you have the installation disk). Then the installer will take care of the alignment. And do disconnect the other disks with Vista and XP so that you do not get a mess with the MBR. Switching is then done with the BIOS boot sequence.
But reinstalling an image will work too. Just make sure you do the alignment first and define an active partition to which you can dump the image. The MBR question is still open in your case since I do not know where you have the Win7 MBR. Then once installed, disable automatic Defrag.

Ah, that does beg the question of how I ended up with 31 as my offset. This is a relatively new install (August) from Win7 Ultimate DVD I purchased. It was a clean install at the time, the SSD was also new. Your reply seems to imply that Win7 should have taken care of this for me.

DD.

 

[whs]

Yeah right, this is indeed strange. Unfortunately I have no clue how that could have happened. I have done 3 Win7 clean installations and in all cases the alignment was perfect. Something must have happened after your August installation. That would suggest that a new, clean installation is in order.