Windows 7 x64 ultimate, shutdown problem

[Heaventorn]

Hello.
I recently upgraded my system with a a new OCZ SSD 120GB Vertex 2.
I made a clean install of Windows 7 x64 ultimate edition and made all the Microsoft updates. The problem is that my system has a very slow shutdown around 1-3 minutes. I haven't experienced this problem before the upgrade, even though it is a fresh install of windows. My system has the same programs, settings and hardware installed as before the setup. The strange thing is that, if i start my system and then immediately shutdown as soon as it logs in windows, then the shutdown progress occurs immediately, in about 6-12 seconds.In the other hand, if i use my system for a while, play a game, listen to music or navigate through Mozilla and other things then the shutdown progress is really slow.

I have read many forums about that problem, i have made a clean boot, and still the same, except if the windows processes are turned off, i also tried everything that has to do with the tweaking of registry, like clearing page file times, shut down time, etc.

I think that maybe some driver has a problem and hangs, or some application, and i can,t track it. If there is a way to track it down...?
I also downloaded the Windows 7 SDK and made a trace shutdown as the User "Cluberti" said in one post, but i don't understand what the trace file means.

Please can anyone help me? It is really annoying.

Thank you in Advance.

 

[cluberti]

Post the shutdown trace, and hopefully I can tell you .

 

[Heaventorn]

Thank you for your replies, i will post the shutdown trace as soon as i get back to home from work, but the file is really big, should i take a screenshot of it?

As for the registry, i repaired it with Tuneup utilities 2011 and AVG tuneup.
Can you recommend some other program?

 

[cluberti]

Zip up the .etl file with something like 7zip, and upload if possible. Screenshots won't help.

 

[Heaventorn]

I compressed the trace file with 7zip and it becomes a compressed file of 19mb size.
I don't think i can upload it here, is there another way?

Also to mention that, i did all the steps to make the trace file as u said in another post.
The first time my pc restarts, the shutdown time is long, as i said, 1-2 minutes.
The second time my pc logs in windows and then it restarts, the shutdown occurs normally, in like 6-10 seconds.
If the trace file generates during the second restart, then i don't think that in my case it will show some problem.

 

[cluberti]

If you are following the guide, you'll note there are multiple suggestions there for upload sites to use. As to the shutdown trace, try adding the -noprepreboot parameter to the end of the command to make it trace on the first shutdown.

 

[Heaventorn]

Ok, i made the trace with the first shutdown, i zipped it via 7zip and i uploaded it here
shutdown_BASE+LATENCY+DISK_IO_INIT+DISPATCHER+DRIVERS+FILE_IO+FILE_IO_INIT+NETWORKTRACE+PERF_COUNTER+POWER+PRIORITY+REGISTRY_1.7z
Hope it helps.
I am waiting for any answer.

 

[cluberti]

In looking at the shutdown trace, it's being held up (at first glance) by clfs.sys - this, however, is just a victim. You can see what it "does" here:
Common Log File System

Given that it's just a logging .dll, something is registering data and potentially logging during shutdown, causing this to show up as having a problem unloading - obviously, this is false, so after digging deeper, I found that the hpslpcsvc service was slow in shutting down, for almost exactly the same amount of time. This particular service gets installed by HP printers, so it looked suspicious. I also noticed that there's a driver delay, at around the same exact time as well, from AVG - specifically, avgmfx64.sys. Once that driver stops, the entire system shuts down (at least according to the trace), so I'm left with wondering which is causing the logging service to run like this - is it the HP printer driver service, or the AVG filter driver? According to the disk I/O graph, it appears that almost all of the disk access is going to "Unknown" (and at 100% utilization, from when the AVG driver loads to system shut down notification), but when looking at the file I/O table, the bulk of the disk I/O is actually FSCTL calls to \Device\HardDiskVolume2, by both SYSTEM and by a process called avgchsva.exe, which I would suspect being AVG's. I wish that was definitive, but it could still be an issue with the HP driver.

To cover all bases, it's probably useful to remove any HP software you have on the machine, and remove AVG - I would suggest you have downloaded the latest HP software for your printer(s), and the latest version of AVG as well before continuing - you might want to disconnect from the internet while doing this to be safe, so having everything local will be beneficial.

Remove the HP software, and AVG - then, reboot five times (needed for superfetch), and see if the problem continues. If it does not, add the HP software you just downloaded for your printer(s). Again, reboot five times, and see if the problem comes back. If not, I'd suggest adding the latest version of AVG back to the system and testing again (connected to the internet for the reboots at this point, of course), to see what happens. If the problem returns when doing this very drawn out test, you will have your culprit.

I usually recommend A/V software other than AVG, but to each his or her own - if it works for you, I'd suggest using it. However, it does have it's moments of causing performance issues, hence why I think your problem is the AVG driver and software, not the HP printer software.

 

[Heaventorn]

I did as you said, uninstalled both of these, Downloaded and installed newest versions. The first two times i shutdown windows it was OK. Here is a trace i made today.shutdown_BASE+LATENCY+DISK_IO_INIT+DISPATCHER+DRIVERS+FILE_IO+FILE_IO_INIT+NETWORKTRACE+PERF_COUNTER+POWER+PRIORITY+REGISTRY_1.rar. It was a long shutdown. I don't know what else to do. Thank you for your help and your time anyway!

 

[cluberti]

According to this, it's AVG's filter driver...

 

[Heaventorn]

Oh, that was a quick reply man! haha, thank you. What should i do now? Probably change A/V program?

 

[cluberti]

Well, that's up to you - either deal with a long shutdown (assuming AVG works fine otherwise), or yes, replace .

 

[Heaventorn]

So, i uninstalled that completely and installed the Bitdefender Security, it still seems a bit slow at the shutdown (17 seconds) but better than before. Here is a trace i made tonight, if you can check it to see if it is ok. And what probably causes the small delay, maybe something we didn't see before. shutdown_BASE+LATENCY+DISK_IO_INIT+DISPATCHER+DRIVERS+FILE_IO+FILE_IO_INIT+NETWORKTRACE+PERF_COUNTER+POWER+PRIORITY+REGISTRY_1.rar
Anyway... than you so much for your time and your effort, it is really helpful.

 

[cluberti]

For some reason, I can't seem to download that file. I'll try again later today.

 

[cluberti]

Finally got access to the file, and an unnamed filter driver is indeed causing the shutdown delays. I went back and looked at the previous traces, and there were no unnamed drivers, so I have to assume this is the BitDefender driver.

 

[Heaventorn]

Thank you so much! I ll go with another A/V program then.
You have my gratitude