G
Guest
Hello,
I have a problem with Win XP taking minutes to shutdown.
I go to start -> shutdown then select the option 'turn off'.
Then my computers freezes for a couple of minutes then i finally get the
'saving user profile' message.
I used filemon to trace what was happening and it seems that win xp is
read/querying some files in the recycler bin.
It generate a 12MB trace!
See below for a a sample of the trace data.
Any idea what's happening?
Thanks.
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 593920 Length: 4096
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 593620 Length: 800
07:50:35 explorer.exe:880 QUERY INFORMATION C:\
SUCCESS Attributes: DHS
07:50:35 explorer.exe:880 QUERY INFORMATION
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\Dc985.dat SUCCESS
Attributes: TA
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 594420 Length: 800
07:50:35 explorer.exe:880 QUERY INFORMATION C:\
SUCCESS Attributes: DHS
07:50:35 explorer.exe:880 QUERY INFORMATION
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\Dc986.dat SUCCESS
Attributes: TA
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 595220 Length: 800
07:50:35 explorer.exe:880 QUERY INFORMATION C:\
SUCCESS Attributes: DHS
07:50:35 explorer.exe:880 QUERY INFORMATION
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\Dc987.dat SUCCESS
Attributes: TA
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 596020 Length: 800
07:50:35 explorer.exe:880 QUERY INFORMATION C:\
SUCCESS Attributes: DHS
07:50:35 explorer.exe:880 QUERY INFORMATION
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\Dc988.dat SUCCESS
Attributes: TA
I have a problem with Win XP taking minutes to shutdown.
I go to start -> shutdown then select the option 'turn off'.
Then my computers freezes for a couple of minutes then i finally get the
'saving user profile' message.
I used filemon to trace what was happening and it seems that win xp is
read/querying some files in the recycler bin.
It generate a 12MB trace!
See below for a a sample of the trace data.
Any idea what's happening?
Thanks.
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 593920 Length: 4096
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 593620 Length: 800
07:50:35 explorer.exe:880 QUERY INFORMATION C:\
SUCCESS Attributes: DHS
07:50:35 explorer.exe:880 QUERY INFORMATION
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\Dc985.dat SUCCESS
Attributes: TA
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 594420 Length: 800
07:50:35 explorer.exe:880 QUERY INFORMATION C:\
SUCCESS Attributes: DHS
07:50:35 explorer.exe:880 QUERY INFORMATION
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\Dc986.dat SUCCESS
Attributes: TA
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 595220 Length: 800
07:50:35 explorer.exe:880 QUERY INFORMATION C:\
SUCCESS Attributes: DHS
07:50:35 explorer.exe:880 QUERY INFORMATION
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\Dc987.dat SUCCESS
Attributes: TA
07:50:35 explorer.exe:880 READ
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\INFO2
SUCCESS Offset: 596020 Length: 800
07:50:35 explorer.exe:880 QUERY INFORMATION C:\
SUCCESS Attributes: DHS
07:50:35 explorer.exe:880 QUERY INFORMATION
C:\RECYCLER\S-1-5-21-1935655697-1972579041-725345543-1003\Dc988.dat SUCCESS
Attributes: TA