Prev: MmGetSystemAddressForMdlSafe Question
Next: ksthunk.sys in 64bit Windows
From: miguel7621 on 3 Dec 2007 09:05
Hello,
For a couple of mounts, I'v a slow boot of windows xp on my acer
laptop 9412.
First, I thought a virus or rootkit but the tools I tried don't find
anything of important (S&D, AVG, Bitdefender, SDoctor). Starting in
save mode works better but also slow. Bootvis isn't helping me very
well. It only shows often 100% disk use during boot which I knew
already by the HD led.
Watching processes with process explorer from sysinternals, I see a
lot of interrupts during boot; around 45% CPU use during boot.
Using process monitor, I see a long file time in the file summary for
c:\$ConvertToNonresident (around 45% of total file time). I suppose
there is an NTFS problem but defragmentation doesn't help. I hope
this newsgroup has the knowledge what is the problem or what causes
it.
What is happening ? How do I solve this slow boot problem ?
In the stack summary, I see some <unknown>. I suppose that's normal ?
From: miguel7621 on 5 Dec 2007 03:41
On 3 dec, 15:05, miguel7...(a)gmail.com wrote:
> Hello,
> For a couple of mounts, I'v a slow boot of windows xp on my acer
> laptop 9412.
> First, I thought a virus or rootkit but the tools I tried don't find
> anything of important (S&D, AVG, Bitdefender, SDoctor). Starting in
> save mode works better but also slow. Bootvis isn't helping me very
> well. It only shows often 100% disk use during boot which I knew
> already by the HD led.
> Watching processes with process explorer from sysinternals, I see a
> lot of interrupts during boot; around 45% CPU use during boot.
> Using process monitor, I see a long file time in the file summary for
> c:\$ConvertToNonresident (around 45% of total file time). I suppose
> there is an NTFS problem but defragmentation doesn't help. I hope
> this newsgroup has the knowledge what is the problem or what causes
> it.
> What is happening ? How do I solve this slow boot problem ?
> In the stack summary, I see some <unknown>. I suppose that's normal ?

Incrementing the pagefile size from 2GB to 3GB has improved the system
a lot.
The sound was also very bad quality. I will check if the lazy sound
moments still occur.
The amount of interrupts has decreased a lot. Maybe the pagefile was
corrupt or full of trash ?
Because I have 2GB or RAM, maybe I don't need the pagefile.
From: miguel7621 on 5 Jan 2008 13:18
On 5 dec 2007, 12:41, J de Boyne Pollard <j.deboynepoll...(a)tesco.net>
wrote:
> m> Because I have 2GB or RAM, maybe I don't need thepagefile.
>
> <URL:http://homepages.tesco.net./~J.deBoynePollard/FGA/dont-throw-
> those-paging-files-away.html>

I 've set the pagefile size back to 3GB but I have still performance
problems.
The problem is still unresolved.
If I look at more details about boot processes (with process monitor)
there seems to be a long duration for calls to fltMgr.sys+0x1888. It's
called via ntkrnlpa.exe+0x18163.
According to process monitor, it took a duration of 1451 for
winlogon.exe to handle a notifychangedirectory event and the stack
(frame) was:
0 - fltMgr.sys + 0x1888
1 - fltMgr.sys + 0x32a0
2 - fltMgr.sys + 0x3c48
3 - fltMgr.sys + 0x4059
4 - ntkrnlpa.exe + 0x18163
5 - ntkrnlpa.exe + 0xa1fb3
6 - ntkrnlpa.exe + 0x699ac
7 - sfc_os.dll + 0xc810
8 - kernel32.dll + 0xb683

Versions are:
- C:\WINDOWS\System32\Drivers\fltMgr.sys 5.01.2600.2978
- C:\WINDOWS\system32\ntkrnlpa.exe 5.01.2600.3093
How can I solve this problem ?
 | 
Pages: 1
Prev: MmGetSystemAddressForMdlSafe Question
Next: ksthunk.sys in 64bit Windows