Vista keeps reading file after copy cancelled

I have a weird problem, what I have just noticed. I started a file copy from one drive to an other using Total Commander, then I cancelled in the middle of the operation. However, when I checked in the Resource Monitor svchost.exe was still reading the file for an other ca. 5 minutes with Background Priority, so the speed was only 15-20MB/s, but still annoying... What could cause this?

ImageBam - Fast, Free Image Hosting and Photo Sharing

My first thought was "it's utterly absorbing of course, and a spiritual successor to Total Annihilation, hallowed be its name, but why's (s)he attempting to do network file copies using a Real Time Strategy game like Supreme Commander?!?" Then I re-read your post.

The network (SMB) redirector does indeed do something called "lazywrite" which can result in continued activity after the UI reports a file operation as completed, but 5 minutes seems far too long.

Does the same thing happen if you use plain old Explorer to copy the file, or even the CMD prompt (using mapped drives)?

Hehe, yeah, my post was maybe a bit too sci-fi like :D, but just to make clear, I'm not copying over a network drive, just a normal drive in the pc (from one HDD to another).

I've tried to copy it simply through windows explorer, but the result is similair, except now it was reading at a much higher speed (50-90MB/s).

After it stops, the value in the Read(B/min) column slowly decreases until the whole process disappears, and then everything is back to normal.

Here is a screenshot about it:
ImageBam - Fast, Free Image Hosting and Photo Sharing

If you do a TASKLIST /SVC on a command prompt, one of the SVCHOST instances will match the PID (Process ID) that you see in those graphs - at present "132" on your machine. What services are running in that SVCHOST?

I suspect your problem might be due to an anti-virus filter driver which is incapable of processing a "cancel" command effectively. That's just a wild guess though. There are many other possibilities.

I hope this is what you asked for:
ImageBam - Fast, Free Image Hosting and Photo Sharing

I don't have any antiviruses installed on my computer.

Yeah, that's it. See that list to the right of the "132"? The one that starts with AudioEndpointBuilder and ends with wudfsvc? That's the list of individual services running inside the "service host" (SVCHOST) process that is apparently chewing disk on your machine after you cancel the copy.

I still suspect that this is down to a filter driver which can't handle 'cancel' very well, and the problem will not be trivial to troubleshoot. I'd suggest:

1) Boot to safe mode and check whether the same thing happens when you copy in there. The outcome is significant.

2) Make sure all your work is saved (this step could potentially bork your machine and cause you to need to reboot), then start a CMD prompt and try stopping each one of those services and then testing the copy again in between:

NET STOP AudioEndpointBuilder
<try the copy>
NET STOP CscService
<try the copy again>
NET STOP...

OK, I will try that.

So, it's been some time since I started this thread and I finally found the time to solve it.
The solution is simply turning the SuperFetching service off which also stops the annoying HDD use occuring from time to time, but mostly on startup.
Cheers