Computer Hope
Microsoft => Microsoft Windows => Windows XP => Topic started by: gitman7 on August 05, 2008, 05:56:42 PM
-
I used to be able to hibernate no problem and it would always stay in hibernate but now it won't stay - it wakes after about 10 minutes. I've tried a bunch of things such as making sure no updates are scheduled to run for anti-virus programs or windows updates, screensaver is off, internet is disconnected so it's not waking up from internet, I have wake up by mouse or keyboard turned off in bios (and they're for ps2 anyway and I'm using usb devices) diskeeper is disabled. Can't think what else it could be. Anyone have any ideas? I'm using windows XP and have an Asus A8N-SLI Deluxe motherboard.
-
Have you tried waiting until Winter?
Seriously, though...which service pack do you have installed?
Do you have an LAN card?
I'm not sure if it'll help, but you can try opening up the Event Viewer and go to the System section. Sort the results by Source and look for anything under the Power category. Are there any events? If so, what do they say? You can copy the dialog text by higlighting it and hitting Ctrl+C.
-
LOL --
I have SP2
-
No events listed at all. I even tried it again tonight. Hibernated at 9:50, computer came on by itself I logged on at 10:17 and there were no events listed between 8:36 to 10:17. That was a good idea though. :)
I do have an ethernet card and use a cable modem and a router. I'm going to try disconnecting the ethernet cable entirely and see what it does.
-
I asked about the LAN card because although I don't have much experience with them, I know that some have a sort of "wake up" feature that is sometimes known for taking a computer out of hibernation. If you can access the settings, perhaps you can find an option for such a feature and disable it.
-
Yeah I knew about that - already checked that too. Thanks. I suspect my problem might have to do with the trial version of an automatic disk defrag program I am currently using. It's a great program but it does have dialog nags that pop up saying buy it now etc. And the option to turn off this feature is disabled :-) I guess I'll have to uninstall the program to see. Thanks for the suggestions. I'll post my results.
-
Defrag programs have also been known to cause issues, so yeah, uninstalling is a good tactic to help us figure out what the problem might be. We'll leave the light on for you.
-
Well that wasn't it. I uninstalled the defrag program and the computer still wakes up. It is pretty consistent - between 10 and 13 minutes every time. I'm at work now and it's my home computer so I won't be able to test anything else till later tonight. I'm going to try uninstalling about 4 other programs I've installed recently - mostly malware checking programs - and we'll see. Might even do a system restore after the uninstalls but I ran a registry check and clean since then so don't know how that'll work :-)
-
Just to be on the safe side, perhaps we should check for malware...
http://www.computerhope.com/forum/index.php/topic,46313.0.html
-
Disable remote access........If unsure..how post back..
-
Thanks for the replies! This forum is the best! I did disable remote access already and I ran adaware, spyware doctor, zonealarm, avast, fix-it utilities and malwarebyte's anti-malware. Just in case you're wondering I have just spyware doctor doing active spyware checking, zonealarm only doing firewall, and avast doing only anti-virus actively. They found a few things but mostly clean. I also disconnected my network cable to make sure it wasn't something on network and it still woke up.
-
Well, out of curiosity, I'd still like to see a HijackThis log (as mentioned in the link I posted) just to give me an idea of what's running on your computer.
-
When is your e-mail client scheduled to check for new messages ? ?
Do you have any HP printers or devices connected to this beast ? ?
-
I found the problem!! I noticed a process I was not familiar with running in task manager called dpupdchk.exe - it turns out that it is a periodic update utility that gets loaded with intellipoint mouse software from micro.. I recently added a wireless 8000 mouse - well anyway it is not a process that can be removed as it is not listed in msconfig or the registry as a startup program it simply loads with the intellipoint software so I simply renamed the file so it won't load. I tested it by forcing the process to quit under task manager then hibernating. Computer didn't wake up! Problem solved. Renaming it just keeps it from reloading when I restart the computer. If there's a better way to do this rather than renaming the file I'd like to know - I could delete it but I might want to name it back in the future to run the update for the software - I just don't want it running every 10 minutes and bringing my computer out of hibernation! :-) Thanks for all your help!
-
Here's my hijack this log: I think I got this issue licked but I figured I'd post it since you asked :-) If you see anything that you think shouldn't be there let me know. Thanks!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:41:39 PM, on 8/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
I:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
I:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
F:\PROGRA~1\AVANQU~2\Fix-It\mxtask.exe
C:\Program Files\iolo\common\lib\ioloServiceManager.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\UAService7.exe
I:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
I:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Saitek\Software\ProfilerU.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe
C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDCountdown.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
I:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
I:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
I:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\PIXELA\ImageMixer3\HDDCameraMonitor.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Zone Labs\ZoneAlarm\MailFrontier\mantispm.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\ASYM\RUNTIME\8.0\Msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\ProfilerU.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe
O4 - HKLM\..\Run: [trueImageMonitor.exe] I:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] I:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast!] I:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools\daemon.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - Startup: taskmgr.exe.lnk = C:\WINDOWS\system32\taskmgr.exe
O4 - Global Startup: ImageMixer HDD Camera Monitor.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - I:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - I:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - I:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - I:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Fix-It Task Manager - Avanquest Software USA, Inc. - F:\PROGRA~1\AVANQU~2\Fix-It\mxtask.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 10528 bytes
-
Renaming offensive file is your safest bet.
-
Phew, I'm glad you managed to finally figure it out! Quite frankly, I was running out of ideas. Taking a quick look at your HijackThis log, I don't see anything malicious. One suggestion, though... If you don't want to rename the file, you can open up your mouse options and see if there is an option to disable automatic updating. Or you could try removing this entry in HJT...
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
As far as I know, the file is non-essential. If this is disabled, then dpupdchk should be disabled as well. To use them, you would have to run the program manually. At least, this is how it should work out. I have never used an IntelliPoint mouse before, so I'm not 100% sure about this. If you want to test it out, I would suggest having a backup mouse just in case you need to undo the changes (you can do this through HJT's menu).
If you'd rather not bother, then simply renaming the file should work.
-
http://www.bleepingcomputer.com/startups/ipoint.exe-18993.html
ipoint.exe - required if you use non-standard Windows driver features
-
Bad news. That wasn't it. I thought for sure I had it licked but it started up again by itself tonight. Man this is frustrating. One thing I did notice though - if I hibernate and then remove the power to the computer (by turning off the power strip it's plugged into) I can then turn the power back on and the computer remains in hibernate! Not sure what this means but hope it helps somehow :-)
-
Where I'm at now... I removed about a dozen programs I installed in the last two weeks because I was going to do a system restore from back then but didn't have to restore. The problem is gone. So now I'm installing the programs one at a time and testing. I'll post what I find out. What I hate more than the computer coming out of hibernate by itself is that it wouldn't hibernate by itself after a set time either. I like to set it to scan at night and go to sleep and have it shut down. It was staying on all night.
-
I don't know what's up but I guess I got it fixed. I just reinstalled most of the programs I just uninstalled and everythings working fine so far. I think I'll quit while I'm ahead. :-) Sure wish I could have found out what it was so I could post it here - I will if I ever find out :-)
-
That's one of the reasons, I never recommend hibernate. It's simply faulty tool, and M$ was never able to make it work 100%.
-
Hey, I'm just glad it's working out for you. Like Broni said, hibernate isn't exactly the most reliable feature, so it can be pretty tricky trying to make it work properly. You might want to make a System Restore point now while it still works! Heh.
-
My curiosity got the best of me :-) I had to keep on installing the things I removed till I found the culprit lol. I must be a geek at heart - been working on this for days lol. I found the culprit - default setup of system mechanic has two items set to active. If I set all active functions to disable then no problems :-) whew :-)
-
Nice investigation, but this time it's gonna be for sure, is it?....LOL
-
Time to get serious about a regimented backup strategy....
If you need suggestions Post back.
-
Yep - no problems last night - never started up. And it hibernated by itself too. I do have backups - I use system restore a lot (about 10 times in the last few days hehe) and I have Acronis disk image software. I am going to make another image tonight I think. Thanks again for all your help and suggestions everyone. I learned a lot about malware even though that wasn't my problem :) I'm checking into the online training links posted in this forum - I think I'd like to become a helper eventually. It's kinda fun :)
-
I learned a lot about malware even though that wasn't my problem :) I'm checking into the online training links posted in this forum - I think I'd like to become a helper eventually. It's kinda fun :)
I wish you the best of luck. It's tough work, but it's worth all of the knowledge you gain. If you do indeed decide to go through with this, feel free to send me a PM when your training has completed and maybe you can join our little team!
-
Will do. And thanks again for all your help CBMatt - and you too Broni and Patio.
I like to do hibernate because I really like not having to wait so long for computer to start up - sometimes I just want to check the weather real quick before I jump on my bike to head to work. But I do reboot the computer regularly when I'm home. It seems I have to anyway as I'm always updating or installing something hehe.