It's now 2:30, after resetting Automatic Updates and WIA toJohn said:Don't bother with the registry, remnants in there shouldn't hurt anything.
Windows is discovering the printer, disconnect the printer from the
computer.
Let it do it's automatic updates and then try again.
John
William said:It's now 2:30, after resetting Automatic Updates and WIA to
Disabled, and again, desktop came back on after about 1.5 hours, and I
stopped the run after 2.5 hours..... no hibernate. Did we learn
anything, John? I'll reset Automatic Updates to Automatic and see
if it does different.
John said:Please post a new report of the ServiceStat.vbs file.
John
Type Date Time Source Category Event User Computer
Information 4/12/2010 7:30:29 PM Tcpip None 4201 N/A COMPAQ-2006
Information 4/12/2010 5:24:04 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006
Information 4/12/2010 5:24:04 PM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/12/2010 5:24:04 PM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/12/2010 5:24:04 PM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/12/2010 5:24:04 PM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/12/2010 5:24:04 PM Service Control Manager None 7035 SYSTEM
Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4201
Date: 4/12/2010
Time: 7:30:29 PM
User: N/A
Computer: COMPAQ-2006
Description:
The system detected that network adapter \DEVICE\TCPIP_{D5E50A75-4A1C-4421-A5B4-569C9FE131B8} was connected to the network, and has initiated normal operation over the network adapter.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 69 10 00 40 ....i..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
John said:Please post a new report of the ServiceStat.vbs file.
John
Service Name,Start Mode
Alerter,Disabled,
ALG,Manual,
AppMgmt,Manual,
aspnet_state,Manual,
Ati HotKey Poller,Disabled,
ATI Smart,Manual,
AudioSrv,Auto,
Automatic LiveUpdate Scheduler,Disabled,
BITS,Manual,
Browser,Auto,
CiSvc,Manual,
ClipSrv,Disabled,
clr_optimization_v2.0.50727_32,Manual,
COMSysApp,Manual,
CryptSvc,Auto,
DcomLaunch,Auto,
Dhcp,Auto,
dmadmin,Manual,
dmserver,Manual,
Dnscache,Manual,
ERSvc,Manual,
Eventlog,Auto,
EventSystem,Manual,
FastUserSwitchingCompatibility,Manual,
Fax,Manual,
FontCache3.0.0.0,Manual,
GEARSecurity,Disabled,
helpsvc,Auto,
HidServ,Disabled,
HTTPFilter,Manual,
IDriverT,Manual,
idsvc,Manual,
Imapi Helper,Manual,
ImapiService,Manual,
lanmanserver,Manual,
lanmanworkstation,Auto,
LexBceS,Auto,
LiveUpdate,Manual,
LmHosts,Manual,
MBAMService,Disabled,
MDM,Manual,
Messenger,Disabled,
mnmsrvc,Manual,
MSIServer,Manual,
NetDDE,Disabled,
NetDDEdsdm,Disabled,
Netlogon,Manual,
Netman,Manual,
NetTcpPortSharing,Disabled,
Nla,Manual,
Norton AntiVirus,Auto,
Norton Save and Restore,Manual,
NProtectService,Manual,
NtLmSsp,Manual,
NtmsSvc,Manual,
ose,Manual,
PlugPlay,Auto,
PolicyAgent,Manual,
ProtectedStorage,Auto,
psqlWGE,Auto,
RasAuto,Disabled,
RasMan,Manual,
RDSessMgr,Manual,
RemoteAccess,Disabled,
RpcLocator,Manual,
RpcSs,Auto,
RSVP,Manual,
SamSs,Auto,
SCardSvr,Manual,
Schedule,Manual,
seclogon,Manual,
SENS,Auto,
SharedAccess,Auto,
ShellHWDetection,Auto,
Speed Disk service,Disabled,
Spooler,Manual,
srservice,Auto,
SSDPSRV,Manual,
stisvc,Manual,
SwPrv,Manual,
Symantec RemoteAssist,Manual,
SysmonLog,Manual,
TapiSrv,Manual,
TermService,Auto,
Themes,Auto,
TrkWks,Manual,
upnphost,Manual,
UPS,Manual,
Viewpoint Manager Service,Disabled,
VSS,Manual,
W32Time,Auto,
WebClient,Manual,
winmgmt,Auto,
WmdmPmSN,Manual,
WmiApSrv,Disabled,
WMPNetworkSvc,Manual,
wscsvc,Manual,
wuauserv,Auto,
WudfSvc,Manual,
WZCSVC,Auto,
xmlprov,Manual,
William said:Okay, John, took a bit of doing, but here it is:
John said:Well, forgive me but I surely have to wonder what it is that is going on
at your end...
The last batch file that I asked you to run would have changed some of
the start values of some of the services but I note some inconsistencies:
Ati HotKey Poller set to Manual now it' Disabled. Not that it matters
but who disabled this?
Browser set to Manual now it's back on Auto. Who set this back to Auto?
You told me that you have a stand alone desktop and that definitely you
are not on a network. The Browser service maintains the browse list, a
list of of all available servers on domains or a list of available
computers on workgroups. The Browser service does broadcast
announcements over the network at specific time intervals (like every 12
minutes, until the Master Browser tells it to shut up) and plays a role
in the assignment of browser tasks to specific computers on the network.
You have no network... why is the Browser service on Auto? Maybe
someone wants this thing barking every 12 minutes....
lanmanserver set to Disabled now it's Manual. No network, no file and
printer sharing so as far as I'm concerned this should be set to
disabled, Manual might also be fine but the point is, who changed it
from Disabled to Manual?
LexBceS still set to Auto. This is part of your Lexmark printer
software, if the printer and all its software was removed I have to
wonder why is this service still present...
psqlWGE set to Manual now it's bact to Auto. What is this thing? What
software are you running that needs this thing to be set to Auto? A
quick search had revealed that it might belong to an accounting package,
I can't say for sure but anything with "sql" in it usually suggests that
it is part of some kind of database. And I have to wonder if this
database is in anyway associated to the Indexing service that seemed to
be doing cataloging work at any or all hours of the day.
Viewpoint Manager Service was set to Auto, now it's Disabled.
Information on this is a bit scant or vague but it seems that it might
be junk installed by AOL and that it might be needed for some AOL
features... or that it might be unwanted junk related to adware. Without
knowing if you are on AOL I had decided to leave it on Auto for the time
being. But as far as I'm concerned if you can live without it maybe you
should have it disabled.
W32Time set to Manual now back to Auto. You said in earlier posts that
the Time service was improperly configured and that it couldn't
synchronize with a time server, so all it's doing is trying (and
failing) to contact a time server, network traffic for naught and for
that specific reason I wanted to remove this from the picture, but I see
that it is back... like the cat with nine lives...
WZCSVC was set to Manual now it's back to Auto. This is is the service
that automatically configures 802.11 wireless network devices. Are you
on a wireless network? \
is not part of a network and that you plug to the internet with a
telephone cable (I assume DSL, not dial-up, right?).
running on wireless?
wireless router? If you do have a wireless router, why are its wireless
functions running if you use a telephone cable to plug to the internet?
Why is this service back to Auto? For all I know maybe you have
'unwanted guests' accessing your wireless router...
Maybe you inadvertently changed some of these settings while you were
'playing' with CodeStuff Starter. I'm still quite busy with other
commitments, I will try to be back later with a new batch file for you
to run, we'll give it another try.
John said:Well, forgive me but I surely have to wonder what it is that is going on
at your end...
The last batch file that I asked you to run would have changed some of
the start values of some of the services but I note some inconsistencies:
Ati HotKey Poller set to Manual now it' Disabled. Not that it matters
but who disabled this?
Browser set to Manual now it's back on Auto. Who set this back to Auto?
You told me that you have a stand alone desktop and that definitely you
are not on a network. The Browser service maintains the browse list, a
list of of all available servers on domains or a list of available
computers on workgroups. The Browser service does broadcast
announcements over the network at specific time intervals (like every 12
minutes, until the Master Browser tells it to shut up) and plays a role
in the assignment of browser tasks to specific computers on the network.
You have no network... why is the Browser service on Auto? Maybe
someone wants this thing barking every 12 minutes....
lanmanserver set to Disabled now it's Manual. No network, no file and
printer sharing so as far as I'm concerned this should be set to
disabled, Manual might also be fine but the point is, who changed it
from Disabled to Manual?
LexBceS still set to Auto. This is part of your Lexmark printer
software, if the printer and all its software was removed I have to
wonder why is this service still present...
psqlWGE set to Manual now it's bact to Auto. What is this thing? What
software are you running that needs this thing to be set to Auto? A
quick search had revealed that it might belong to an accounting package,
I can't say for sure but anything with "sql" in it usually suggests that
it is part of some kind of database. And I have to wonder if this
database is in anyway associated to the Indexing service that seemed to
be doing cataloging work at any or all hours of the day.
Viewpoint Manager Service was set to Auto, now it's Disabled.
Information on this is a bit scant or vague but it seems that it might
be junk installed by AOL and that it might be needed for some AOL
features... or that it might be unwanted junk related to adware. Without
knowing if you are on AOL I had decided to leave it on Auto for the time
being. But as far as I'm concerned if you can live without it maybe you
should have it disabled.
W32Time set to Manual now back to Auto. You said in earlier posts that
the Time service was improperly configured and that it couldn't
synchronize with a time server, so all it's doing is trying (and
failing) to contact a time server, network traffic for naught and for
that specific reason I wanted to remove this from the picture, but I see
that it is back... like the cat with nine lives...
WZCSVC was set to Manual now it's back to Auto. This is is the service
that automatically configures 802.11 wireless network devices. Are you
on a wireless network? You said that you are a standalone machine that
is not part of a network and that you plug to the internet with a
telephone cable (I assume DSL, not dial-up, right?). Is your printer
running on wireless? Is the webcam a wireless device? Do you have a
wireless router? If you do have a wireless router, why are its wireless
functions running if you use a telephone cable to plug to the internet?
Why is this service back to Auto? For all I know maybe you have
'unwanted guests' accessing your wireless router...
Maybe you inadvertently changed some of these settings while you were
'playing' with CodeStuff Starter. I'm still quite busy with other
commitments, I will try to be back later with a new batch file for you
to run, we'll give it another try.
John
Unknown said:Are you strictly dialup?
William said:Well,John, the only approach I can see that makes sense, is for you
to give me a script file that will set all my services to what you
want, and then I'll run ServiceStat.vbc and autoruns.exe and
establish a baseline, and then I'll simply let it sit for 2 hours
and run autoruns.exe again and report autostart.txt and we can see
what was changed when I do nothing in between. Meanwhile, I'm
waiting for your advice.
I can't understand how the Events Log shows absolutely nothing
happening in the two-hour period, so no reason for it not to
obey the hibernate command......yet it jest doesn't do it.
WILL DO IT TOMORROW MORNING.John said:I posted the wrong batch file earlier, it was a work file, not the
finished file. Sorry about that, try this instead:
Copy the stuff between the === lines and save it as a .bat file then run
the batch file (double click on it). After you run the batch file
reboot and see if the machine will hibernate.
====================================================================
rem Second set of changes
sc config Alerter start= Disabled
sc config ALG start= Manual
sc config AppMgmt start= Manual
sc config aspnet_state start= Manual
sc config Ati HotKey Poller start= Disabled
sc config ATI Smart start= Manual
sc config AudioSrv start= Auto
sc config Automatic LiveUpdate Scheduler start= Disabled
sc config BITS start= Manual
sc config Browser start= Manual
sc config CiSvc start= Manual
sc config ClipSrv start= Disabled
sc config clr_optimization_v2.0.50727_32 start= Manual
sc config COMSysApp start= Manual
sc config CryptSvc start= Auto
sc config DcomLaunch start= Auto
sc config Dhcp start= Auto
sc config dmadmin start= Manual
sc config dmserver start= Manual
sc config Dnscache start= Manual
sc config ERSvc start= Manual
sc config Eventlog start= Auto
sc config EventSystem start= Manual
sc config FastUserSwitchingCompatibility start= Manual
sc config Fax start= Manual
sc config FontCache3.0.0.0 start= Manual
sc config GEARSecurity start= Disabled
sc config helpsvc start= Auto
sc config HidServ start= Disabled
sc config HTTPFilter start= Manual
sc config IDriverT start= Manual
sc config idsvc start= Manual
sc config Imapi Helper start= Manual
sc config ImapiService start= Manual
sc config lanmanserver start= Disabled
sc config lanmanworkstation start= Auto
sc config LexBceS start= Disabled
sc config LiveUpdate start= Manual
sc config LmHosts start= Manual
sc config MBAMService start= Disabled
sc config MDM start= Manual
sc config Messenger start= Disabled
sc config mnmsrvc start= Manual
sc config MSIServer start= Manual
sc config NetDDE start= Disabled
sc config NetDDEdsdm start= Disabled
sc config Netlogon start= Manual
sc config Netman start= Manual
sc config NetTcpPortSharing start= Disabled
sc config Nla start= Manual
sc config Norton AntiVirus start= Manual
sc config Norton Save and Restore start= Manual
sc config NProtectService start= Manual
sc config NtLmSsp start= Manual
sc config NtmsSvc start= Manual
sc config ose start= Manual
sc config PlugPlay start= Auto
sc config PolicyAgent start= Manual
sc config ProtectedStorage start= Auto
sc config psqlWGE start= Disabled
sc config RasAuto start= Disabled
sc config RasMan start= Manual
sc config RDSessMgr start= Manual
sc config RemoteAccess start= Disabled
sc config RpcLocator start= Manual
sc config RpcSs start= Auto
sc config RSVP start= Manual
sc config SamSs start= Auto
sc config SCardSvr start= Manual
sc config Schedule start= Manual
sc config seclogon start= Manual
sc config SENS start= Auto
sc config SharedAccess start= Auto
sc config ShellHWDetection start= Auto
sc config Speed Disk service start= Disabled
sc config Spooler start= Manual
sc config srservice start= Auto
sc config SSDPSRV start= Manual
sc config stisvc start= Disabled
sc config SwPrv start= Manual
sc config Symantec RemoteAssist start= Manual
sc config SysmonLog start= Manual
sc config TapiSrv start= Manual
sc config TermService start= Manual
sc config Themes start= Auto
sc config TrkWks start= Manual
sc config upnphost start= Manual
sc config UPS start= Manual
sc config Viewpoint Manager Service start= Disabled
sc config VSS start= Manual
sc config W32Time start= Manual
sc config WebClient start= Manual
sc config winmgmt start= Auto
sc config WmdmPmSN start= Manual
sc config WmiApSrv start= Disabled
sc config WMPNetworkSvc start= Manual
sc config wscsvc start= Manual
sc config wuauserv start= Auto
sc config WudfSvc start= Manual
sc config WZCSVC start= Manual
sc config xmlprov start= Manual
sc config spooler depend= RPCSS
=========================================================
If it still doesn't hibernate after doing the above do a clean boot and
try again:
http://support.microsoft.com/kb/310353
How to configure Windows XP to start in a "clean boot" state
John
***********************************************************William said:WILL DO IT TOMORROW MORNING.
btw.... I don't see the 'earlier' file posted, but
you don't want me to use it anyway.
Bill...
There's a lot of info there, John, too much for me to even helpType Date Time Source Category Event User Computer
Information 4/14/2010 12:42:32 AM Norton AntiVirus None 35 SYSTEM COMPAQ-2006
Information 4/14/2010 12:42:29 AM Norton AntiVirus None 34 SYSTEM COMPAQ-2006
Information 4/13/2010 10:04:32 AM Norton AntiVirus None 35 SYSTEM COMPAQ-2006
Information 4/13/2010 10:04:28 AM Norton AntiVirus None 34 SYSTEM COMPAQ-2006
Information 4/12/2010 8:29:13 PM Norton AntiVirus None 35 SYSTEM COMPAQ-2006
Information 4/12/2010 8:29:11 PM Norton AntiVirus None 34 SYSTEM COMPAQ-2006
Information 4/12/2010 5:22:53 PM Norton AntiVirus None 35 SYSTEM COMPAQ-2006
Type Date Time Source Category Event User Computer
Success Audit 4/14/2010 12:43:31 AM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006
Success Audit 4/14/2010 12:43:31 AM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006
Success Audit 4/14/2010 12:42:56 AM Security System Event 515 SYSTEM COMPAQ-2006
Success Audit 4/14/2010 12:42:54 AM Security Policy Change 850 SYSTEM COMPAQ-2006
Success Audit 4/14/2010 12:42:54 AM Security Policy Change 850 SYSTEM COMPAQ-2006
Type Date Time Source Category Event User Computer
Information 4/14/2010 7:16:16 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 7:16:13 AM Tcpip None 4201 N/A COMPAQ-2006
Information 4/14/2010 6:14:57 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 6:14:54 AM Tcpip None 4201 N/A COMPAQ-2006
Information 4/14/2010 5:13:39 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 5:13:36 AM Tcpip None 4201 N/A COMPAQ-2006
Information 4/14/2010 4:12:21 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 4:12:18 AM Tcpip None 4201 N/A COMPAQ-2006
Information 4/14/2010 3:11:04 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 3:11:00 AM Tcpip None 4201 N/A COMPAQ-2006
Information 4/14/2010 2:09:37 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:45:44 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:45:42 AM Service Control Manager None 7035 SYSTEM COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7035 SYSTEM COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7035 SYSTEM COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7035 Compaq_Owner COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7035 SYSTEM COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7035 SYSTEM COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7035 SYSTEM COMPAQ-2006
Information 4/14/2010 12:43:43 AM Service Control Manager None 7036 N/A COMPAQ-2006
Information 4/14/2010 12:43:42 AM Service Control Manager None 7035 SYSTEM COMPAQ-2006
Information 4/14/2010 12:43:22 AM SRTSP None 2003 N/A COMPAQ-2006
Information 4/14/2010 12:41:53 AM Tcpip None 4201 N/A COMPAQ-2006
Warning 4/14/2010 12:42:15 AM Dhcp None 1003 N/A COMPAQ-2006
Information 4/14/2010 12:42:13 AM eventlog None 6005 N/A COMPAQ-2006
Information 4/14/2010 12:42:13 AM eventlog None 6009 N/A COMPAQ-2006
Information 4/13/2010 10:09:19 AM eventlog None 6006 N/A COMPAQ-2006
Information 4/13/2010 10:06:24 AM Service Control Manager None 7036 N/A COMPAQ-2006
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 4/14/2010
Time: 7:16:16 AM
User: N/A
Computer: COMPAQ-2006
Description:
The Windows Image Acquisition (WIA) service entered the running state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4201
Date: 4/14/2010
Time: 7:16:13 AM
User: N/A
Computer: COMPAQ-2006
Description:
The system detected that network adapter \DEVICE\TCPIP_{D5E50A75-4A1C-4421-A5B4-569C9FE131B8} was connected to the network, and has initiated normal operation over the network adapter.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 69 10 00 40 ....i..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
William said:Latest news, overnight runs (I was up with a bad cold anyway):
Did first half of what was requested. Ran the .bat file and
am posting interesting results below. Will do it again from
Clean Boot later. See SCM/WIA involvement,
plus specifically the every-hour-events.