WIA and hibernation again

  • Thread starter Thread starter William B. Lurie
  • Start date Start date
William B. Lurie said:
Jose wrote:
(snip)

Well, I think I'm getting more used to CCcleaner.....see these:

http://bellsouthpwp.net/b/i/billurie/cc1a.jpg

http://bellsouthpwp.net/b/i/billurie/cc1b.jpg

Clearing everything except HPBootop from Startup list, rebooting,
cleaning everything in the User list (except the HP item) but
not touching System items..... I find that rebooting causes issch.exe and
realsched.exe and ISUSPM to be placed back in Startup again,
every time. While booting up, I watch
TM and I see that agent.exe goes into operation, and then
disappears. Maybe that file gets executed and does these nasty
things.

Anyway, I did find the IS folder, but it has a few dozen lines that
look like Registry entries but nothing that looks like a .exe or
the like. I'd be willing to disable ISUSPM ..... but first I gotta
find the rascal.
Click to expand...

This is where it is :-
What is the isuspm.exe location, where is it stored on my computer?
This file will be found on your hard drive at
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe "
Bill
 
Jose wrote:

(snip)












Well, I think I'm getting more used to CCcleaner.....see these:

http://bellsouthpwp.net/b/i/billurie/cc1a.jpg

http://bellsouthpwp.net/b/i/billurie/cc1b.jpg

Clearing everything except HPBootop from Startup list, rebooting,
cleaning everything in the User list (except the HP item) but
not touching System items..... I find that rebooting causes issch.exe
and realsched.exe and ISUSPM to be placed back in Startup again,
every time. While booting up, I watch
TM and I see that   agent.exe    goes into operation, and then
disappears. Maybe that file gets executed and does these nasty
things.

Anyway, I did find the IS folder, but it has a few dozen lines that
look like Registry entries but nothing that looks like a .exe or
the like. I'd be willing to disable ISUSPM ..... but first I gotta
find the rascal.
Click to expand...

That's looking pretty good. You are getting the hang of it now!

Next time, sort CCcleaner by the Enabled field by clicking the column
heading so all the Yes items are at the top. Don't care about the No
items. Drag the column headings so you can see more (make them
wider). What you have is okay, but it will be more readable when you
learn how to sort the columns and drag the column widths around so it
is just wide enough to show all the characters - especially the File
column. See my example - nice and wide, takes up the whole screen,
then take the screen shot.

If you see those IS things after reboot, just end them and realsched
too. If something goes wrong just reboot and they will start up.
Ending or disabling does not equal uninstalling. You are just trying
to figure out what is keeping you from Hibernating, then you can
figure out what to do about it when you know what it is. Kill
whatever is suspicious and wait.

I can't find a system with that IS junk on there, so I will have to
figure out how to install it. You could just rename the executables
where Bill P is pointing, and that may give you some error, but they
won't start anymore! Check the Services tab in msconfig too and see
if they are disableable. Can't find in in Add/Remove either?
 
Jose said:
That's looking pretty good. You are getting the hang of it now!

Next time, sort CCcleaner by the Enabled field by clicking the column
heading so all the Yes items are at the top. Don't care about the No
items. Drag the column headings so you can see more (make them
wider). What you have is okay, but it will be more readable when you
learn how to sort the columns and drag the column widths around so it
is just wide enough to show all the characters - especially the File
column. See my example - nice and wide, takes up the whole screen,
then take the screen shot.

If you see those IS things after reboot, just end them and realsched
too. If something goes wrong just reboot and they will start up.
Ending or disabling does not equal uninstalling. You are just trying
to figure out what is keeping you from Hibernating, then you can
figure out what to do about it when you know what it is. Kill
whatever is suspicious and wait.

I can't find a system with that IS junk on there, so I will have to
figure out how to install it. You could just rename the executables
where Bill P is pointing, and that may give you some error, but they
won't start anymore! Check the Services tab in msconfig too and see
if they are disableable. Can't find in in Add/Remove either?
Click to expand...
Jose, except for refining what CC shows, I've been following you and I
have taken a half dozen files, including realsched.exe, agent issch
ISUSPM and just left hem in place, with their extension changed to .EXX ...

As we agreed, it takes hours to let it run and go to hibernate and
then bring it out to see if it's clean... but fortunately my house
guests are out on other ventures in a strange land (South Florida) and
I have time. When they're here the computer stays busy/

Hang loose. I think I'm almost ready to graduate from your tutoring
course.
 
William B. Lurie wr
(snip)
Jose, except for refining what CC shows, I've been following you and I
have taken a half dozen files, including realsched.exe, agent issch
ISUSPM and just left hem in place, with their extension changed to .EXX
...

As we agreed, it takes hours to let it run and go to hibernate and
then bring it out to see if it's clean... but fortunately my house
guests are out on other ventures in a strange land (South Florida) and
I have time. When they're here the computer stays busy/

Hang loose. I think I'm almost ready to graduate from your tutoring
course.
Click to expand...

Well, a new status report. See my current TM and Startup.

http://bellsouthpwp.net/b/i/billurie/cc322.JPG
http://bellsouthpwp.net/b/i/billurie/tm322.JPG

I think they are cleaned of just about everything that
I can deactivate. Note that in TM there is one Compaq-Owner item
ccSvcHost that the system will not let me delete. BTW,
I have changed WIA to 'disabled' and the bottom line is still
that things happen to prevent hibernate at more than 1 hour.

Here's a sample Event that I can't resolve:
--------------------------------------------------------
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 3/21/2010
Time: 11:16:22 PM
User: N/A
Computer: COMPAQ-2006
Description:
The following boot-start or system-start driver(s) failed to load:
ftsata2
KLIF

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
 
Please don't give up. I am extremely curious and wish I had your system to
work on. I am setting my hibernate time to two hours to see if I may have
the same problem. Will let you know.
 
Okay, I'll stay active in this project as long as people continue
to be helpful. As you've read in the thread, Jose has steered me
in the right direction. Getting rid of unnecessary clutter, that
supposedly was designed to make things easier and more automatic
for the user, sometimes have unwanted effects. And never
furnishing satisfying explanations as to why they are there, and
preventing the user to clean them out, is a constant annoyance.
Some of the MVP big guns can be great, though.

I have deactivated and prevented from loading a dozen files, all
having been seen in the Task Manager as resident in RAM and as
having been requested by Compaq-Owner (that's me). But there are
a dozen there that are loaded by "System", and I don't dare stop
those from loading, certainly not without some good advice.
Right now I'm waiting for Jose's next advice.
 
William said:
Okay, I'll stay active in this project as long as people continue
to be helpful. As you've read in the thread, Jose has steered me
in the right direction. Getting rid of unnecessary clutter, that
supposedly was designed to make things easier and more automatic
for the user, sometimes have unwanted effects. And never
furnishing satisfying explanations as to why they are there, and
preventing the user to clean them out, is a constant annoyance.
Some of the MVP big guns can be great, though.

I have deactivated and prevented from loading a dozen files, all
having been seen in the Task Manager as resident in RAM and as
having been requested by Compaq-Owner (that's me). But there are
a dozen there that are loaded by "System", and I don't dare stop
those from loading, certainly not without some good advice.
Right now I'm waiting for Jose's next advice.
Click to expand...
This note is partially a test of'imageshack'.
I just uploaded one item from the Event Log that I wish
somebody would interpret for me, and tell me how to stop
from happening. It, too, is interfering with hibernate:

http://profile.imageshack.us/user/billurie

Jose, please let me know if the URL above is correct;
it may need /event322.jpg or something similar added.
 
I set my hibernate time for two hours and it worked perfectly. That gives me
nothing to work with.
I do not have any cameras. Sorry.
 
Thanx for tryimg, UN. My camera is deactivated and none of its
software loaded......Good luck.
 
Well, you'll see it posted here as things progress (we hope).
But I've run out of investigating programs that are shown as
being under my loading control (i.e., non-System, non-
Network Service, non-Local Service) , and the Events that
are recorded are so non-specific that only the insiders can
tell which might have a one-hour repeat built into it. Like,
look at the error event below-----who would know whether
ftsata32 or KLIF are worth investigating, or how to do so?

I'm beginning to get the idea that I may just have to live with
no hibernate setting over 1 hour to be viable on this HP/Compaq
construction of Windows XP.
 
Well, after a few days of not posting anything, I'd like to
show a status report. I have a great, clean, system, with all sorts
of things no longer cluttering up the Startup menu and the Task
Manager. I have WIA started and Automatic, and hibernate set to
2 hours........and Events Log show that every hour, WIA causes
an event so that it *never* goes to hibernate. Here's one event:
*******************************************************
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 3/24/2010
Time: 5:40:58 PM
User: N/A
Computer: COMPAQ-2006
Description:
The Windows Image Acquisition (WIA) service entered the running state.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
*********************************************************
It's obviously set *somewhere* at 1 hour. How do I get it
changed to 3 hours?
 
William said:
Well, after a few days of not posting anything, I'd like to
show a status report. I have a great, clean, system, with all sorts
of things no longer cluttering up the Startup menu and the Task
Manager. I have WIA started and Automatic, and hibernate set to
2 hours........and Events Log show that every hour, WIA causes
an event so that it *never* goes to hibernate. Here's one event:
*******************************************************
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 3/24/2010
Time: 5:40:58 PM
User: N/A
Computer: COMPAQ-2006
Description:
The Windows Image Acquisition (WIA) service entered the running state.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
*********************************************************
It's obviously set *somewhere* at 1 hour. How do I get it
changed to 3 hours?
(snipped)
Click to expand...

A closer look at services.msc shows, on expanding WIA, that its
executable is at Windows\system32\svchost.exe-k imgsvc .....

I'd appreciate it if one of those who know, would please lead
me to (or give me) instructions for modifying that executable
so that it kicks in every 3 hours instead of every hour.
 
William said:
A closer look at services.msc shows, on expanding WIA, that its
executable is at Windows\system32\svchost.exe-k imgsvc .....

I'd appreciate it if one of those who know, would please lead
me to (or give me) instructions for modifying that executable
so that it kicks in every 3 hours instead of every hour.
Click to expand...

The service isn't starting of its own, it's starting because *something
else* is asking it to start. Sometime ago I gave you two commands to
get the list of running programs and services when the machine boots,
can you run them again and post the results? Reboot the machine and
then run these three commands at a Command Prompt, pressing enter after
each:

net start > c:\test.txt
tasklist /svc >> c:\test.txt
c:\test.txt

Copy and paste the contents of the notepad file to your next post.
Please note the single redirector (>) in the first command and the
double one (>>)in the second command.

John
 
John said:
The service isn't starting of its own, it's starting because *something
else* is asking it to start. Sometime ago I gave you two commands to
get the list of running programs and services when the machine boots,
can you run them again and post the results? Reboot the machine and
then run these three commands at a Command Prompt, pressing enter after
each:

net start > c:\test.txt
tasklist /svc >> c:\test.txt
c:\test.txt

Copy and paste the contents of the notepad file to your next post.
Please note the single redirector (>) in the first command and the
double one (>>)in the second command.

John
Click to expand...
Here's the first one, John.

These Windows services are started:

Application Layer Gateway Service
COM+ Event System
Cryptographic Services
DCOM Server Process Launcher
DHCP Client
Distributed Link Tracking Client
DNS Client
Error Reporting Service
Event Log
Fast User Switching Compatibility
Help and Support
LexBce Server
lxct_device
Network Connections
Network Location Awareness (NLA)
Norton AntiVirus
Pervasive PSQL Workgroup Engine
Plug and Play
Print Spooler
Protected Storage
Remote Access Connection Manager
Remote Procedure Call (RPC)
Secondary Logon
Security Accounts Manager
Server
Shell Hardware Detection
Speed Disk service
SSDP Discovery Service
System Event Notification
TCP/IP NetBIOS Helper
Telephony
Terminal Services
Themes
Viewpoint Manager Service
WebClient
Windows Audio
Windows Firewall/Internet Connection Sharing (ICS)
Windows Management Instrumentation
Windows Time
Wireless Zero Configuration
Workstation

The command completed successfully.

The second one gave the error pane saying:

Windows cannot find tasklist ..........
What did I do wrong?
 
William said:
Here's the first one, John.
...
Click to expand...
The second one gave the error pane saying:

Windows cannot find tasklist ..........
What did I do wrong?
Click to expand...

This was discussed in our thread a few weeks ago and at that time you
had gotten it to work. Here is a refresher.

Tasklist is included with Windows XP Professional but it isn't included
in XP Home. Download Tasklist.exe here:

http://www.computerhope.com/download/winxp/tasklist.exe
(Direct download link)

Download the file and place it in your C:\Windows\System32 folder.
Reboot the computer and run the command just after the reboot, we want
an accurate list of what is running just after the machine is booted and
before you start or run anything else.

John
 
John said:
This was discussed in our thread a few weeks ago and at that time you
had gotten it to work. Here is a refresher.

Tasklist is included with Windows XP Professional but it isn't included
in XP Home. Download Tasklist.exe here:

http://www.computerhope.com/download/winxp/tasklist.exe
(Direct download link)

Download the file and place it in your C:\Windows\System32 folder.
Reboot the computer and run the command just after the reboot, we want
an accurate list of what is running just after the machine is booted and
before you start or run anything else.

John
Click to expand...
Okay, John. I had to do it just a bit differently from what
you asked (and I don't recall ever seeing your earlier request, but
I could have missed it. I sure didn't ignore it on purpose).
**********************************************************
Application Layer Gateway Service
COM+ Event System
Cryptographic Services
DCOM Server Process Launcher
DHCP Client
Distributed Link Tracking Client
DNS Client
Error Reporting Service
Event Log
Fast User Switching Compatibility
Help and Support
LexBce Server
lxct_device
Network Connections
Network Location Awareness (NLA)
Norton AntiVirus
Pervasive PSQL Workgroup Engine
Plug and Play
Print Spooler
Protected Storage
Remote Access Connection Manager
Remote Procedure Call (RPC)
Secondary Logon
Security Accounts Manager
Server
Shell Hardware Detection
Speed Disk service
SSDP Discovery Service
System Event Notification
TCP/IP NetBIOS Helper
Telephony
Terminal Services
Themes
Viewpoint Manager Service
WebClient
Windows Audio
Windows Firewall/Internet Connection Sharing (ICS)
Windows Management Instrumentation
Windows Time
Wireless Zero Configuration
Workstation

The command completed successfully.
Click to expand...
************************************************************
Image Name PID Services

========================= ======
=============================================
System Idle Process 0 N/A

System 4 N/A

smss.exe 1200 N/A

csrss.exe 1284 N/A

winlogon.exe 1316 N/A

services.exe 1360 Eventlog, PlugPlay

lsass.exe 1372 ProtectedStorage, SamSs

svchost.exe 1528 DcomLaunch, TermService

svchost.exe 1616 RpcSs

svchost.exe 1784 AudioSrv, CryptSvc, Dhcp, ERSvc,

EventSystem,
FastUserSwitchingCompatibility,
helpsvc, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, seclogon, SENS,

SharedAccess, ShellHWDetection,
TapiSrv,
Themes, TrkWks, W32Time, winmgmt,
WZCSVC
svchost.exe 1872 Dnscache

svchost.exe 244 LmHosts, SSDPSRV

LEXBCES.EXE 376 LexBceS

spoolsv.exe 544 Spooler

LEXPPS.EXE 576 N/A

explorer.exe 820 N/A

svchost.exe 940 WebClient

lxctcoms.exe 992 lxct_device

ccSvcHst.exe 1040 Norton AntiVirus

w3dbsmgr.exe 1444 psqlWGE

NOPDB.exe 1860 Speed Disk service

ViewpointService.exe 160 Viewpoint Manager Service

ccSvcHst.exe 2572 N/A

alg.exe 4056 ALG

hpsysdrv.exe 2192 N/A

EditPadLite.exe 3112 N/A

cmd.exe 1468 N/A

ntvdm.exe 3152 N/A

tasklist.exe 3092 N/A

wmiprvse.exe 3288 N/A
 
William said:
Okay, John. I had to do it just a bit differently from what
you asked (and I don't recall ever seeing your earlier request, but
I could have missed it. I sure didn't ignore it on purpose).
**********************************************************
************************************************************
Image Name PID Services

========================= ======
=============================================
System Idle Process 0 N/A

System 4 N/A

smss.exe 1200 N/A

csrss.exe 1284 N/A

winlogon.exe 1316 N/A

services.exe 1360 Eventlog, PlugPlay

lsass.exe 1372 ProtectedStorage, SamSs

svchost.exe 1528 DcomLaunch, TermService

svchost.exe 1616 RpcSs

svchost.exe 1784 AudioSrv, CryptSvc, Dhcp, ERSvc,

EventSystem,
FastUserSwitchingCompatibility,
helpsvc, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, seclogon, SENS,

SharedAccess, ShellHWDetection,
TapiSrv,
Themes, TrkWks, W32Time, winmgmt,
WZCSVC
svchost.exe 1872 Dnscache

svchost.exe 244 LmHosts, SSDPSRV

LEXBCES.EXE 376 LexBceS

spoolsv.exe 544 Spooler

LEXPPS.EXE 576 N/A

explorer.exe 820 N/A

svchost.exe 940 WebClient

lxctcoms.exe 992 lxct_device

ccSvcHst.exe 1040 Norton AntiVirus

w3dbsmgr.exe 1444 psqlWGE

NOPDB.exe 1860 Speed Disk service

ViewpointService.exe 160 Viewpoint Manager Service

ccSvcHst.exe 2572 N/A

alg.exe 4056 ALG

hpsysdrv.exe 2192 N/A

EditPadLite.exe 3112 N/A

cmd.exe 1468 N/A

ntvdm.exe 3152 N/A

tasklist.exe 3092 N/A

wmiprvse.exe 3288 N/A
Click to expand...

This list was taken right after a reboot? I wonder what 16-bit/DOS
application would be running (inside the NTVDM) when you boot the machine...

John
 
John said:
This list was taken right after a reboot? I wonder what 16-bit/DOS
application would be running (inside the NTVDM) when you boot the
machine...

John
Click to expand...
I'll do it again, John, if you ask me to.
I think I may have had to run the commands
from the actual DOS prompt (i.e., Start>Run>cmd);
I couldn't find the files created by putting the commands
into the Run>command window and executing from there.

I'll try to do it again, now, and generate a new set.
Yes, I'll reboot first.
 
John wrote:
(snip)
I'll do it again, John, if you ask me to.
I think I may have had to run the commands
from the actual DOS prompt (i.e., Start>Run>cmd);
I couldn't find the files created by putting the commands
into the Run>command window and executing from there.

I'll try to do it again, now, and generate a new set.
Yes, I'll reboot first.
Click to expand...
----------------------------------------------------
I did the following immediately after reboot, by going
to cmd DOS prompt, the C:\ and
net start > c:\test326a.txt
enter
tasklist /svc > c:\test326b.txt
enter

And now I will copy and paste the two .txt files here.
These Windows services are started:

Application Layer Gateway Service
COM+ Event System
Cryptographic Services
DCOM Server Process Launcher
DHCP Client
Distributed Link Tracking Client
DNS Client
Error Reporting Service
Event Log
Fast User Switching Compatibility
Help and Support
LexBce Server
lxct_device
Network Connections
Network Location Awareness (NLA)
Norton AntiVirus
Pervasive PSQL Workgroup Engine
Plug and Play
Print Spooler
Protected Storage
Remote Access Connection Manager
Remote Procedure Call (RPC)
Secondary Logon
Security Accounts Manager
Server
Shell Hardware Detection
Speed Disk service
SSDP Discovery Service
System Event Notification
TCP/IP NetBIOS Helper
Telephony
Terminal Services
Themes
Viewpoint Manager Service
WebClient
Windows Audio
Windows Firewall/Internet Connection Sharing (ICS)
Windows Management Instrumentation
Windows Time
Wireless Zero Configuration
Workstation

The command completed successfully.
Click to expand...

Image Name PID Services

========================= ======
=============================================
System Idle Process 0 N/A

System 4 N/A

smss.exe 1200 N/A

csrss.exe 1280 N/A

winlogon.exe 1312 N/A

services.exe 1356 Eventlog, PlugPlay

lsass.exe 1368 ProtectedStorage, SamSs

svchost.exe 1532 DcomLaunch, TermService

svchost.exe 1628 RpcSs

svchost.exe 1796 AudioSrv, CryptSvc, Dhcp, ERSvc,

EventSystem,
FastUserSwitchingCompatibility,
helpsvc, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, seclogon, SENS,

SharedAccess, ShellHWDetection,
TapiSrv,
Themes, TrkWks, W32Time, winmgmt,
WZCSVC
svchost.exe 1868 Dnscache

svchost.exe 244 LmHosts, SSDPSRV

LEXBCES.EXE 392 LexBceS

spoolsv.exe 552 Spooler

LEXPPS.EXE 584 N/A

explorer.exe 832 N/A

svchost.exe 944 WebClient

lxctcoms.exe 996 lxct_device

ccSvcHst.exe 1044 Norton AntiVirus

w3dbsmgr.exe 1520 psqlWGE

NOPDB.exe 1824 Speed Disk service

ViewpointService.exe 2028 Viewpoint Manager Service

ccSvcHst.exe 2540 N/A

alg.exe 4080 ALG

cmd.exe 2256 N/A

hpsysdrv.exe 2348 N/A

tasklist.exe 2644 N/A

wmiprvse.exe 2676 N/A


Over to you, John.
 
Back
Top