P
Phil Thompson
In fact it happened as I typed the subject line !
Running Windows XP home on a tower system (homebrew).
My Canon MPC600F multifunction printer (USB) uses a service called
mpservice.exe to support comms between the PC and the printer, a
status monitor sits in the systray relaying messages.
My problem is that every 30 minutes I get an error from the monitor
"can't communicate with printer" or the like. In fact the problem is
that the service has stopped, I can manually restart it OK and we're
back to normal for 30 minutes. Gets boring after a while.
Have set the Recovery "if this service fails then..." tabs to
"restart the service" but it doesn't.
So I set about investingating, and discover in Event Log a batch of 4
entries every 30 minutes under "security log".
Each of these is two pairs of Event 528 and Event 576's, a 528 login
with username "Network Service", Logon type 5 and Logon process Advapi
followed by a 576 change to priveliged use.
If I look at the events log for System I see repeat groups of 4
events, the first is an error Event 7016 where mpservice reports "an
invalid current state 0" followed by event 7036 "mpservice has entered
the stopped state" then event 7035 (me starting it) and 7036 (it
reporting its running.
So the $64,000 question is what is running every 30 minutes and doing
this to me ? Can I have my PC back please !!
I have spybot, adaware, pccillin antivirus checked and all the running
processes are identifiable and legit. I can't check on the 30 minute
blips because it slows to a crawl and looks the same as usual by the
time it repsonds.
Thnaks for any suggestions,
Phil
Running Windows XP home on a tower system (homebrew).
My Canon MPC600F multifunction printer (USB) uses a service called
mpservice.exe to support comms between the PC and the printer, a
status monitor sits in the systray relaying messages.
My problem is that every 30 minutes I get an error from the monitor
"can't communicate with printer" or the like. In fact the problem is
that the service has stopped, I can manually restart it OK and we're
back to normal for 30 minutes. Gets boring after a while.
Have set the Recovery "if this service fails then..." tabs to
"restart the service" but it doesn't.
So I set about investingating, and discover in Event Log a batch of 4
entries every 30 minutes under "security log".
Each of these is two pairs of Event 528 and Event 576's, a 528 login
with username "Network Service", Logon type 5 and Logon process Advapi
followed by a 576 change to priveliged use.
If I look at the events log for System I see repeat groups of 4
events, the first is an error Event 7016 where mpservice reports "an
invalid current state 0" followed by event 7036 "mpservice has entered
the stopped state" then event 7035 (me starting it) and 7036 (it
reporting its running.
So the $64,000 question is what is running every 30 minutes and doing
this to me ? Can I have my PC back please !!
I have spybot, adaware, pccillin antivirus checked and all the running
processes are identifiable and legit. I can't check on the 30 minute
blips because it slows to a crawl and looks the same as usual by the
time it repsonds.
Thnaks for any suggestions,
Phil