P
Phil Thompson
In fact it happened as I typed the subject line !
Running Windows XP home on a tower system (homebrew).
My Canon MPC600F multifunction printer (USB) uses a service
called mpservice.exe to support comms between the PC and
the printer, a status monitor sits in the systray relaying
messages.
My problem is that every 30 minutes I get an error from the
monitor "can't communicate with printer" or the like. In
fact the problem is that the service has stopped, I can
manually restart it OK and we're back to normal for 30
minutes. Gets boring after a while.
Have set the Recovery "if this service fails then..." tabs
to "restart the service" but it doesn't.
So I set about investingating, and discover in Event Log a
batch of 4 entries every 30 minutes under "security log".
Each of these is two pairs of Event 528 and Event 576's, a
528 login with username "Network Service", Logon type 5 and
Logon process Advapi followed by a 576 change to priveliged
use.
If I look at the events log for System I see repeat groups
of 4 events, the first is an error Event 7016 where
mpservice reports "an invalid current state 0" followed by
event 7036 "mpservice has entered the stopped state" then
event 7035 (me starting it) and 7036 (it reporting its
running.
So the $64,000 question is what is running every 30 minutes
and doing this to me ? Can I have my PC back please !!
I have spybot, adaware, pccillin antivirus checked and all
the running processes are identifiable and legit. I can't
check on the 30 minute blips because it slows to a crawl
and looks the same as usual by the time it repsonds.
Thnaks for any suggestions,
Phil
Running Windows XP home on a tower system (homebrew).
My Canon MPC600F multifunction printer (USB) uses a service
called mpservice.exe to support comms between the PC and
the printer, a status monitor sits in the systray relaying
messages.
My problem is that every 30 minutes I get an error from the
monitor "can't communicate with printer" or the like. In
fact the problem is that the service has stopped, I can
manually restart it OK and we're back to normal for 30
minutes. Gets boring after a while.
Have set the Recovery "if this service fails then..." tabs
to "restart the service" but it doesn't.
So I set about investingating, and discover in Event Log a
batch of 4 entries every 30 minutes under "security log".
Each of these is two pairs of Event 528 and Event 576's, a
528 login with username "Network Service", Logon type 5 and
Logon process Advapi followed by a 576 change to priveliged
use.
If I look at the events log for System I see repeat groups
of 4 events, the first is an error Event 7016 where
mpservice reports "an invalid current state 0" followed by
event 7036 "mpservice has entered the stopped state" then
event 7035 (me starting it) and 7036 (it reporting its
running.
So the $64,000 question is what is running every 30 minutes
and doing this to me ? Can I have my PC back please !!
I have spybot, adaware, pccillin antivirus checked and all
the running processes are identifiable and legit. I can't
check on the 30 minute blips because it slows to a crawl
and looks the same as usual by the time it repsonds.
Thnaks for any suggestions,
Phil