WIA and hibernation again

[William B. Lurie]

For what it's worth, I have some new Events to report,
but I'm not sure what all the settings were. But maybe they
say something......:



John, what the above shows, time-wise, is that however I set it up,
it was after I made that whole batch automatic. I walked away at 2:21,
and at 2:28 and again at 2:40-ish something interfered, and of course it
never ended up hibernating.

And now another run......

Type Date Time Source Category Event User Computer
Information 4/8/2010 5:59:01 PM Ci CI Service 4137 N/A COMPAQ-2006
Warning 4/8/2010 5:52:02 PM EventSystem (54) 4353 N/A COMPAQ-2006
Warning 4/8/2010 5:52:02 PM EventSystem (52) 4356 N/A COMPAQ-2006
Warning 4/8/2010 5:52:02 PM EventSystem (54) 4353 N/A COMPAQ-2006
Warning 4/8/2010 5:52:02 PM EventSystem (52) 4356 N/A COMPAQ-2006
Information 4/8/2010 5:51:56 PM ASP.NET 2.0.50727.0 None 1076 N/A COMPAQ-2006

Started it at 5:52 and 7 minutes later in recorder an Information
Event.....and then ran almost 2 hours before some unknown and
unrecorded distrurbanc caused it to come alive, as evidenced
by the desktop and icons coming on.

I'll try this one again later this evening and record more.

 

[John John - MVP]

John, what the above shows, time-wise, is that however I set it up,
it was after I made that whole batch automatic. I walked away at 2:21,
and at 2:28 and again at 2:40-ish something interfered, and of course it
never ended up hibernating.

That is the Indexing Service, Bill. This was discussed in an earlier
post. Why is it on? Is it still set to Automatic start?

John

 

[John John - MVP]

For what it's worth, I have some new Events to report,
but I'm not sure what all the settings were. But maybe they
say something......:



John, what the above shows, time-wise, is that however I set it up,
it was after I made that whole batch automatic. I walked away at 2:21,
and at 2:28 and again at 2:40-ish something interfered, and of course it
never ended up hibernating.

Is the machine still connected to the internet or to a LAN? Disconnect
from both while you troubleshoot the problem!

John

 

[William B. Lurie]

Is the machine still connected to the internet or to a LAN? Disconnect
from both while you troubleshoot the problem!

John

John, I thought I made that clear. On each and every test run,
I restart the computer in order to reboot to the the test system,
and while it is booting, I physically disconnect the phone line
as it enters the modem from the wall outlet. As for LAN.......
I am a poor single-line homeowner with only one line of access
to the world of information, other than Comcast cable for TV.

And as for Ci which we discussed earlier, I can't put my finger on it;
please tell me again what to disable to stop it from cataloguing
system volume information at what appears to be random odd times.

I have another overnight run to report later, showing that
same intervention.
Bill

 

[William B. Lurie]

William B. Lurie wrote:
(snip)

John, I thought I made that clear. On each and every test run,
I restart the computer in order to reboot to the the test system,
and while it is booting, I physically disconnect the phone line
as it enters the modem from the wall outlet. As for LAN.......
I am a poor single-line homeowner with only one line of access
to the world of information, other than Comcast cable for TV.

And as for Ci which we discussed earlier, I can't put my finger on it;
please tell me again what to disable to stop it from cataloguing
system volume information at what appears to be random odd times.

I have another overnight run to report later, showing that
same intervention.
Bill

But continuing on, another few bits of news.
I Disabled Indexing Service at 5:55 A.M. this morning and rebooted.
At 0700 screen was still black, power light still flashing, and I
thought maybe it would go the full 2 hours......only had 55 minutes
to go. At 0745 on came the desktop, followed by the "Preparing to
standby" message, and I figured I wouldn't wait another 100 minutes
to see if it would hibernate. More important to report what the Events
were. I filed the following from the Log:

Type Date Time Source Category Event User Computer
Warning 4/9/2010 5:56:51 AM EventSystem (54) 4353 N/A COMPAQ-2006
Warning 4/9/2010 5:56:51 AM EventSystem (52) 4356 N/A COMPAQ-2006
Warning 4/9/2010 5:56:51 AM EventSystem (54) 4353 N/A COMPAQ-2006
Warning 4/9/2010 5:56:51 AM EventSystem (52) 4356 N/A COMPAQ-2006
Information 4/9/2010 5:56:47 AM ASP.NET 2.0.50727.0 None 1076 N/A COMPAQ-2006
Warning 4/9/2010 5:52:17 AM EventSystem (54) 4353 N/A COMPAQ-2006
Warning 4/9/2010 5:52:17 AM EventSystem (52) 4356 N/A COMPAQ-2006
Warning 4/9/2010 5:52:17 AM EventSystem (54) 4353 N/A COMPAQ-2006
Warning 4/9/2010 5:52:17 AM EventSystem (52) 4356 N/A COMPAQ-2006
Information 4/9/2010 5:52:11 AM ASP.NET 2.0.50727.0 None 1076 N/A COMPAQ-2006
Information 4/9/2010 1:18:32 AM Ci CI Service 4103 N/A COMPAQ-2006
Information 4/8/2010 9:55:34 PM Ci CI Service 4137 N/A COMPAQ-2006

Event Type: Information
Event Source: ASP.NET 2.0.50727.0
Event Category: None
Event ID: 1076
Date: 4/9/2010
Time: 5:56:47 AM
User: N/A
Computer: COMPAQ-2006
Description:
State server starts listening with 3 listeners

Type Date Time Source Category Event User Computer
Error 4/9/2010 5:56:07 AM ntfs Disk 55 N/A COMPAQ-2006
Error 4/9/2010 5:56:04 AM ntfs Disk 55 N/A COMPAQ-2006
Information 4/9/2010 5:56:04 AM Tcpip None 4201 N/A COMPAQ-2006
Information 4/9/2010 5:56:24 AM eventlog None 6005 N/A COMPAQ-2006
Information 4/9/2010 5:56:24 AM eventlog None 6009 N/A COMPAQ-2006
Information 4/9/2010 5:55:11 AM eventlog None 6006 N/A COMPAQ-2006
Error 4/9/2010 5:51:31 AM ntfs Disk 55 N/A COMPAQ-2006
Error 4/9/2010 5:51:29 AM ntfs Disk 55 N/A COMPAQ-2006
Information 4/9/2010 5:51:28 AM Tcpip None 4201 N/A COMPAQ-2006
Information 4/9/2010 5:51:49 AM eventlog None 6005 N/A COMPAQ-2006
Information 4/9/2010 5:51:49 AM eventlog None 6009 N/A COMPAQ-2006
Information 4/9/2010 5:24:36 AM eventlog None 6006 N/A COMPAQ-2006

Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4201
Date: 4/9/2010
Time: 5:56:04 AM
User: N/A
Computer: COMPAQ-2006
Description:
The system detected that network adapter \DEVICE\TCPIP_

{D5E50A75-4A1C-4421-A5B4-569C9FE131B8} was connected to the network,

and has initiated normal operation over the network adapter.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 69 10 00 40 ....i..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Maybe there's some new evidence here. Things happening that I
of course don't understand. Note initiating operation over the network
adapter, but I rechecked and my phone line was indeed unplugged.
I only reconnect when I boot back to this main system.

 

[John John - MVP]

John, I thought I made that clear. On each and every test run,
I restart the computer in order to reboot to the the test system,
and while it is booting, I physically disconnect the phone line
as it enters the modem from the wall outlet. As for LAN.......
I am a poor single-line homeowner with only one line of access
to the world of information, other than Comcast cable for TV.

OK, being that your firewall and AV applications are not running while
you run these trials I just wanted to make sure that you weren't opening
your unprotected machine to the outside world.

And as for Ci which we discussed earlier, I can't put my finger on it;
please tell me again what to disable to stop it from cataloguing
system volume information at what appears to be random odd times.

Let's try one last effort and see if we can get to the bottom of this.
I'm going to try another approach, I will try to configure your services
via scripts or batch files that you can run on your machine. We are
going to start from scratch again, I need you to do the following 2 tasks:

Task 1:

Copy the stuff between the ====== lines and save it as ServiceStat.vbs:


================================================================
Const ForWriting = 2
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objLogFile = objFSO.OpenTextFile("c:\services.txt", _
ForWriting, True)
objLogFile.Write _
("Service Name,Start Mode")
objLogFile.Writeline
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colListOfServices = objWMIService.ExecQuery _
("Select * from Win32_Service")
For Each objService in colListOfServices
objLogFile.Write(objService.Name) & ","
objLogFile.Write(objService.StartMode) & ","
objLogFile.writeline
Next
objLogFile.Close
================================================================

Run ServiceState.vbs (double click on it) and after it runs look for the
file C:\services.txt, copy and paste the contents of the file to your
next post.


Task 2:

This one involves running a Sysinternals utility (Autorunsc) at the
command prompt.

Go here: http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

and download the Autoruns and Autorunsc package (581 KB). Unzip the
package, there will be two executable in the package:

The GUI version: autoruns.exe

and the Command version: autorunsc.exe

Copy the command version (autorunsc.exe) to an easy to find location,
for example C:\, then at a Command Prompt run this command:

c:\autorunsc >c:\autostart.txt

Copy and paste the contents of the c:\autostart.txt to your next post.


Be patient after you post the files. I have a busy next few days ahead,
I might not be able to get back to you until much later, maybe not
before Sunday.

John

 

[Unknown]

What is the status of "speed disk" when failing to hibernate?

 

[William B. Lurie]

OK, being that your firewall and AV applications are not running while
you run these trials I just wanted to make sure that you weren't opening
your unprotected machine to the outside world.




Let's try one last effort and see if we can get to the bottom of this.
I'm going to try another approach, I will try to configure your services
via scripts or batch files that you can run on your machine. We are
going to start from scratch again, I need you to do the following 2 tasks:

Task 1:

Copy the stuff between the ====== lines and save it as ServiceStat.vbs:


================================================================
Const ForWriting = 2
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objLogFile = objFSO.OpenTextFile("c:\services.txt", _
ForWriting, True)
objLogFile.Write _
("Service Name,Start Mode")
objLogFile.Writeline
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colListOfServices = objWMIService.ExecQuery _
("Select * from Win32_Service")
For Each objService in colListOfServices
objLogFile.Write(objService.Name) & ","
objLogFile.Write(objService.StartMode) & ","
objLogFile.writeline
Next
objLogFile.Close
================================================================

Run ServiceState.vbs (double click on it) and after it runs look for the
file C:\services.txt, copy and paste the contents of the file to your
next post.


Task 2:

This one involves running a Sysinternals utility (Autorunsc) at the
command prompt.

Go here: http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

and download the Autoruns and Autorunsc package (581 KB). Unzip the
package, there will be two executable in the package:

The GUI version: autoruns.exe

and the Command version: autorunsc.exe

Copy the command version (autorunsc.exe) to an easy to find location,
for example C:\, then at a Command Prompt run this command:

c:\autorunsc >c:\autostart.txt

Copy and paste the contents of the c:\autostart.txt to your next post.


Be patient after you post the files. I have a busy next few days ahead,
I might not be able to get back to you until much later, maybe not
before Sunday.

John

f course I will do all those things, but do you want me to do it
on a "New clone just like my Master" or do you want me to do it on the
"Considerable altered clone which is right now in the condition
that a lot of services have been changed, but it *does* hibernate
after 2 hours?

 

[William B. Lurie]

What is the status of "speed disk" when failing to hibernate?

Disabled......but let me add that my system, the one I test with,
has Speed Disk disabled.

 

[William B. Lurie]

OK, being that your firewall and AV applications are not running while
you run these trials I just wanted to make sure that you weren't opening
your unprotected machine to the outside world.




Let's try one last effort and see if we can get to the bottom of this.
I'm going to try another approach, I will try to configure your services
via scripts or batch files that you can run on your machine. We are
going to start from scratch again, I need you to do the following 2 tasks:

Task 1:

Copy the stuff between the ====== lines and save it as ServiceStat.vbs:


================================================================
Const ForWriting = 2
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objLogFile = objFSO.OpenTextFile("c:\services.txt", _
ForWriting, True)
objLogFile.Write _
("Service Name,Start Mode")
objLogFile.Writeline
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colListOfServices = objWMIService.ExecQuery _
("Select * from Win32_Service")
For Each objService in colListOfServices
objLogFile.Write(objService.Name) & ","
objLogFile.Write(objService.StartMode) & ","
objLogFile.writeline
Next
objLogFile.Close
================================================================

Run ServiceState.vbs (double click on it) and after it runs look for the
file C:\services.txt, copy and paste the contents of the file to your
next post.


Task 2:

This one involves running a Sysinternals utility (Autorunsc) at the
command prompt.

Go here: http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

and download the Autoruns and Autorunsc package (581 KB). Unzip the
package, there will be two executable in the package:

The GUI version: autoruns.exe

and the Command version: autorunsc.exe

Copy the command version (autorunsc.exe) to an easy to find location,
for example C:\, then at a Command Prompt run this command:

c:\autorunsc >c:\autostart.txt

Copy and paste the contents of the c:\autostart.txt to your next post.


Be patient after you post the files. I have a busy next few days ahead,
I might not be able to get back to you until much later, maybe not
before Sunday.

John

Okay, John, I did it pretty well, but with limitations.
File autorunsc.exe said it unzipped but I couldn't find it.
I did the unzipping all in one directory and I found the
autorun.exe but not its command version. So I executed the
one I found and maybe what I'll send below is what you were
after.

The file services.txt saved but is EMPTY except for a header line.
I'll go back and do that again.

Service Name,Start Mode <<<<<<<That's all that the run collected.


Meanwhile, here's the other one:

 

[William B. Lurie]

Okay, John, I did it pretty well, but with limitations.
File autorunsc.exe said it unzipped but I couldn't find it.
I did the unzipping all in one directory and I found the
autorun.exe but not its command version. So I executed the
one I found and maybe what I'll send below is what you were
after.

The file services.txt saved but is EMPTY except for a header line.
I'll go back and do that again.

Service Name,Start Mode <<<<<<<That's all that the run collected.


Meanwhile, here's the other one:

But let me expand about services.txt ....

In the process of doing that on the clone, it gave an error pane:
"Remote Server machine does not exist or is unavailable.
'GetObject' code 800A01CE Microsoft VBScript Runtime Error"

But I did run it on my Master machine and got the following:

Service Name,Start Mode
Alerter,Disabled,
ALG,Manual,
AppMgmt,Manual,
aspnet_state,Manual,
Ati HotKey Poller,Disabled,
ATI Smart,Manual,
AudioSrv,Auto,
Automatic LiveUpdate Scheduler,Disabled,
BITS,Manual,
Browser,Auto,
CiSvc,Manual,
ClipSrv,Disabled,
clr_optimization_v2.0.50727_32,Manual,
COMSysApp,Manual,
CryptSvc,Auto,
DcomLaunch,Auto,
Dhcp,Auto,
dmadmin,Manual,
dmserver,Manual,
Dnscache,Auto,
ERSvc,Auto,
Eventlog,Auto,
EventSystem,Manual,
FastUserSwitchingCompatibility,Manual,
Fax,Manual,
FontCache3.0.0.0,Manual,
GEARSecurity,Disabled,
helpsvc,Auto,
HidServ,Disabled,
HTTPFilter,Manual,
IDriverT,Manual,
idsvc,Manual,
Imapi Helper,Manual,
ImapiService,Manual,
lanmanserver,Auto,
lanmanworkstation,Auto,
LexBceS,Auto,
LiveUpdate,Manual,
LmHosts,Auto,
lxct_device,Auto,
MBAMService,Disabled,
MDM,Manual,
Messenger,Disabled,
mnmsrvc,Manual,
MSIServer,Manual,
NetDDE,Disabled,
NetDDEdsdm,Disabled,
Netlogon,Manual,
Netman,Manual,
NetTcpPortSharing,Disabled,
Nla,Manual,
Norton AntiVirus,Auto,
Norton Save and Restore,Manual,
NProtectService,Manual,
NtLmSsp,Manual,
NtmsSvc,Manual,
ose,Manual,
PlugPlay,Auto,
PolicyAgent,Manual,
ProtectedStorage,Auto,
psqlWGE,Auto,
RasAuto,Disabled,
RasMan,Manual,
RDSessMgr,Manual,
RemoteAccess,Disabled,
RpcLocator,Manual,
RpcSs,Auto,
RSVP,Manual,
SamSs,Auto,
SCardSvr,Manual,
Schedule,Manual,
seclogon,Auto,
SENS,Auto,
SharedAccess,Auto,
ShellHWDetection,Auto,
Speed Disk service,Disabled,
Spooler,Auto,
srservice,Auto,
SSDPSRV,Manual,
stisvc,Manual,
SwPrv,Manual,
Symantec RemoteAssist,Manual,
SysmonLog,Manual,
TapiSrv,Manual,
TermService,Auto,
Themes,Auto,
TrkWks,Auto,
upnphost,Manual,
UPS,Manual,
Viewpoint Manager Service,Disabled,
VSS,Manual,
W32Time,Auto,
WebClient,Auto,
winmgmt,Auto,
WmdmPmSN,Manual,
WmiApSrv,Disabled,
WMPNetworkSvc,Manual,
wscsvc,Manual,
wuauserv,Manual,
WudfSvc,Manual,
WZCSVC,Auto,
xmlprov,Manual,

I'd sure like to run that on the clone, but you'll
have to modify the .vbs file so that the error goes away.

 

[John John - MVP]

f course I will do all those things, but do you want me to do it
on a "New clone just like my Master" or do you want me to do it on the
"Considerable altered clone which is right now in the condition
that a lot of services have been changed, but it *does* hibernate
after 2 hours?

So now it does hibernate... this is getting to be confusing to say the
least, the status of the ability to hibernate changes from post to post.
Let's start afresh with a new clone of the master.

John

 

[John John - MVP]

But let me expand about services.txt ....

In the process of doing that on the clone, it gave an error pane:
"Remote Server machine does not exist or is unavailable.
'GetObject' code 800A01CE Microsoft VBScript Runtime Error"

But I did run it on my Master machine and got the following:


I'd sure like to run that on the clone, but you'll
have to modify the .vbs file so that the error goes away.

Let's run everything on a new clone of your master installation.

John

 

[William B. Lurie]

Let's run everything on a new clone of your master installation.

John

Okay, John, I have the files saved ready to put on a different clone,
one that has not been stripped down with much of the services
made manual.

BTW.......if you check my reports, I had the stripped-down clone
hibernating properly and was re-activating services and the
first batch of ten or so went fine, and then the next one blew
it, and so on. But if you want me to switch from Clone1 to Clone2,
where Clone2 is identical with my Master except for the later
driver, I will be able to do that tomorrow morning.

Since this is a fresh start, should we start a different thread or
just <snip>?
Bill

 

[John John - MVP]

Okay, John, I have the files saved ready to put on a different clone,
one that has not been stripped down with much of the services
made manual.

BTW.......if you check my reports, I had the stripped-down clone
hibernating properly and was re-activating services and the
first batch of ten or so went fine, and then the next one blew
it, and so on. But if you want me to switch from Clone1 to Clone2,
where Clone2 is identical with my Master except for the later
driver, I will be able to do that tomorrow morning.

Since this is a fresh start, should we start a different thread or
just <snip>?

You may as well start a new thread, this one is threaded pretty long and
it's getting harder to find previous posts within it... one of the
longest discussion I have ever been involved in...

John

 

[Unknown]

What was included in the second batch of ten which 'blew it'?

 

[William B. Lurie]

What was included in the second batch of ten which 'blew it'?

It was one in the alphabetic sequence, I'm not sure which.
One of the four "D's".

 

[Unknown]

Probably DCOM. We already know disabling that will allow hibernation.
Something is interfaciing
with DCOM and shouldn't.

 

[William B. Lurie]

Yes, and proceeding in batches of 10 is too many, and
adding one at a time will take a *long* time but I am
willing to go that route. However, John John has me
starting with a system which is fully operational and
is looking at what-all is in there. His is an analytical
approach based on an understanding of all the parameters,
far beyond mine. My approach up to now has been to start
with a minimal system, then to add services one at a time,
and letting more knowledgeable people tell me which
services that *do* interfere I can do without.

As we've said before, in a way it's a tempest in a teapot....
or much ado about nothing....because we can all live with it
hibernating at 1 hour and failing at 2 hour setting. But the
scientist wants to know *why*.

 

[Unknown]

I would like to know why also. Very curious. I'm sure John John will nail
it.