Forum Home
Press F1
 
Thread ID: 84164 2007-10-26 11:27:00 Spontaneous Sleep Mode roygretn (989) Press F1
Post ID Timestamp Content User
605648 2007-10-26 11:27:00 My O/S is Win XP
Starting about a week ago at random times the screen shows a brief Popup indicating it is moving into Sleep Mode. When this happens the computer essentially shuts down & cannot be reawakened. Even the reset button is dead. The only way to reawaken is to pull the power plug for a minute or so before restoring power, whereupon the computer can then be restarted in the normal way, but during reboot insists on checking at least the system drive for errors due to false shutdown.
There is no pattern in the spontaneous sleep mode - sometimes the computer can be run for several hours on many tasks, but then goes to sleep during the normal shutdown process - sometimes in the middle of word processing it enters sleep mode every few minutes - sometimes it goes to sleep during a new bootup before the welcome screen appears. All Power Management instructions are set for no component to never sleep or hibernate, Screen saver set for several hours before turning off monitor and I cannot identify any recent change in the system which might have initiated this very annoying spontaneous sleep habit.
Is there someone out there who might offer a sensible new lead ?
roygretn
roygretn (989)
605649 2007-10-26 15:22:00 As this seems to be some sortta malware.....it is gonna need some help from you.

I just KNOW that you're gonna get asked for a HJT scan results posting here..so you might as well get one and post it soon.

Here's the place to get HJT :ASSUMING YOU CAN SEE THE SOUTHERN CROSS HERE (majorgeeks.com)

For those who can see THE BIG DIPPER (majorgeeks.com)

...(and be sure to post the WHOLE results that you save on Notepad):p


I don't personally think this is hardware related....it would be the first time today if I am wrong.
SurferJoe46 (51)
605650 2007-10-26 21:09:00 I trust you have tried the power button...

Sleep also means standby or Hibernate. Which one of these is displayed on your screen when preparing to 'sleep'?

If it's hibernate press the power button, Windows will resume and, theoretically, your PC should work!

If it's Stand By, pressing a mouse button or a keyboard key should awaken the PC.
jwil1 (65)
605651 2007-10-26 21:45:00 Some motherboard have a bios option to sleep the PC after period of inactivity, although that should not cause your problem Agent_24 (57)
605652 2007-10-29 10:39:00 To SurferJoe46
I have downloaded HJT to another computer, and when I can get the main computer to stay awake long enough will try to run HJT & I will the post the result.


To jwil1
As indicated there is but a single line saying
"Entering Sleep Mode" whereupon the computer shuts down. Attempting to rouse with the power switch causes no reaction, even leaving it pressed for 30 secs - ie it is essentially dead with no light to indicate any sense of wakefulness. After pulling the plug for a minute or two to discharge all power in condensers &c, then restoration of power allows normal bootup after pressing power switch.
Unfortunately the computer then recommends scandisk to check C:\ drive which then starts after 10secs & laboriously checks the full drive. If I am lucky the computer returns to normal duty but more likely it reenters Sleep Mode even before completion of the reboot or soon after.

To Agent_24
I have set the BIOS to a minimal Power Management role & set Control Panel Power Management "Never to Hibernate", with Monitor only being temporarily shut down after 4h of no activity so that none of these settings should
influence the problem I have.

Thanks for your 3 replies.
roygretn
roygretn (989)
605653 2007-10-30 07:04:00 To SurferJoe46
Hi Herewith copy of HJT as requested.

Logfile of HijackThis v1.99.1
Scan saved at 8:04:07 p.m., on 30/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\SOUNDMAN.EXE
E:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
E:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
E:\Program Files\Comodo\BOClean\BOCORE.exe
E:\Program Files\QuickTime\qttask.exe
E:\Program Files\Comodo\Firewall\cmdagent.exe
E:\Program Files\Comodo\Firewall\CPF.exe
E:\PROGRA~1\Comodo\BOClean\BOC425.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger .exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Logitech\QuickCam10\COCIManager.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe
E:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://xtra.co.nz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [WinPatrol] E:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "E:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [COMODO Firewall Pro] "E:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [BOC-425] E:\PROGRA~1\Comodo\BOClean\\BOC425.exe
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] E:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger .exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - favorites.live.com
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://www.amp.co.nz
O15 - Trusted Zone: www.bestwestern.co.nz
O15 - Trusted Zone: http://www.choicehotels.com
O15 - Trusted Zone: www.flybuys.co.nz
O15 - Trusted Zone: http://www.fundsource.co.nz
O15 - Trusted Zone: http://www.google.co.nz
O15 - Trusted Zone: http://www.holidaycity.com
O15 - Trusted Zone: http://www.ingnz.com
O15 - Trusted Zone: http://by7fd.bay7.hotmail.msn.com
O15 - Trusted Zone: http://www.readesdigest.co.nz
O15 - Trusted Zone: http://www.redhillestate.com.au
O15 - Trusted Zone: http://whitepapers.techrepublic.com
O15 - Trusted Zone: http://www.whitepages.co.nz
O15 - Trusted Zone: http://www.whitepages.com.au
O15 - Trusted Zone: http://maps.yellowpages.co.nz
O15 - Trusted Zone: http://www.yellowpages.co.nz
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - go.microsoft.com
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - roygretn.spaces.live.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - update.microsoft.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - download.macromedia.com
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - driveragent.com
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BOCore - COMODO - E:\Program Files\Comodo\BOClean\BOCORE.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - E:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe

Hope you can make sense of it
Thanks
roygretn
roygretn (989)
605654 2007-10-30 09:39:00 Looks ok to me.

But run HJT again tick these entries then tick fix checked.

Close browser/s.

These are safe but dont have to run on startup.

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [RemoteControl] "E:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime

I dont think this is going to help your prob tho.

Check event viewer in control panel / admin tools. Next it happens see if there's an entry here. (Under application and system with an error or X in it).
Speedy Gonzales (78)
605655 2007-10-30 09:47:00 Do you have a Logitech or other keyboard with user defineable keys or at least a sleep key on it? One of them may be sticking?? feersumendjinn (64)
605656 2007-11-03 07:16:00 To #8 feersumendjinn

No I do nothave a keyboard with user defineable keys.
roygretn
roygretn (989)
605657 2007-11-03 07:20:00 Sorry I should have included that while there is a key labelled Sleep, it is one of a set of 3 adjoining keys labelled Power Sleep & Wake - None of which has ever given an indication of having any influence on my computer over several years.
roygretn
roygretn (989)
1 2