Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Desktop PC keeps waking up from sleep


  • Please log in to reply
13 replies to this topic

#1 jacobe1026

jacobe1026

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:52 PM

Posted 28 April 2015 - 09:30 AM

My desktop PC randomly wakes up from sleep, by itself. I have tried many things, but I have been unsuccessful in preventing it. I'm starting to wonder if I have some type of virus, even though I'm pretty sure that it is being caused by Windows Update.

 

After my PC wakes up, I run the command line: powercfg /lastwake. I get this reply:

 

Owner: [SERVICE] \Device\HarddiskVolume2\Windows\System32\svchost.exe (SystemEventsBroker)

Owner Supplied Reason: Windows will execute 'NT TASK\Microsoft\WindowsUpdate\AUScheduledInstall' scheduled task that requested waking the computer.

 

I have disabled Windows Update from waking my computer in GPEdit. I have disabled the routine maintenance, that Windows 8 runs, from waking my computer. I have disabled wake timers in Power options. I have disabled my NIC from waking my computer. I've ran virus scans with Norton and Malewarebytes, but they don't find anything. I don't know what else to try.

 

Please help!



BC AdBot (Login to Remove)

 


#2 Angoid

Angoid

  • Security Colleague
  • 299 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:East Midlands UK
  • Local time:06:52 PM

Posted 28 April 2015 - 09:44 AM

If I hibernate my Windows 8.1 PC, I get the same behaviour unless I switch off at the wall as well once it's in hibernation.

 

I think it might be something to do with "Wake on LAN" (WOL):

https://support.microsoft.com/en-us/kb/2776718

 

Perhaps Windows Update is causing it to see if there are any updates.

 

I'd be curious to know whether this topic gets any more replies ... I've not looked deeply into it, I just try to remember to power down at the mains after I've hibernated the PC ... that stops it reliably enough!


Helping a loved one through a mental health issue?  Remember ALGEE...

Assess the risk | Listen nonjudgementally | Give reassurance and info | Encourage professional help | Encourage self-help and support network

#3 jacobe1026

jacobe1026
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:52 PM

Posted 28 April 2015 - 09:54 AM

I should mention that if I look at Windows Update, after the computer wakes up, that the last check for updates is at the exact time that the computer wakes up. I don't know if there's a task somewhere that needs to be disabled, or if a virus is hiding itself as Windows Update.



#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:01:52 PM

Posted 28 April 2015 - 10:40 AM

Let's try this one time....

Tweaking.com - Windows Repair All-In-One (Portable)

- Download Windows Repair All-In-One (Portable Version) from here.

- Extract tweaking.com_windows_repair_aio.zip to your Desktop.

- Disable all your antivirus and antimalware software - see how to do that here.
- Right click on QfBzvq1.png and select Run as Administrator (XP users just double click) to start Windows Repair All-In-One.
(Windows Vista/7/8 users: Accept UAC warning if it is enabled.)

- A window will appear. Click Step 2.
2f8o60N.png

- Click the Open Pre-Scan button, then click Start Scan. Wait for Windows Repair to finish scanning.

- Depending on which error Windows Repair found, click Repair Reparse Point or Repair Environment Variable accordingly. When the button changes to "Done!", click the close button to return to Windows Repair.

- Go to Step 3, then click Check in the See If Check Disk Is Needed.

- If Windows Repair stated that errors are found, click Open Check Disk At Next Boot. Choose (/R) Fixes errors on the disk also locate bad sectors and recovers readable information, then click Add To Next Boot. Reboot the computer to let Windows check the disk.
Ymy7crZ.png

- Go to Step 4, then click Do It.
zDtdN75.png

- Go to Step 5. Under System Restore click Create.
f7lEe1N.png

- Go to Repairs and click Open Repairs. Leave all checkmarks as they are, then click Start Repairs.
PGv2vtD.png

- By default Windows Repair All-In-One will create a "Logs" folder in its folder on the Desktop. Please post the contents of the log in your next reply.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 jacobe1026

jacobe1026
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:52 PM

Posted 28 April 2015 - 11:04 AM

I will do this after I get off work.



#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:01:52 PM

Posted 28 April 2015 - 11:24 AM

OK
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 jacobe1026

jacobe1026
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:52 PM

Posted 28 April 2015 - 08:19 PM

sfc /scannow found errors that it was unable to fix, even in safe mode. Here is the log that you asked for:

 

Tweaking.com - Windows Repair v3.1.3
--------------------------------------------------------------------------------
 
System Variables
--------------------------------------------------------------------------------
OS: Windows 8.1 Pro with Media Center
OS Architecture: 64-bit
OS Version: 6.3.9600
OS Service Pack: 
Computer Name: JACOB-PC
Windows Drive: C:\
Windows Path: C:\WINDOWS
Program Files: C:\Program Files
Program Files (x86): C:\Program Files (x86)
Current Profile: C:\Users\Jacob
Current Profile SID: S-1-5-21-2429673478-3346595327-660145728-1001
Current Profile Classes: S-1-5-21-2429673478-3346595327-660145728-1001_Classes
Profiles Location: C:\Users
Profiles Location 2: C:\WINDOWS\ServiceProfiles
Local Settings AppData: C:\Users\Jacob\AppData\Local
--------------------------------------------------------------------------------
 
System Information
--------------------------------------------------------------------------------
System Up Time: 0 Days 00:02:09
 
Process Count: 103
Commit Total: 2.57 GB
Commit Limit: 8.97 GB
Commit Peak: 2.59 GB
Handle Count: 34841
Kernel Total: 484.45 MB
Kernel Paged: 359.78 MB
Kernel Non Paged: 124.67 MB
System Cache: 2.62 GB
Thread Count: 1438
--------------------------------------------------------------------------------
 
Memory Before Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 7.89 GB
Memory Used: 2.29 GB(29.0814%)
Memory Avail.: 5.59 GB
--------------------------------------------------------------------------------
 
Cleaning Memory Before Starting Repairs...
 
Memory After Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 7.89 GB
Memory Used: 1.78 GB(22.5878%)
Memory Avail.: 6.11 GB
--------------------------------------------------------------------------------
 
Starting Repairs...
   Started at (4/28/2015 8:39:08 PM)
 
Setting Any Missing 'InstallDate' From Uninstall Sections Before Running Repair...
Total Missing 'InstallDate' Fixed: 251
 
01 - Reset Registry Permissions
   Restore Windows 8 Default Registry Permissions
   Start (4/28/2015 8:39:09 PM)
 
 
Decompressing & Updating Windows Permission File hkud.txt
Done,  0.13 seconds.
 
 
Decompressing & Updating Windows Permission File hkcu.txt
Done,  0.17 seconds.
 
 
Decompressing & Updating Windows Permission File hkcr.txt
Done,  0.53 seconds.
 
 
Decompressing & Updating Windows Permission File hklm.txt
Done,  1.1 seconds.
 
   Running Repair Under System Account
   Running Repair Under Current User Account
   Done (4/28/2015 8:42:08 PM)
 
03 - Reset Service Permissions
   Start (4/28/2015 8:42:08 PM)
 
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:42:15 PM)
 
04 - Register System Files
   Start (4/28/2015 8:42:15 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:42:34 PM)
 
05 - Repair WMI
   Start (4/28/2015 8:42:34 PM)
 
   Starting Security Center So We Can Export The Security Info.
 
   Exporting Antivirus Info...
   Norton 360 Exported.
   Windows Defender Exported.
 
   Exporting AntiSpyware Info...
   Windows Defender Exported.
   Norton 360 Exported.
 
   Exporting 3rd Party Firewall Info...
   Norton 360 Exported.
 
   Running Repair Under Current User Account
   Done (4/28/2015 8:44:24 PM)
 
06 - Repair Windows Firewall
   Start (4/28/2015 8:44:24 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:45:02 PM)
 
07 - Repair Internet Explorer
   Start (4/28/2015 8:45:02 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:45:19 PM)
 
08 - Repair MDAC/MS Jet
   Start (4/28/2015 8:45:19 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:45:25 PM)
 
09 - Repair Hosts File
   Start (4/28/2015 8:45:25 PM)
   Running Repair Under System Account
   Done (4/28/2015 8:45:26 PM)
 
10 - Remove Policies Set By Infections
   Start (4/28/2015 8:45:26 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:45:28 PM)
 
12 - Repair Icons
   Start (4/28/2015 8:45:28 PM)
   Running Repair Under Current User Account
   Done (4/28/2015 8:45:30 PM)
 
13 - Repair Winsock & DNS Cache
   Start (4/28/2015 8:45:30 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:45:38 PM)
 
15 - Repair Proxy Settings
   Start (4/28/2015 8:45:38 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:45:40 PM)
 
17 - Repair Windows Updates
   Start (4/28/2015 8:45:40 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Setting Windows Updates Files That Are In Use To Be Removed At Next Boot.
   Done (4/28/2015 8:46:07 PM)
 
18 - Repair CD/DVD Missing/Not Working
   Start (4/28/2015 8:46:07 PM)
   iTunes was found, adding UpperFilters for iTunes Reg Key
   UpperFilters added?: True
   Done (4/28/2015 8:46:07 PM)
 
19 - Repair Volume Shadow Copy Service
   Start (4/28/2015 8:46:07 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:27 PM)
 
21 - Repair MSI (Windows Installer)
   Start (4/28/2015 8:46:27 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:38 PM)
 
23.01 - Repair bat Association
   Start (4/28/2015 8:46:38 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:40 PM)
 
23.02 - Repair cmd Association
   Start (4/28/2015 8:46:40 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:42 PM)
 
23.03 - Repair com Association
   Start (4/28/2015 8:46:42 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:45 PM)
 
23.04 - Repair Directory Association
   Start (4/28/2015 8:46:45 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:47 PM)
 
23.05 - Repair Drive Association
   Start (4/28/2015 8:46:47 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:49 PM)
 
23.06 - Repair exe Association
   Start (4/28/2015 8:46:49 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:51 PM)
 
23.07 - Repair Folder Association
   Start (4/28/2015 8:46:51 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:53 PM)
 
23.08 - Repair inf Association
   Start (4/28/2015 8:46:53 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:55 PM)
 
23.09 - Repair lnk (Shortcuts) Association
   Start (4/28/2015 8:46:55 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:46:57 PM)
 
23.10 - Repair msc Association
   Start (4/28/2015 8:46:57 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:47:00 PM)
 
23.11 - Repair reg Association
   Start (4/28/2015 8:47:00 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:47:02 PM)
 
23.12 - Repair scr Association
   Start (4/28/2015 8:47:02 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:47:04 PM)
 
24 - Repair Windows Safe Mode
   Start (4/28/2015 8:47:04 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:47:06 PM)
 
25 - Repair Print Spooler
   Start (4/28/2015 8:47:06 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:47:19 PM)
 
26 - Restore Important Windows Services
   Start (4/28/2015 8:47:19 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:47:25 PM)
 
27 - Set Windows Services To Default Startup
   Start (4/28/2015 8:47:25 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 8:47:29 PM)
 
28.01 - Repair Windows 8 App Store
   Start (4/28/2015 8:47:29 PM)
 
Decompressing & Updating Windows Permission File hkcu.txt
Done,  0.16 seconds.
 
   Running Repair Under Current User Account
   Done (4/28/2015 8:48:08 PM)
 
29 - Repair Windows 8 Component Store
   Start (4/28/2015 8:48:08 PM)
   Running Repair Under Current User Account
   Done (4/28/2015 9:04:02 PM)
 
30 - Restore Windows 8 COM+ Unmarshalers
   Start (4/28/2015 9:04:02 PM)
   Running Repair Under System Account
Processing ACL of: <classes_root\Unmarshalers>
 
SetACL finished with error(s): 
SetACL error message: The call to SetNamedSecurityInfo () failed
Operating system error message: Access is denied.
 
   Done (4/28/2015 9:04:03 PM)
 
31 - Repair Windows 'New' Submenu
   Start (4/28/2015 9:04:03 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (4/28/2015 9:04:06 PM)
 
33 - Repair Performance Counters
   Start (4/28/2015 9:04:06 PM)
   Running Repair Under Current User Account
   Done (4/28/2015 9:04:08 PM)
 
Cleaning up empty logs...
 
All Selected Repairs Done.
   Done at (4/28/2015 9:04:09 PM)
   Total Repair Time: 00:25:02
 
 
...YOU MUST RESTART YOUR SYSTEM...


#8 Go The Power

Go The Power

  • Members
  • 525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:22 AM

Posted 29 April 2015 - 02:04 AM

Hello,

Can you please upload the following folder?

Export CBS folder

  • Right click on the aa922834-ed43-40f1-8830-d5507badb56c_39. button
  • Click on File Explorer
  • Double-click on the C: drive, scroll down to, and double click on the Windows folder.
  • Find and double click on the Logs folder.
  • Right-click on the CBS folder, and select Copy.
  • Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
  • Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
  • A new file, also called CBS (CBS.zip), but this time with a different icon, will be created.
  • Please rename this file to CBS_{Insert forum username here}_{insert todays Date here}.zip For example "CBS_Go The Power_1803.Zip"
Please Note:: if the file is too big to upload to you next post please upload via Dropbox or One Drive

#9 jacobe1026

jacobe1026
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:52 PM

Posted 29 April 2015 - 08:59 AM

I'm not sure how to upload it to a post, so here's a link: https://onedrive.live.com/redir?resid=8bb03530480674b5!7526&authkey=!ACiqr9P4rQL2SYI&ithint=file%2czip



#10 Go The Power

Go The Power

  • Members
  • 525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:22 AM

Posted 29 April 2015 - 03:24 PM

Thank you, two files are showing as corrupt:

amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json
Hash: EeQJzlVPvq9GNIcA2FEwrOjEeuDam1G+ol3x61gKasQ=
amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json
Hash: 6510UErwHGoFg3sRd3gzh3HSbTceuHem3Rnk0NraKS8=

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  • Download SFCFix.exe (by niemiro) and save this to your Desktop.
  • Download SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  • Save any open documents and close all open windows.
  • On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  • Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  • SFCFix will now process the script.
  • Upon completion, a file should be created on your Desktop: SFCFix.txt.
  • Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
Once done please run SFC /SCANNOW again and upload a new CBS log.

#11 jacobe1026

jacobe1026
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:52 PM

Posted 29 April 2015 - 06:37 PM

It's looking good.

 

New CBS log: http://1drv.ms/1duDv1c

 

SFCFix log:

 

SFCFix version 2.4.3.0 by niemiro.
Start time: 2015-04-29 19:21:21.611
Microsoft Windows 8.1 Update 3 - amd64
Using .zip script file at C:\Users\Jacob\Downloads\SFCFix.zip [0]
 
 
 
 
PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json
Successfully took permissions for file or folder C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json
 
Successfully copied file C:\Users\Jacob\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json to C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json.
Successfully copied file C:\Users\Jacob\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json to C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json.
 
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\telemetry.ASM-WindowsDefault.json
Successfully restored ownership for C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json
Successfully restored permissions on C:\WINDOWS\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.3.9600.17747_none_90df8130dac08ee0\utc.app.json
PowerCopy:: directive completed successfully.
 
 
 
 
Successfully processed all directives.
SFCFix version 2.4.3.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2015-04-29 19:21:21.790
Script hash: JZrwR+EkCnMcPCKxi9/S5DlvgZ6WfZj3etpR0U3C20o=
----------------------EOF-----------------------


#12 Go The Power

Go The Power

  • Members
  • 525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:22 AM

Posted 30 April 2015 - 02:34 AM

Hello,

Looks good, all the corruptions have been repaired.

#13 jacobe1026

jacobe1026
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:52 PM

Posted 30 April 2015 - 08:40 AM

Now, I just wait to see if my computer wakes up by itself again.



#14 jacobe1026

jacobe1026
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:52 PM

Posted 01 May 2015 - 08:24 AM

And thank you for the help so far.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users