Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

PC woke up for no reason


  • Please log in to reply
7 replies to this topic

#1 Przeszczep

Przeszczep

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 22 September 2017 - 01:17 PM

My locale is not English so I've translated some parts.

The issue is my computer just woke up on it's own. Event log reports the reason is unknown.

+ System

  - Provider

   [ Name]  Microsoft-Windows-Power-Troubleshooter
   [ Guid]  {CDC05E28-C449-49C6-B9D2-88CF761644DF}
 
   EventID 1
 
   Version 2
 
   Level 4
 
   Task 0
 
   Opcode 0
 
   Keywords 0x8000000000000000
 
  - TimeCreated

   [ SystemTime]  2017-09-22T08:28:52.772676200Z
 
   EventRecordID 115326
 
  - Correlation

   [ ActivityID]  {5D7E0E98-DE6E-4AAC-874D-B208431DB7F9}
 
  - Execution

   [ ProcessID]  1512
   [ ThreadID]  10588
 
   Channel System
 
   Computer <*>
 
  - Security

   [ UserID]  S-1-5-19
 

- EventData

  SleepTime 2017-09-22T00:53:20.227684600Z
  WakeTime 2017-09-22T08:28:50.811965200Z
  SleepDuration 939
  WakeDuration 2311
  DriverInitDuration 2225
  BiosInitDuration 638
  HiberWriteDuration 5107
  HiberReadDuration 0
  HiberPagesWritten 426766
  Attributes 16641
  TargetState 4
  EffectiveState 5
  WakeSourceType 0
  WakeSourceTextLength 0
  WakeSourceText  
  WakeTimerOwnerLength 0
  WakeTimerContextLength 0
  NoMultiStageResumeReason 0
  WakeTimerOwner  
  WakeTimerContext  
 

 
PS > powercfg -lastwake
Wake History Count - 1
Wake History [0]
  Wake Source Count - 0
 
PS > powercfg -devicequery wake_armed
Killer e2200 Gigabit Ethernet Controller
Urządzenie klawiatury HID <- HID Keyboard Device
Logitech Optical Gaming Mouse G400s

PS > powercfg -waketimers
Timer set by [SERVICE] \Device\HarddiskVolume4\Windows\System32\svchost.exe (SystemEventsBroker) expires at 10:15:43 on
2017-09-23.
  Reason: System Windows wykona zaplanowane zadanie „NT TASK\Microsoft\Windows\rempl\shell”, które zażądało wznowienia k
omputera ze stanu uśpienia. <- Windows will execute planned task „NT TASK\Microsoft\Windows\rempl\shell” which requested to resume the computer from sleep state)

<?xml version="1.0" encoding="UTF-16"?>
<Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
  <RegistrationInfo>
    <URI>\Microsoft\Windows\rempl\shell</URI>
    <SecurityDescriptor>D:(A;;GA;;;SY)(A;;FRFX;;;LS)(A;;FRFX;;;BA)</SecurityDescriptor>
  </RegistrationInfo>
  <Triggers>
    <CalendarTrigger>
      <StartBoundary>2017-04-24T10:00:00</StartBoundary>
      <Enabled>true</Enabled>
      <RandomDelay>PT1H</RandomDelay>
      <ScheduleByDay>
        <DaysInterval>1</DaysInterval>
      </ScheduleByDay>
    </CalendarTrigger>
    <RegistrationTrigger>
      <Enabled>true</Enabled>
      <Delay>PT10M</Delay>
    </RegistrationTrigger>
  </Triggers>
  <Principals>
    <Principal id="LocalSystem">
      <UserId>S-1-5-18</UserId>
      <RunLevel>HighestAvailable</RunLevel>
    </Principal>
  </Principals>
  <Settings>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries>
    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
    <AllowHardTerminate>true</AllowHardTerminate>
    <StartWhenAvailable>true</StartWhenAvailable>
    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
    <IdleSettings>
      <StopOnIdleEnd>true</StopOnIdleEnd>
      <RestartOnIdle>false</RestartOnIdle>
    </IdleSettings>
    <AllowStartOnDemand>true</AllowStartOnDemand>
    <Enabled>true</Enabled>
    <Hidden>false</Hidden>
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
    <DisallowStartOnRemoteAppSession>false</DisallowStartOnRemoteAppSession>
    <UseUnifiedSchedulingEngine>true</UseUnifiedSchedulingEngine>
    <WakeToRun>true</WakeToRun>
    <ExecutionTimeLimit>PT72H</ExecutionTimeLimit>
    <Priority>7</Priority>
  </Settings>
  <Actions Context="LocalSystem">
    <Exec>
      <Command>%ProgramFiles%\rempl\remsh.exe</Command>
    </Exec>
  </Actions>
</Task>

The task was last run on 2017-09-22 at 10:29:17

When closing the pc the installing updates screen appeared, so I've checked recently installed updates. And there is the update KB4021702 installed on 2017-09-22. I have my updates set to install manually so it installed without my consent.
 

Allow wake timers option in power plan is disabled. Could the wake be caused by the update? What does that task do?



BC AdBot (Login to Remove)

 


#2 jenae

jenae

  • Members
  • 829 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 22 September 2017 - 04:23 PM

Hi, If you don't want to allow your network to wake your computer, press the win + x keys together, select device manager and expand your network adapters, right click on yours and select properties go to the power management tab and uncheck "allow this device to wake this computer" (or similar).



#3 Przeszczep

Przeszczep
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 23 September 2017 - 04:18 AM

I'm on local home network so I see nothing that could wake my pc.

 

Today it happened again. It woke up at 10:58:00 and the task was run at 10:58:23. I guess it's the task causing this but it's unclear for me why it happened almost an hour after the expected trigger (10:00). I would still like to know what does this task do and why is it allowed to wake my pc even if I have wake timers disabled in power plan.


Edited by Przeszczep, 23 September 2017 - 04:20 AM.


#4 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:05:00 PM

Posted 23 September 2017 - 07:06 AM

Find Out What Woke Up Your Computer


Posted Image


#5 Przeszczep

Przeszczep
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 23 September 2017 - 10:18 AM

I guess you didn't read my opening post?



#6 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:05:00 PM

Posted 23 September 2017 - 12:03 PM

Sorry i thought  you only post logs from Event Viewer.


Posted Image


#7 jenae

jenae

  • Members
  • 829 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 23 September 2017 - 06:11 PM

Hi, open a cmd prompt as admin and copy paste:-

 

schtasks /query /FO TABLE /v > 0 & notepad 0 (press enter) be patient it takes awhile to compile.
 
Notepad will open (if it is difficult to read go to "view" and turn off "wordwrap") 
 
You might be surprised by the volume of tasks, find the one your interested in then for control over it :-
 
win + r type:- Taskschd.msc (press OK) expand and locate the task you can edit from here.


#8 Przeszczep

Przeszczep
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 25 September 2017 - 10:53 AM

I've removed the whole program folder and task. It was supposedly an update compatibility checker. No wakes so far. Comes out "some" tasks can wake you computer even when wake timers are disabled and Windows can install updates even when they are disabled via group policy.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users