Computer wakes from hibernate by itself

[shrimply]

Hi, I'm having a few issues with my PC, I'm hoping this is the right section, I'm running window 7 home premium x64.

 

Basically my computer has a habit of suddenly coming back on when its hibernated, usually it occurs just after hibernation, the computer switches itself right off the comes back on. But it has woken me up at least once by just coming on in the middle of the night.

 

On thing I've noticed is that on the rare occasions that I have a webcam attached, the problem is much more common. I can try hibernating 2 or 3 times and only get the computer to stay off when the webcam is unplugged.

 

Anyone got an answer,

 

Many thanks.

[RandyL]

Hi shrimply.

 

I wonder if a software application is doing this. Things like this can often times be difficult to figure out.

 

I'm on Windows 7 at the moment but it should be similar to Vista. Can you check Event Viewer for some clues?

 

Control Panel>Adminstrative Tools>Event Viewer>Windows Logs>Applications

 

One of the other logs or even Task Schedular might also give you a clue. The last log entries after a resume from hibernation might give a clue if this is the case.

[shrimply]

Thanks, I copied everything from the system log from last night when I tried to hibernate it , it coming back on and it staying on hibernate after I unplugged the webcam.

 

 

 

I couldn't really see anything else in the logs from that time, and I may be being stupid but can't find anythign about previously scheduald tasks in the task manager, sorry its so long.

 

 

 

Log Name: System

Source: Microsoft-Windows-Kernel-Power

Date: Friday 12 Feb 2010 1:53:17 AM

Event ID: 42

Task Category: (64)

Level: Information

Keywords: (4)

User: N/A

Computer: Darren-PC

Description:

The system is entering sleep.

 

Sleep Reason: Application API

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>42</EventID>

<Version>2</Version>

<Level>4</Level>

<Task>64</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000004</Keywords>

<TimeCreated SystemTime="2010-02-12T01:53:17.083984400Z" />

<EventRecordID>18177</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="44" />

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="TargetState">5</Data>

<Data Name="EffectiveState">5</Data>

<Data Name="Reason">4</Data>

<Data Name="Flags">0</Data>

</EventData>

</Event>

 

Log Name: System

Source: Service Control Manager

Date: Friday 12 Feb 2010 1:53:16 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Darren-PC

Description:

The Windows Image Acquisition (WIA) service entered the paused state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2010-02-12T01:53:16.157226600Z" />

<EventRecordID>18176</EventRecordID>

<Correlation />

<Execution ProcessID="472" ThreadID="2392" />

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Windows Image Acquisition (WIA)</Data>

<Data Name="param2">paused</Data>

<Binary>7300740069007300760063002F0037000000</Binary>

</EventData>

</Event>

 

Log Name: System

Source: Service Control Manager

Date: Friday 12 Feb 2010 1:53:04 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Darren-PC

Description:

The Multimedia Class Scheduler service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2010-02-12T01:53:04.545898500Z" />

<EventRecordID>18175</EventRecordID>

<Correlation />

<Execution ProcessID="472" ThreadID="2392" />

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Multimedia Class Scheduler</Data>

<Data Name="param2">running</Data>

<Binary>4D004D004300530053002F0034000000</Binary>

</EventData>

</Event>

 

Log Name: System

Source: RTL8167

Date: Friday 12 Feb 2010 1:53:00 AM

Event ID: 1

Task Category: None

Level: Warning

Keywords: Classic

User: N/A

Computer: Darren-PC

Description:

Realtek PCIe FE Family Controller is disconnected from network.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="RTL8167" />

<EventID Qualifiers="32768">1</EventID>

<Level>3</Level>

<Task>0</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2010-02-12T01:53:00.877929700Z" />

<EventRecordID>18174</EventRecordID>

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security />

</System>

<EventData>

<Data>\Device\NDMP5</Data>

<Data>Realtek PCIe FE Family Controller</Data>

<Binary>00000000020030000000000001000080000000000000000000000000000000000000000000000000</Binary>

</EventData>

</Event>

 

Log Name: System

Source: Microsoft-Windows-Power-Troubleshooter

Date: Friday 12 Feb 2010 1:52:59 AM

Event ID: 1

Task Category: None

Level: Information

Keywords:

User: LOCAL SERVICE

Computer: Darren-PC

Description:

The system has resumed from sleep.

 

Sleep Time: ‎2010‎-‎02‎-‎12T01:51:59.477539000Z

Wake Time: ‎2010‎-‎02‎-‎12T01:52:57.822265600Z

 

Wake Source: Unknown

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Power-Troubleshooter" Guid="{CDC05E28-C449-49C6-B9D2-88CF761644DF}" />

<EventID>1</EventID>

<Version>1</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2010-02-12T01:52:59.269531300Z" />

<EventRecordID>18173</EventRecordID>

<Correlation ActivityID="{DCA57FDE-7BD1-4D92-A011-609248CA1A55}" />

<Execution ProcessID="1508" ThreadID="4860" />

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security UserID="S-1-5-19" />

</System>

<EventData>

<Data Name="SleepTime">2010-02-12T01:51:59.477539000Z</Data>

<Data Name="WakeTime">2010-02-12T01:52:57.822265600Z</Data>

<Data Name="SleepDuration">6542</Data>

<Data Name="WakeDuration">3318</Data>

<Data Name="DriverInitDuration">2696</Data>

<Data Name="BiosInitDuration">0</Data>

<Data Name="HiberWriteDuration">19198</Data>

<Data Name="HiberReadDuration">10221</Data>

<Data Name="HiberPagesWritten">163956</Data>

<Data Name="Attributes">16641</Data>

<Data Name="TargetState">5</Data>

<Data Name="EffectiveState">5</Data>

<Data Name="WakeSourceType">0</Data>

<Data Name="WakeSourceTextLength">0</Data>

<Data Name="WakeSourceText">

</Data>

<Data Name="WakeTimerOwnerLength">0</Data>

<Data Name="WakeTimerContextLength">0</Data>

<Data Name="WakeTimerOwner">

</Data>

<Data Name="WakeTimerContext">

</Data>

</EventData>

</Event>

 

Log Name: System

Source: Service Control Manager

Date: Friday 12 Feb 2010 1:52:57 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Darren-PC

Description:

The Windows Image Acquisition (WIA) service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2010-02-12T01:52:57.881836000Z" />

<EventRecordID>18172</EventRecordID>

<Correlation />

<Execution ProcessID="472" ThreadID="992" />

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Windows Image Acquisition (WIA)</Data>

<Data Name="param2">running</Data>

<Binary>7300740069007300760063002F0034000000</Binary>

</EventData>

</Event>

 

Log Name: System

Source: Microsoft-Windows-Kernel-General

Date: Friday 12 Feb 2010 1:52:54 AM

Event ID: 1

Task Category: None

Level: Information

Keywords: Time

User: N/A

Computer: Darren-PC

Description:

The system time has changed to ‎2010‎-‎02‎-‎12T01:52:54.500000000Z from ‎2010‎-‎02‎-‎12T01:52:06.503906200Z.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />

<EventID>1</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000010</Keywords>

<TimeCreated SystemTime="2010-02-12T01:52:54.503906300Z" />

<EventRecordID>18171</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="68" />

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="NewTime">2010-02-12T01:52:54.500000000Z</Data>

<Data Name="OldTime">2010-02-12T01:52:06.503906200Z</Data>

</EventData>

</Event>

 

Log Name: System

Source: Microsoft-Windows-Kernel-Power

Date: Friday 12 Feb 2010 1:52:02 AM

Event ID: 42

Task Category: (64)

Level: Information

Keywords: (4)

User: N/A

Computer: Darren-PC

Description:

The system is entering sleep.

 

Sleep Reason: Application API

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>42</EventID>

<Version>2</Version>

<Level>4</Level>

<Task>64</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000004</Keywords>

<TimeCreated SystemTime="2010-02-12T01:52:02.764648400Z" />

<EventRecordID>18170</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="68" />

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="TargetState">5</Data>

<Data Name="EffectiveState">5</Data>

<Data Name="Reason">4</Data>

<Data Name="Flags">0</Data>

</EventData>

</Event>

 

Log Name: System

Source: Service Control Manager

Date: Friday 12 Feb 2010 1:52:02 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Darren-PC

Description:

The Windows Image Acquisition (WIA) service entered the paused state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2010-02-12T01:52:02.397460900Z" />

<EventRecordID>18169</EventRecordID>

<Correlation />

<Execution ProcessID="472" ThreadID="2108" />

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Windows Image Acquisition (WIA)</Data>

<Data Name="param2">paused</Data>

<Binary>7300740069007300760063002F0037000000</Binary>

</EventData>

</Event>

 

Log Name: System

Source: Service Control Manager

Date: Friday 12 Feb 2010 1:49:33 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Darren-PC

Description:

The Multimedia Class Scheduler service entered the stopped state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2010-02-12T01:49:33.655273400Z" />

<EventRecordID>18168</EventRecordID>

<Correlation />

<Execution ProcessID="472" ThreadID="2108" />

<Channel>System</Channel>

<Computer>Darren-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Multimedia Class Scheduler</Data>

<Data Name="param2">stopped</Data>

<Binary>4D004D004300530053002F0031000000</Binary>

</EventData>

</Event>

[shrimply]

Any other thoughts?

 

Thanks

[RandyL]

I wish I knew.

 

Check the BIOS for wake up LAN maybe.