HJT log standby problem

Discussion in 'Malware Help (A Specialist Will Reply)' started by languy99, Jun 7, 2006.

  1. languy99

    languy99 Corporal

    ok i have a dell inspiron 8100 and i am having problems having it go into standby, the problem is that when windows is still starting up if i click shut down the standby button is working and there, but if i wait until it stop loading and everything is done, the stand by button is grayed out. i think it has to be some kinda spyware or something but i can't figure out what is wrong with it, i also posted in the software forum http://forums.majorgeeks.com/showthread.php?t=93963 i have already ran the read me stuff a while ago and i got helped to clean it all up, and there is no indication that i can see of spyware, the log is attached in that post, it will not let me reattach it here.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    This is not a malware problem. It is a registry setting.

    The below configuration disables standby:

    Whereas I believe the below would be default or enable:



    Before making any changes to your registry you should either backup your registry or at a minimum first export the below key to use as a backup to restore your settings if necessary:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ACPI\Parameters
     
  3. languy99

    languy99 Corporal

    thanks for the help, i'm not big into messing with the registry how do i get those to merge with the registry?
     
  4. languy99

    languy99 Corporal

    what about this one, i foudn this one on another web site, what do you think?

    Windows Registry Editor Version 5.00

    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ACPI\Parameters]
    "Attributes"=dword:00000070

    or would it be better if i ran the one you gave me?
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That is what you may already have. Look back at my previous message. That is the value being set for attributes when standby is disabled. When it is enabled, the attribute key does not even appear (i.e., it can be deleted).

    Click Start, Run, and paste the below command into the run box then click OK:

    regedit /E %systemdrive%\ACPI.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ACPI\Parameters"


    Now you can use Windows Explorer to locate the C:\ACPI.txt file that was created. Upload that file here as an attachment. Then we can see exactly what your current settings are. This will also serve as a backup if we make any changes.
     
  6. languy99

    languy99 Corporal

    ok i got the file and i will attach it.
     

    Attached Files:

    • ACPI.txt
      File size:
      722 bytes
      Views:
      3
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Well you values are all set to different values than what I have. I do not have too much
    info on what all the values in these keys can set. But they do control things like standby and hibernate options. They also impact what will appear on both the Start, Turn Off Computer screen buttons and what will appear in Task Manager under the Shutdown menu.

    You could try the below and see what effect it has! You will more than likely have to reboot first after applying this patch to see what effect it has.

    Copy the bold text below to notepad. Save it as EnableSTBY.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    If that does not help or it messes anything up on you, rename the ACPI.TXT file you previously created to ACPI.REG

    And then from a Windows Explorer window just locate the ACPI.REG file and double click on it. This will restore your original settings.
     
  8. languy99

    languy99 Corporal

    that didn't work i am still missing the standby in the power options i will include a picture, also i looked a log view and i got a couple of warnings that i will post for you this one was in application:
    Event Type: Warning
    Event Source: Userenv
    Event Category: None
    Event ID: 1517
    Date: 6/8/2006
    Time: 1:26:37 PM
    User: NT AUTHORITY\SYSTEM
    Computer: DELLJULIAN
    Description:
    Windows saved user DELLJULIAN\mike registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

    This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    security was fine, and next is the system one i keep getting a NVIDIA error in this log i think this is what is causing all my problems

    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7000
    Date: 6/8/2006
    Time: 2:47:44 PM
    User: N/A
    Computer: DELLJULIAN
    Description:
    The NVIDIA NDIS IO Control Driver service failed to start due to the following error:
    The system cannot find the file specified.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    maybe you can make head or tails of this. also i have a "?" in device manager, its called parallel device and i can't do anything about it, it will nto install any drivers or anything, do you think this has anything to do with it?
     

    Attached Files:

  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I cannot help you any further with this in this forum! These are not malware problems. You should continue working these issue in your original thread.

    It sounds more like registry settings, hardware/software/driver conflicts etc.
    Does your hardware support the Stanby and Hibernate settings?

    You also said the registry patch I gave you did not work but you need to verify that the changes were actually made to the registry.

    Please work these issue in you original thread in the Software Forum.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds