Forever to Wake Up

[Difficult_Man]

This forum has helped me with multiple problems before, I hope we can solve this one, too.

My HP Pavillion x360 takes increasingly longer to wake up from Energy Saver and Sleep Modes. Although the monitor lights up quickly, it takes 5-20 minutes before it becomes responsive. Excel and Zoom can take 30-60 minutes to become usable if they were left open. After these lengthy warmups, the computer works reasonably. However, there are delays when using Excel, particularly when switching back to it after switching away from it.

Thanks in advance for any and all help!

BMK (Difficult Man)

[Bruce]

First guess is you either have a failing drive or something is running in the background, hogging resources.

To prove the later, reboot the PC into Safe Mode, since Safe Mode only loads the core essential services, if your problem is caused by something hogging the processor or hard drive, it shouldn’t happen in Safe Mode.

If that works out to be true, you can then do a Clean Boot, progressively turning on each software one at a time.
See resource here; https://pchelpforum.net/resources/cl...safe-mode.227/

But the slowness you describe sounds like a drive issue to me.
Let’s scan for errors. Try these from an elevated command prompt;
[ul]
[li]chkdsk c: /r[/li][li]sfc /scannow[/li][/ul]

[Bruce]

@Difficult_Man - you logged in yesterday but didn’t update - any news?

[Difficult_Man]

I’m not clear on what to do first or how. I don’t see an option to restart in Safe mode.

I have rebooted and opened Task Manager, then opened applications one at a time to study the use of resources. Excel works fine when it’s the only program open. Explorer uses a lot of resources, even when there’s only one blank page open. Antimalware Service Executable is often at the top of the list.

Let’s scan for errors. Try these from an elevated command prompt;
[ul]
[li]chkdsk c: /r[/li][li]sfc /scannow[/li][/ul]
Do I do this from Safe Mode or from regular?

Thanks for your help.

[Bruce]

Those commands can be done whenever you want, they don’t care

Easiest way into Safe Mode is to hold down the Shift key as you click Restart (from Start then the Power icon).

[Bruce]

@Difficult_Man - any news?

[Malnutrition]

How to boot your computer into Safe Mode

Create and run batch file.

In Normal Mode.
Open a notepad and copy the entire content of the code box below.
[COLOR=rgb(243, 121, 52)]Do not copy the word code!
Paste the txt into the notepad. Save the file to your desktop as [COLOR=rgb(243, 121, 52)]123.bat
Now you will right click the on [COLOR=rgb(243, 121, 52)]123.bat and run as administrator.

@echo off
powershell -Command "Enable-ComputerRestore -Drive 'C:\'"
wmic.exe /Namespace:\\root\default Path SystemRestore Call CreateRestorePoint "PCHF Restore Point", 100, 7
del /f /q  C:\Windows\Temp\*.*
del /f /q  C:\WINDOWS\system32\*.tmp
del /f /q  C:\WINDOWS\system32\drivers\*.tmp
del /f /q  C:\WINDOWS\syswow64\*.tmp
"%WINDIR%\SYSTEM32\lodctr.exe" /R
"%WINDIR%\SysWOW64\lodctr.exe" /R
"C:\Windows\SysWOW64\lodctr.exe" /R
"C:\Windows\SYSTEM32\lodctr.exe" /R
fltmc instances
netsh advfirewall reset
netsh advfirewall set allprofiles state ON
ipconfig /flushdns
netsh winsock reset catalog
netsh int ip reset C:\resettcpip.txt
Bitsadmin /Reset /Allusers
gpupdate /force
net start sdrsvc
net start vss
net start rpcss
net start eventsystem
net start winmgmt
net start msiserver
net start bfe
net start trustedinstaller
net start windefend
net start mpssvc
net start mpsdrv
Winmgmt /salvagerepository
Winmgmt /resetrepository
Winmgmt /resyncperf
DISM.exe /Online /Cleanup-image /Restorehealth
sfc /scannow
shutdown -r

[/COLOR][/COLOR][/COLOR]

[Bruce]

@Difficult_Man - you logged in but didn’t update - any news?

[Difficult_Man]

After many tries, I was able to restart in Safe Mode. I did not see the msg above re getting into Safe Mode. I will try copying that text and booting up again now.

I don’t seem to have connectivity in safe mode, so I can’t judge the operation of browsers or of other programs while browsers are open. I cannot open Excel, Word, Acrobat or any other files.

Judging from watching Task Manager, there doesn’t seem to be much competition for resources,

This computer is gradually becoming unusable.

[Malnutrition]

Would you like to check for malware? I can move the thread to the appropriate area and we can see what is going on with diagnostic tools…

[Difficult_Man]

Executing (SystemRestore)->CreateRestorePoint()
Method execution successful.
Out Parameters:
instance of __PARAMETERS
{
ReturnValue = 0;
};

C:\Windows\Temp\APPX.0np29ois7scy_lwbfwnwmf20g.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.115oygiz75lboyxjbx6b63aee.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.2f88rw60lpup7zotdmcll972d.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.58ab1300qqpqr4pi4jb5__7gb.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.7s5ubr4jnba5g4c4vajxekybh.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.9wba9beg4nt7nkqmxr3xg_lrb.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.dzkgfzn5we4sm2f_kha1m_a3h.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.f7g5ge5arrychf9r8v8q1mu6e.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.gh7k_ogxo0wjz1wct3o04gseh.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.gt3mhppvbbmzzjx4vvb2cfmpd.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.g_qrhfamxsdy5a9i48756z40.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.h82te4go_fzwivp3bexy2zj4f.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.j3wvbqxvsw4gqpsck79vli_hd.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.slg776xkfsvky7cdz_as2kf1.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\DESKTOP-9TQUUHI-20241208-2013.log
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\MpSigStub.log
The process cannot access the file because it is being used by another process.
Could Not Find C:\WINDOWS\system32*.tmp
Could Not Find C:\WINDOWS\syswow64*.tmp

Error: Unable to rebuild performance counter setting from system backup store, error code is 2
Info: Successfully rebuilt performance counter setting from system backup store
Info: Successfully rebuilt performance counter setting from system backup store
Info: Successfully rebuilt performance counter setting from system backup storeFilter Volume Name Altitude Instance Name Frame SprtFtrs VlStatus
[HR][/HR]
CldFlt C: 180451 CldFlt 0 00000007
CldFlt \Device\HarddiskVolumeShadowCopy2 180451 CldFlt 0 00000007
CldFlt \Device\HarddiskVolumeShadowCopy4 180451 CldFlt 0 00000007
CldFlt \Device\HarddiskVolumeShadowCopy4 180451 CldFlt 0 00000007
FileInfo 40500 FileInfo 0 00000007
FileInfo C: 40500 FileInfo 0 00000007
FileInfo 40500 FileInfo 0 00000007
FileInfo D: 40500 FileInfo 0 00000007
FileInfo \Device\HarddiskVolumeShadowCopy2 40500 FileInfo 0 00000007
FileInfo \Device\HarddiskVolumeShadowCopy4 40500 FileInfo 0 00000007
FileInfo \Device\HarddiskVolumeShadowCopy4 40500 FileInfo 0 00000007
FileInfo \Device\Mup 40500 FileInfo 0 00000007
FileInfo G: 40500 FileInfo 0 00000007
UCPD 385250.5 UCPD - Top Instance 0 0000000f
UCPD C: 385250.5 UCPD - Top Instance 0 0000000f
UCPD 385250.5 UCPD - Top Instance 0 0000000f
UCPD D: 385250.5 UCPD - Top Instance 0 0000000f
UCPD \Device\HarddiskVolumeShadowCopy2 385250.5 UCPD - Top Instance 0 0000000f
UCPD \Device\HarddiskVolumeShadowCopy4 385250.5 UCPD - Top Instance 0 0000000f
UCPD \Device\HarddiskVolumeShadowCopy4 385250.5 UCPD - Top Instance 0 0000000f
UCPD \Device\Mup 385250.5 UCPD - Top Instance 0 0000000f
UCPD G: 385250.5 UCPD - Top Instance 0 0000000f
WdFilter 328010 WdFilter Instance 0 00000007
WdFilter C: 328010 WdFilter Instance 0 00000007
WdFilter 328010 WdFilter Instance 0 00000007
WdFilter D: 328010 WdFilter Instance 0 00000007
WdFilter \Device\HarddiskVolumeShadowCopy2 328010 WdFilter Instance 0 00000007
WdFilter \Device\HarddiskVolumeShadowCopy4 328010 WdFilter Instance 0 00000007
WdFilter \Device\HarddiskVolumeShadowCopy4 328010 WdFilter Instance 0 00000007
WdFilter \Device\Mup 328010 WdFilter Instance 0 00000007
WdFilter G: 328010 WdFilter Instance 0 00000007
Wof C: 40700 Wof Instance 0 00000007
Wof 40700 Wof Instance 0 00000007
Wof D: 40700 Wof Instance 0 00000007
Wof \Device\HarddiskVolumeShadowCopy2 40700 Wof Instance 0 00000007
Wof \Device\HarddiskVolumeShadowCopy4 40700 Wof Instance 0 00000007
Wof \Device\HarddiskVolumeShadowCopy4 40700 Wof Instance 0 00000007
bindflt C: 409800 bindflt Instance 0 00000007
luafv C: 135000 luafv 0 00000007
npsvctrig \Device\NamedPipe 46000 npsvctrig 0 00000000
wcifs C: 189900 wcifs Instance 0 00000007
Ok.

Ok.

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

Resetting Compartment Forwarding, OK!
Resetting Compartment, OK!
Resetting Control Protocol, OK!
Resetting Echo Sequence Request, OK!
Resetting Global, OK!
Resetting Interface, OK!
Resetting Anycast Address, OK!
Resetting Multicast Address, OK!
Resetting Unicast Address, OK!
Resetting Neighbor, OK!
Resetting Path, OK!
Resetting Potential, OK!
Resetting Prefix Policy, OK!
Resetting Proxy Neighbor, OK!
Resetting Route, OK!
Resetting Site Prefix, OK!
Resetting Subinterface, OK!
Resetting Wakeup Pattern, OK!
Resetting Resolve Neighbor, OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , failed.
Access is denied.

Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Restart the computer to complete this action.

BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

{C12722BD-054F-41B3-AB16-781080A67FBD} canceled.
1 out of 1 jobs canceled.
Updating policy…

Computer Policy update has completed successfully.
User Policy update has completed successfully.

The Windows Backup service is starting.
The Windows Backup service was started successfully.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The Windows Installer service is starting.
The Windows Installer service was started successfully.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

WMI repository is consistent
WMI repository reset failed
Error code: 0x8007041B
Facility: Win32
Description: A stop control has been sent to a service that other running services are dependent on.

Deployment Image Servicing and Management tool
Version: 10.0.19041.3636

Image Version: 10.0.19045.5131

[============== 25.8%

[Difficult_Man]

Moving to a Malware thread will be fine if you don’t see anything significant in the batch file report above.

[Malnutrition]

It’s just a lot easier for me to see what is going on with FRST.

Please download FRST 64bit It is important FRST is downloaded to your desktop.
Once downloaded right click the FRST desktop icon and select “Run as administrator” from the menu
If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
FRST will open with two dialogue boxes, accept the disclaimer.

[ol]
[li]Then select Scan[/li][li]Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. [/li][li]They will display immediately on the desktop, attach those both in your next reply.[/li][/ol]

[Difficult_Man]

It looks like the batch file is still running, now at 58%. Safe to close now?

[Malnutrition]

It is running SFC /scannow. I’d let it complete.
After it does, then reboot the machine and run FRST there is no rush to get logs to me.