In Progress Forever to Wake Up

  • Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Difficult_Man

PCHF Member
Nov 23, 2024
24
3
61
This forum has helped me with multiple problems before, I hope we can solve this one, too.

My HP Pavillion x360 takes increasingly longer to wake up from Energy Saver and Sleep Modes. Although the monitor lights up quickly, it takes 5-20 minutes before it becomes responsive. Excel and Zoom can take 30-60 minutes to become usable if they were left open. After these lengthy warmups, the computer works reasonably. However, there are delays when using Excel, particularly when switching back to it after switching away from it.

Thanks in advance for any and all help!

BMK (Difficult Man)
 
First guess is you either have a failing drive or something is running in the background, hogging resources.

To prove the later, reboot the PC into Safe Mode, since Safe Mode only loads the core essential services, if your problem is caused by something hogging the processor or hard drive, it shouldn't happen in Safe Mode.

If that works out to be true, you can then do a Clean Boot, progressively turning on each software one at a time.
See resource here; https://pchelpforum.net/resources/clean-boot-versus-safe-mode.227/

But the slowness you describe sounds like a drive issue to me.
Let's scan for errors. Try these from an elevated command prompt;
  • chkdsk c: /r
  • sfc /scannow
 
I’m not clear on what to do first or how. I don’t see an option to restart in Safe mode.

I have rebooted and opened Task Manager, then opened applications one at a time to study the use of resources. Excel works fine when it’s the only program open. Explorer uses a lot of resources, even when there’s only one blank page open. Antimalware Service Executable is often at the top of the list.

Let's scan for errors. Try these from an elevated command prompt;
  • chkdsk c: /r
  • sfc /scannow
Do I do this from Safe Mode or from regular?

Thanks for your help.
 
Those commands can be done whenever you want, they don't care :)

Easiest way into Safe Mode is to hold down the Shift key as you click Restart (from Start then the Power icon).
 
How to boot your computer into Safe Mode

Create and run batch file.

In Normal Mode.
Open a notepad and copy the entire content of the code box below.
Do not copy the word code!
Paste the txt into the notepad. Save the file to your desktop as 123.bat
Now you will right click the on 123.bat and run as administrator.

Code:
@echo off
powershell -Command "Enable-ComputerRestore -Drive 'C:\'"
wmic.exe /Namespace:\\root\default Path SystemRestore Call CreateRestorePoint "PCHF Restore Point", 100, 7
del /f /q  C:\Windows\Temp\*.*
del /f /q  C:\WINDOWS\system32\*.tmp
del /f /q  C:\WINDOWS\system32\drivers\*.tmp
del /f /q  C:\WINDOWS\syswow64\*.tmp
"%WINDIR%\SYSTEM32\lodctr.exe" /R
"%WINDIR%\SysWOW64\lodctr.exe" /R
"C:\Windows\SysWOW64\lodctr.exe" /R
"C:\Windows\SYSTEM32\lodctr.exe" /R
fltmc instances
netsh advfirewall reset
netsh advfirewall set allprofiles state ON
ipconfig /flushdns
netsh winsock reset catalog
netsh int ip reset C:\resettcpip.txt
Bitsadmin /Reset /Allusers
gpupdate /force
net start sdrsvc
net start vss
net start rpcss
net start eventsystem
net start winmgmt
net start msiserver
net start bfe
net start trustedinstaller
net start windefend
net start mpssvc
net start mpsdrv
Winmgmt /salvagerepository
Winmgmt /resetrepository
Winmgmt /resyncperf
DISM.exe /Online /Cleanup-image /Restorehealth
sfc /scannow
shutdown -r
 
After many tries, I was able to restart in Safe Mode. I did not see the msg above re getting into Safe Mode. I will try copying that text and booting up again now.

I don't seem to have connectivity in safe mode, so I can't judge the operation of browsers or of other programs while browsers are open. I cannot open Excel, Word, Acrobat or any other files.

Judging from watching Task Manager, there doesn't seem to be much competition for resources,

This computer is gradually becoming unusable.
 
Would you like to check for malware? I can move the thread to the appropriate area and we can see what is going on with diagnostic tools...
 
Code:
Executing (SystemRestore)->CreateRestorePoint()
Method execution successful.
Out Parameters:
instance of __PARAMETERS
{
        ReturnValue = 0;
};

C:\Windows\Temp\APPX.0np29ois7scy_lwbfwnwmf20g.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.115oygiz75lboyxjbx6b63aee.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.2f88rw60lpup7zotdmcll972d.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.58ab1300qqpqr4pi4jb5__7gb.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.7s5ubr4jnba5g4c4vajxekybh.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.9wba9beg4nt7nkqmxr3xg_lrb.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.dzkgfzn5we4sm2f_kha1m_a3h.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.f7g5ge5arrychf9r8v8q1mu6e.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.gh7k_ogxo0wjz1wct3o04gseh.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.gt3mhppvbbmzzjx4vvb2cfmpd.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.g_qrhfamxsdy5a9i48756z40.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.h82te4go_fzwivp3bexy2zj4f.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.j3wvbqxvsw4gqpsck79vli_hd.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\APPX.slg776xkfsvky7cdz_as2kf1.tmp
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\DESKTOP-9TQUUHI-20241208-2013.log
The process cannot access the file because it is being used by another process.
C:\Windows\Temp\MpSigStub.log
The process cannot access the file because it is being used by another process.
Could Not Find C:\WINDOWS\system32\*.tmp
Could Not Find C:\WINDOWS\syswow64\*.tmp

Error: Unable to rebuild performance counter setting from system backup store, error code is 2
Info: Successfully rebuilt performance counter setting from system backup store
Info: Successfully rebuilt performance counter setting from system backup store
Info: Successfully rebuilt performance counter setting from system backup storeFilter                Volume Name                              Altitude        Instance Name       Frame   SprtFtrs  VlStatus
--------------------  -------------------------------------  ------------  ----------------------  -----   --------  --------
CldFlt                C:                                        180451     CldFlt                    0     00000007
CldFlt                \Device\HarddiskVolumeShadowCopy2         180451     CldFlt                    0     00000007
CldFlt                \Device\HarddiskVolumeShadowCopy4         180451     CldFlt                    0     00000007
CldFlt                \Device\HarddiskVolumeShadowCopy4         180451     CldFlt                    0     00000007
FileInfo                                                         40500     FileInfo                  0     00000007
FileInfo              C:                                         40500     FileInfo                  0     00000007
FileInfo                                                         40500     FileInfo                  0     00000007
FileInfo              D:                                         40500     FileInfo                  0     00000007
FileInfo              \Device\HarddiskVolumeShadowCopy2          40500     FileInfo                  0     00000007
FileInfo              \Device\HarddiskVolumeShadowCopy4          40500     FileInfo                  0     00000007
FileInfo              \Device\HarddiskVolumeShadowCopy4          40500     FileInfo                  0     00000007
FileInfo              \Device\Mup                                40500     FileInfo                  0     00000007
FileInfo              G:                                         40500     FileInfo                  0     00000007
UCPD                                                            385250.5   UCPD - Top Instance       0     0000000f
UCPD                  C:                                        385250.5   UCPD - Top Instance       0     0000000f
UCPD                                                            385250.5   UCPD - Top Instance       0     0000000f
UCPD                  D:                                        385250.5   UCPD - Top Instance       0     0000000f
UCPD                  \Device\HarddiskVolumeShadowCopy2         385250.5   UCPD - Top Instance       0     0000000f
UCPD                  \Device\HarddiskVolumeShadowCopy4         385250.5   UCPD - Top Instance       0     0000000f
UCPD                  \Device\HarddiskVolumeShadowCopy4         385250.5   UCPD - Top Instance       0     0000000f
UCPD                  \Device\Mup                               385250.5   UCPD - Top Instance       0     0000000f
UCPD                  G:                                        385250.5   UCPD - Top Instance       0     0000000f
WdFilter                                                        328010     WdFilter Instance         0     00000007
WdFilter              C:                                        328010     WdFilter Instance         0     00000007
WdFilter                                                        328010     WdFilter Instance         0     00000007
WdFilter              D:                                        328010     WdFilter Instance         0     00000007
WdFilter              \Device\HarddiskVolumeShadowCopy2         328010     WdFilter Instance         0     00000007
WdFilter              \Device\HarddiskVolumeShadowCopy4         328010     WdFilter Instance         0     00000007
WdFilter              \Device\HarddiskVolumeShadowCopy4         328010     WdFilter Instance         0     00000007
WdFilter              \Device\Mup                               328010     WdFilter Instance         0     00000007
WdFilter              G:                                        328010     WdFilter Instance         0     00000007
Wof                   C:                                         40700     Wof Instance              0     00000007
Wof                                                              40700     Wof Instance              0     00000007
Wof                   D:                                         40700     Wof Instance              0     00000007
Wof                   \Device\HarddiskVolumeShadowCopy2          40700     Wof Instance              0     00000007
Wof                   \Device\HarddiskVolumeShadowCopy4          40700     Wof Instance              0     00000007
Wof                   \Device\HarddiskVolumeShadowCopy4          40700     Wof Instance              0     00000007
bindflt               C:                                        409800     bindflt Instance          0     00000007
luafv                 C:                                        135000     luafv                     0     00000007
npsvctrig             \Device\NamedPipe                          46000     npsvctrig                 0     00000000
wcifs                 C:                                        189900     wcifs Instance            0     00000007
Ok.

Ok.


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

Resetting Compartment Forwarding, OK!
Resetting Compartment, OK!
Resetting Control Protocol, OK!
Resetting Echo Sequence Request, OK!
Resetting Global, OK!
Resetting Interface, OK!
Resetting Anycast Address, OK!
Resetting Multicast Address, OK!
Resetting Unicast Address, OK!
Resetting Neighbor, OK!
Resetting Path, OK!
Resetting Potential, OK!
Resetting Prefix Policy, OK!
Resetting Proxy Neighbor, OK!
Resetting Route, OK!
Resetting Site Prefix, OK!
Resetting Subinterface, OK!
Resetting Wakeup Pattern, OK!
Resetting Resolve Neighbor, OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , failed.
Access is denied.

Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Restart the computer to complete this action.


BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

{C12722BD-054F-41B3-AB16-781080A67FBD} canceled.
1 out of 1 jobs canceled.
Updating policy...

Computer Policy update has completed successfully.
User Policy update has completed successfully.

The Windows Backup service is starting.
The Windows Backup service was started successfully.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The Windows Installer service is starting.
The Windows Installer service was started successfully.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.

WMI repository is consistent
WMI repository reset failed
Error code:     0x8007041B
Facility:       Win32
Description:    A stop control has been sent to a service that other running services are dependent on.


Deployment Image Servicing and Management tool
Version: 10.0.19041.3636

Image Version: 10.0.19045.5131

[==============             25.8%
 
It's just a lot easier for me to see what is going on with FRST.

Please download FRST 64bit It is important FRST is downloaded to your desktop.
Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu
If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
FRST will open with two dialogue boxes, accept the disclaimer.


  1. Then select Scan
  2. Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt.
  3. They will display immediately on the desktop, attach those both in your next reply.
 
It is running SFC /scannow. I'd let it complete.
After it does, then reboot the machine and run FRST there is no rush to get logs to me.
 
Uninstall with GeekUninstaller:

Bonjour
HP Registration Service
HP Support Solutions Framework

Then Click View--Ms store Apps: Uninstall:


HP Support Assistant
Microsoft Advertising
Trend Micro Security


Please download the file PrivWindozeLite.exe and place it on your desktop.


Important: Ensure that you save all your current work, as this script will attempt to close all non-essential processes during its scan, including the web browser you are using to read this message.


  • Right-click on PrivWindozeLite.exe and select "Run as administrator" from the context menu.
  • When the tool launches, you may be prompted again to save your work before proceeding.
  • If the scan does not start automatically, press any key on your keyboard to initiate it.
  • The script will try to create a System Restore point and will go through several stages of scanning. Please be patient during this process.
  • Don't worry if Windows Explorer closes; it will reopen once the scan is complete. This process typically takes just a few minutes.
  • After the scan is done, the command prompt window will close automatically after 5 seconds, and you should find a log file named PrivWindoze.txt on your desktop.
  • Please copy or attach the contents of PrivWindoze.txt in your next response.


FRST Fix.

Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
Right Click Run FRST64 as admin; and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally.
After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt).
Please post it to your reply.
 

Attachments

OK, Now how is the machine running?

I am uploading the Two previous tools to another site, unzip to your desktop and run them per instructions.
Click Me

1733905144325.webp
 
If there are further issues with Defender we will get to that, just run Adware Cleaner for me.

Adware Cleaner




  • Download AdwCleaner and save it to your Desktop
  • Right-click on AdwCleaner.exeand select, Run as Administrator
  • Accept the EULA (I accept), then click on Scan Now
  • Let the scan complete
  • Once the scan completes, make sure that every item listed in the different tabs is checked and click on the Quarantine and delete.
  • Once the cleaning process is complete, AdwCleaner will ask you to restart your computer
  • Close all other open windows and allow it to restart
  • After the restart, Notepad will open with the AdwCleaner cleaning log
  • Please Attach the contents of that log into your next reply to me