Awake with screen off

shura

Well-known member
Joined
Feb 2, 2014
Posts
100
Hi all,

This morning (well, close to 1 pm, doesn't matter) I found my PC running instead of sleeping, with the screen off. Hitting caps lock resulted in the keyboard indicator switching, but the screen never turned on. I tried to put the machine to sleep manually (sleep button on keyboard) just to see what happens -- no reaction. After hard reset, all came back to normal.

A bit of a backstory, if that matters at all: a few weeks ago, the machine failed to sleep and 'powercfg -requests' revealed that srvnet was keeping it awake. Following an online discussion, I issued:

powercfg /requestsoverride driver srvnet system

which solved the problem. Today, after I successfully hard-rebooted, I decided to check if srvnet was still trying to keep the machine awake and found that it was not. So, I undid the override by issuing:

powercfg -requestsoverride driver \filesystem\srvnet


These are the only changes to the system. Aside from that, a few days ago my NVIDIA driver and GeForce Experience were updated (maybe that is what fixed the srvnet requests). Event Viewer reports some interesting behavior prior to what happened in the morning, but I do not know if this is abnormal (events corresponding to going to sleep and my hard reset are in bold):
Error 3/11/2017 12:43:48 PM EventLog 6008 None The previous system shutdown at 12:10:01 PM on ‎3/‎11/‎2017 was unexpected.
Critical 3/11/2017 12:43:33 PM Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Information 3/11/2017 12:43:27 PM Microsoft-Windows-FilterManager 6 None File System Filter 'MpFilter' (10.0, ‎2016‎-‎08‎-‎08T16:01:17.000000000Z) has successfully loaded and registered with Filter Manager.
Information 3/11/2017 12:43:27 PM Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (6.1, ‎2009‎-‎07‎-‎13T16:34:25.000000000Z) has successfully loaded and registered with Filter Manager.
Information 3/11/2017 12:43:27 PM Microsoft-Windows-Kernel-General 12 None The operating system started at system time ‎2017‎-‎03‎-‎11T19:43:27.109999300Z.
Information 3/11/2017 12:37:39 PM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 12:18:08 PM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 11:37:38 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 11:34:04 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 10:35:34 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 10:31:20 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 10:10:20 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 10:00:26 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 8:58:56 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 8:56:42 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 7:22:12 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 7:15:47 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 6:12:47 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 5:57:27 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 4:13:57 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 4:03:57 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 3:10:46 AM Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep.

All this activity in between -- is that normal behavior? I am inclined to blame NVIDIA's GeForce Experience, which seems intrusive and overbearing with a bunch of services that appear to collect all sorts of info...
Scanned with AdwCleaner and Malwarebytes -- all clean. Any thoughts/suggestions?

Thanks!

PC specs:

OS: Win 7 Home x64 (original OEM by Dell, no reinstallations)
Age: 3-4 years
CPU: Core i5-3450 @ 3.1 GHz
Video card: NVIDIA GeForce GTX 660 by Gigabyte
Motherboard: Dell
Power Supply: Dell, 460W
Manufacturer and Model: Dell XPS 8500
 
Hi all,

This morning (well, close to 1 pm, doesn't matter) I found my PC running instead of sleeping, with the screen off. Hitting caps lock resulted in the keyboard indicator switching, but the screen never turned on. I tried to put the machine to sleep manually (sleep button on keyboard) just to see what happens -- no reaction. After hard reset, all came back to normal.

A bit of a backstory, if that matters at all: a few weeks ago, the machine failed to sleep and 'powercfg -requests' revealed that srvnet was keeping it awake. Following an online discussion, I issued:

powercfg /requestsoverride driver srvnet system

which solved the problem. Today, after I successfully hard-rebooted, I decided to check if srvnet was still trying to keep the machine awake and found that it was not. So, I undid the override by issuing:

powercfg -requestsoverride driver \filesystem\srvnet


These are the only changes to the system. Aside from that, a few days ago my NVIDIA driver and GeForce Experience were updated (maybe that is what fixed the srvnet requests). Event Viewer reports some interesting behavior prior to what happened in the morning, but I do not know if this is abnormal (events corresponding to going to sleep and my hard reset are in bold):
Error 3/11/2017 12:43:48 PM EventLog 6008 None The previous system shutdown at 12:10:01 PM on ‎3/‎11/‎2017 was unexpected.
Critical 3/11/2017 12:43:33 PM Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Information 3/11/2017 12:43:27 PM Microsoft-Windows-FilterManager 6 None File System Filter 'MpFilter' (10.0, ‎2016‎-‎08‎-‎08T16:01:17.000000000Z) has successfully loaded and registered with Filter Manager.
Information 3/11/2017 12:43:27 PM Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (6.1, ‎2009‎-‎07‎-‎13T16:34:25.000000000Z) has successfully loaded and registered with Filter Manager.
Information 3/11/2017 12:43:27 PM Microsoft-Windows-Kernel-General 12 None The operating system started at system time ‎2017‎-‎03‎-‎11T19:43:27.109999300Z.
Information 3/11/2017 12:37:39 PM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 12:18:08 PM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 11:37:38 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 11:34:04 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 10:35:34 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 10:31:20 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 10:10:20 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 10:00:26 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 8:58:56 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 8:56:42 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 7:22:12 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 7:15:47 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 6:12:47 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 5:57:27 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 4:13:57 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Information 3/11/2017 4:03:57 AM Service Control Manager 7036 None The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.
Information 3/11/2017 3:10:46 AM Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep.

All this activity in between -- is that normal behavior? I am inclined to blame NVIDIA's GeForce Experience, which seems intrusive and overbearing with a bunch of services that appear to collect all sorts of info...
Scanned with AdwCleaner and Malwarebytes -- all clean. Any thoughts/suggestions?

Thanks!

PC specs:

OS: Win 7 Home x64 (original OEM by Dell, no reinstallations)
Age: 3-4 years
CPU: Core i5-3450 @ 3.1 GHz
Video card: NVIDIA GeForce GTX 660 by Gigabyte
Motherboard: Dell
Power Supply: Dell, 460W
Manufacturer and Model: Dell XPS 8500

I run NVIDIA GeForce on three of my systems without major issues. I would be inclined to think something else caused your issues. You say that the only change you made was the power configuration change, which I found to not help on my primary system that serves as a bit of a backup server for my other systems. There were no hardware changes that might have caused issues?

  1. I would recommend running a disk check on your Windows drive to start and rule out possible corruption of your Windows file system.
    • Click on the folder icon in your Taskbar
    • Click on This PC from the list on the left.
    • Right click on Local Disk (C:) and choose Properties from the drop down list.
    • Click on the Tools tab.
    • Click on the Check button.
  2. You might also want to Use the System File Checker tool to repair missing or corrupted system files
  3. Finally, Fix Windows errors by using the DISM tool and restart your computer after it finishes.
    • Note: if you have Windows 10 media available, it is safer to restore your system files with:
      Dism /Online /Cleanup-Image /RestoreHealth /Source:wim:D:\sources\install.wim:1 /limitaccess​
      **Your path may be different than the path in red**
      ***Instead of a wim file, you may have a esd file instead, so replace all wim references with esd***
      Dism /Online /Cleanup-Image /RestoreHealth /Source:esd:D:\sources\install.esd:1 /limitaccess​
 
Last edited:
MpFilter and FileInfo would be called if an antivirus program registered with the system wanted to wake up and do a system scan (which would make sense if new files were downloaded). There's not enough here to say what happened, but I *would* recommend following the below article, enabling WinHTTP tracing, and then stopping it after you see this in the logs. The trace(s) should show where the traffic is coming from on your system, and to where it was destined. This might give good clues as to what is actually causing the events. As to the crashing after loading A/V, that sounds like another problem, honestly, and not related (other than it started when this started, more coincidence than anything else).

WinHTTP tracing link:
Capturing WinHTTP Logs (Windows)

If you're using a 3rd party antivirus program, you might want to remove it and be careful until this is resolved.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top