Windows 7: Windows 7 Random Restart Issue

GalacticaActual · 24 Oct 2009

Ok, some not so good news: after letting the system remain online for about 6 hours and doing some internet browsing, the system hung. When I attempted to reboot it, I received a boot drive failure. I unplugged and plugged the drive back in, and basically, I received a message stating that Windows couldn't start and it wanted me to load repair files from my installation disc.

I think it's safe to say that the disc was probably bad. What was strange was how it could go bad after working in my previous system roughly a month ago when I first got this new system. Also, the drive did pass the diagnostic tests.

I'll see if I can purchase a new drive tomorrow.

GalacticaActual · 01 Nov 2009

Hey guys,

Just as an update, I had the guy the shop put in a new mobo. After getting it in and reloading Windows 7 along with drivers and several apps, I received the same issue. I ran verifier.exe and the machine kept BSOD'ing on some sort of driver file. I was able to use system restore and install the debugging tools and according to the analysis of the dump, it appears to be an Avast system file that was causing the BSOD on boot at least.

Consistently, throughout this ordeal, I have been loading Avast each time, so it's possible that it could be the culprit. I think it's safe to say after getting every part replaced in the machine at some point including a new motherboard set up recently, that it was probably some sort of driver causing my random reboots. I ended up switching over to Norton after doing a system restore to an earlier point.

Anyways, here is the text from the analysis of the dump:

Quote:

MODULE_NAME: aswSP

FAULTING_MODULE: e2805000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4aaf72a1

BUGCHECK_STR: 0xc9_302

DRIVER_VERIFIER_IO_VIOLATION_TYPE: 302

FAULTING_IP:
nt!NtWriteFile+2579
e2a4562d 8945e0 mov dword ptr [ebp-20h],eax

FOLLOWUP_IP:
aswSP+5fba
cc49cfba 8945e4 mov dword ptr [ebp-1Ch],eax

IRP_ADDRESS: d3c27270

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from e2b39f03 to e28e1d10

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
c7a64324 e2b39f03 000000c9 00000302 e2a4562d nt!KeBugCheckEx+0x1e
c7a64344 e2b3c2cd e2a4562d c7a64380 00000001 nt!PoSetHiberRange+0xe278
c7a6435c e2b3c63b 00000302 e2a4562d 00000001 nt!PoSetHiberRange+0x10642
c7a643c8 e2b43849 00000302 e2a4562d 00000001 nt!PoSetHiberRange+0x109b0
c7a643e4 e2b3c076 d3c272e0 ca7a59c0 e2a4562d nt!PoSetHiberRange+0x17bbe
c7a643f8 e2b3a3e1 ca1a5690 d3c27270 ca7a59c0 nt!PoSetHiberRange+0x103eb
c7a6445c e2b39d33 d3cac488 d3c27270 c7a6448c nt!PoSetHiberRange+0xe756
c7a6446c e2b34670 ca0fe068 d3e97a30 ca0fe068 nt!PoSetHiberRange+0xe0a8
c7a6448c e2841473 d3c272e0 d3e97a8c ca0fe068 nt!PoSetHiberRange+0x89e5
c7a644a0 e2a4562d e189c514 c7a64648 00000000 nt!IofCallDriver+0x1b
c7a64578 e2a261d7 ca0fe068 845c0d20 ca7b0948 nt!NtWriteFile+0x2579
c7a645f4 e2a4c24d 00000000 c7a64648 00000040 nt!SeOpenObjectAuditAlarm+0x59a
c7a64650 e2a445ab c7a6483c c25c0d20 e284b600 nt!ObOpenObjectByName+0x159
c7a646cc e2a4feb6 c7a64874 80000000 c7a6483c nt!NtWriteFile+0x14f7
c7a64718 e284842a c7a64874 80000000 c7a6483c nt!NtCreateFile+0x34
c7a6474c e2845ecd badb0d00 c7a647c4 d3006280 nt!ZwYieldExecution+0xb56
c7a647f8 cc49cfba c7a64874 80000000 c7a6483c nt!ZwCreateFile+0x11
c7a64894 cc49dba8 00770000 00000000 c7a64a90 aswSP+0x5fba
c7a648b0 cc49fd4b 01457740 c7a64a90 0bed5b1d aswSP+0x6ba8
c7a648fc e2aa3400 00000000 0000001d c7a6499c aswSP+0x8d4b
c7a64970 e2a43a71 0000001d c4788670 c4708e80 nt!CmUnRegisterCallback+0x6fd
c7a649b8 e2a3ca0e 0000001d cb403828 c7a64a70 nt!NtWriteFile+0x9bd
c7a64b48 e2a261d7 c4616250 c25b3f78 d3d79ac8 nt!SePrivilegeCheck+0x1579
c7a64bc4 e2a4c24d 00000000 c7a64c18 00000040 nt!SeOpenObjectAuditAlarm+0x59a
c7a64c20 e2a439a4 001bfa70 c25b3f78 e2a47701 nt!ObOpenObjectByName+0x159
c7a64d00 e2a4771c 001bfacc 0002001d 001bfa70 nt!NtWriteFile+0x8f0
c7a64d20 e284842a 001bfacc 0002001d 001bfa70 nt!TmCurrentTransaction+0x681
c7a64d34 77cd64f4 badb0d00 001bfa58 00000000 nt!ZwYieldExecution+0xb56
c7a64d38 badb0d00 001bfa58 00000000 00000000 0x77cd64f4
c7a64d3c 001bfa58 00000000 00000000 00000000 0xbadb0d00
c7a64d40 00000000 00000000 00000000 00000000 0x1bfa58

STACK_COMMAND: kb

SYMBOL_STACK_INDEX: 11

SYMBOL_NAME: aswSP+5fba

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: aswSP.SYS

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner

I'm going to monitor the system for several days to see if this random restart issue rears its ugly head again.

alrightgame · 01 Nov 2009

I am book marking this page. I also have this problem, although mine is a bit different.

I have the infamous gigabyte motherboard that doesn't like to wake from sleep (it will continuously cause my dvd roms to activate and won't post until I unplug the machine for 30 seconds physically).

My problem stems from when I am away from my computer. I have turned off sleep on the computer but it has been restarting randomly when I'm not using it.

I have yet to do diagnostics or repair because I had to have windows 7 installed by campus IT (they only sell the upgradeable version which is obnoxious in the amount of bugs it caused, so I have walk my computer to get it installed).

I have yet to find defects in hardware. The drives, memory, board (no blown caps), roms, cpu, gpu all test out fine.

I really don't think this problem is related to hardware problems per say, just windows 7 communication problems with hardware.

Anyone know if there is a way to run a repair of windows without a Windows 7 cd?

usasma · 01 Nov 2009

Although the dump file does seem to point at an Avast file, it's hard to tell without the complete output of the dump file analysis and additional commands that we run.]

Please zip up the contents of the C:\Windows\Minidump directory and upload/attach the .zip file with your next post.

alrightgame - Please start your own topic. That will get your issue the attention that it deserves - and it won't detract from the current user's topic.

GalacticaActual · 07 Nov 2009

Hey guys,

It's been close to a week and I haven't had a single random restart yet. I have a feeling that the cause of my problem was most likely Avast and the driver associated with that application. After removing it completely and switching to Norton, there have been no issues.

Should this reoccur, I will post that full minidump.

Windows 7: Windows 7 Random Restart Issue

Windows 7 Random Restart Issue problems?