Solved BSOD on shutdown, After 20-30 min delay. Error 0x0000009F

[MskSWChk1]

Having problem where shutdown ends with the Windows shutting Down screen appearing for 20-30 minutes, then a BSOD with STOP 0x0000009F, in ntoskrnl.exe.

I was living with this for a while, but recently noticed cpu is running near 100% most of the time with SYSTEM at like 45% and SVCHOST.EXE about the same. Any extra activity like auto updates by any module (win update or avast update) brings system to a standstill... Tried stopping all update behavior, but then noticed the constantly high CPU.

Wondering if there's some driver problem causing both problems. Ran updated Spybot, and MBAM scans in addition to my Avast anti-virus, so think I don't have a virus.

Lenovo W510, Win 7 Pro x64, SP1

Uploaded the info from SF Diagnostic tool.

Appreciate help with what to look at! Thanks so much for anyone's help!
- Marcus

 

[koolkat77]

Welcome to SevenForums.

Please uninstall the Avast! internet security while troubleshooting. Replace with Microsoft security essentials. (To test)

• avast! Uninstall Utility | Download aswClear for avast! Removal

[FONT="Lucida Console"]0: kd> !irp fffffa800df21990
Irp is active with 4 stacks 2 is current (= 0xfffffa800df21aa8)
 No Mdl: No System Buffer: Thread 00000000:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    

			Args: 00000000 00000000 00000000 00000000
>[ 16, 3]   0  0 fffffa8006d0f050 00000000 00000000-00000000    
	      Unable to load image \SystemRoot\system32\DRIVERS\Netwsw00.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Netwsw00.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwsw00.sys
 \Driver\NETwNs64
			Args: 00015500 00000000 00000005 00000003
 [ 16, 3]   0 e1 fffffa800a859730 00000000 fffff8000451a200-fffffa800c296120 Success Error Cancel pending
	       \Driver\vwifibus	nt!PopSystemIrpCompletion
			Args: 00015500 00000000 00000005 00000003
 [  0, 0]   0  0 00000000 00000000 00000000-fffffa800c296120    

			Args: 00000000 00000000 00000000 00000000
0: kd> lmvm Netwsw00
start             end                 module name
fffff880`05a92000 fffff880`065db000   Netwsw00 T (no symbols)           
    Loaded symbol image file: Netwsw00.sys
    Image path: \SystemRoot\system32\DRIVERS\Netwsw00.sys
    Image name: Netwsw00.sys
    Timestamp:        Sun Jun 03 21:33:40 2012 (4FCB83D4)
    CheckSum:         00B012F3
    ImageSize:        00B49000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4[/FONT]

Check for an update on that driver from here or go to this link: Intel® Driver Update Utility and check the system for latest updates. Download and install all it finds.

MSE is recommended from a strict BSOD perspective, compatibility & stability compared to other antiviruses/internet security software:-

1. Microsoft Security Essentials - Free Antivirus for Windows
2. http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html
​

:warn: Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with MSE.
Report back if the stability returns.

Run the System File Checker. It allows the user to scan for and restore corruptions in Windows system files.

• 
  1. Click on the rb:
  2. Type CMD on Search
  3. Left click and Run as Administrator
  4. Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

---

Then test RAM. Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

• http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

The goal is to test all the RAM sticks and all the motherboard slots.

Check your motherboard manual to ensure the RAM sticks are in the recommended motherboard slots. Some motherboards have very specific slots required for the number of RAM sticks installed.

If you get errors, stop the test and continue with the next step.

1. Remove all but one stick of RAM from your computer (this will be RAM stick #1), and run Memtest86 again, for 7 passes.

*Be sure to note the RAM stick, use a piece of tape with a number, and note the motherboard slot.
​

If this stick passes the test then go to step #3.

2. If RAM stick #1 has errors, repeat the test with RAM stick #2 in the same motherboard slot.

*If RAM stick #2 passes, this indicates that RAM stick #1 may be bad. If you want to be absolutely sure, re-test RAM stick #1 in another known good slot.
​

*If RAM stick #2 has errors, this indicates another possible bad RAM stick, a possible motherboard slot failure or inadequate settings.
​

3. Test the next stick of RAM (stick #2) in the next motherboard slot.

*If this RAM stick has errors repeat step #2 using a known good stick if possible, or another stick.
​

*If this RAM stick has no errors and both sticks failed in slot#1, test RAM stick #1 in this slot.
​

4. If you find a stick that passes the test, test it in all the other motherboard slots.

If Part 2 testing shows errors, and all tests in Part 3 show errors, you will need to test the RAM sticks in another computer and/or test other RAM in your computer to identify the problem.

In this way, you can identify whether it is a bad stick of RAM, a bad motherboard, or incompatibility between the sticks.

:info: Errors are sometimes found after 8 passes.
:tip: Do this test overnight, before going to bed.

 

[MskSWChk1]

Solved!! - Uninstall Avast Did The Trick

Dude, you are one koolkat77 !!

Uninstalling Avast Internet Security solved both problems, at least for the time being. Idle process is back to highest CPU percent process and I've got a responsive little laptop back.

Now it Hibernates/Restores and Shutdown/Startup quickly as before with no BSOD.

Thanks so much! I've been banging my poor sorry head against the wall for months because of the slowdowns and reboot delays. And the worst thing I've had to endure is having my 14 year old know-it-all

nephew trashmouthing my "more powerful" laptop.

Dude, is there a Donate button???
Thanks for your time and great help...

 

[koolkat77]

Thanks for posting back, I'm glad that your system is more responsive . You can put your head on a pillow now.

Spybot can slow down the system, I'd suggest you to uninstall it:

• How to uninstall | Spybot ©

IMO, MSE & MBAM are good enough. But you can run the following occasionally and see if they catch anything:

-Kaspersky TDSSKiller

• Anti-rootkit utility TDSSKiller

-ESET online scanner

• Free Online Virus Scanner | ESET

In addition, you may run the malicious software removal tool and WDO:

• http://www.sevenforums.com/tutorials/24076-malicious-software-removal-tool.html
• http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

Reducing items at startup is also a good idea:

• http://www.sevenforums.com/tutorials/1401-startup-programs-change.html
• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

....
If all these does not give you the results you want, you can always do a http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html

Postback if there are any further issues, Good luck!