Cannot come out of Sleep successfully

[rxb216]

This is my first post on sevenforms. I've searched this site high and low and read many threads on people's sleep issues, however didn't see my exact issue so here goes. If this has been solved/discussed somewhere, please don't flame me, I did try and look.

This is yet again another sleep issue, so sorry to beat this to death.

My system (laptop):

Dell XPS M1710 Laptop
Chipset: Intel 945PM
GeForce Go 7950GTX, using latest 179.67 nVidia drivers
4GB PC25300 5-5-5-15 (Mushkin)
640GB Seagate SATA 3Gb/s

OS: Win7 Ultimate Retail. Installed on bare drive (not an upgrade).

Issue: When waking up from Sleep, the operating system (OS) reports that the computer was not shut down properly and thus starts to boot the OS again. (Sleep session is lost). See attachment

This started to make me think that there was some kind of power issue that caused the sleep session to be lost. However this issue happens even when laptop is plugged in and is trying to wake up.

There is NO BSOD and I am unsure how to start to debug this issue.

Notes:
1. Hybrid sleep is OFF
2. Hibernate works if I use it
3. Hybrid sleep works fine but it reverts to un-hibernating, not un-sleeping
4. Issue did NOT happen with Vista (sleep was working fine)
5. I HAVE installed the fix KB977178, but that has NOT made a difference.

 

[rxb216]

bump

 

[rxb216]

ok, got the analysis from the dump (below), somehow this is related to norton (symevent.sys)?

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82e248aa, The address that the exception occurred at
Arg3: e242a5ec, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
　
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!MmExtendSection+1c
82e248aa 8b471c mov eax,dword ptr [edi+1Ch]
TRAP_FRAME: e242a5ec -- (.trap 0xffffffffe242a5ec)
ErrCode = 00000000
eax=afa110e8 ebx=c77b3b20 ecx=e242a7c0 edx=8546a318 esi=e242a7b0 edi=00000000
eip=82e248aa esp=e242a660 ebp=e242a72c iopl=0 nv up ei ng nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010296
nt!MmExtendSection+0x1c:
82e248aa 8b471c mov eax,dword ptr [edi+1Ch] ds:0023:0000001c=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 82e80624 to 82e248aa
STACK_TEXT:
e242a72c 82e80624 afa110e8 e242a7c0 00000000 nt!MmExtendSection+0x1c
e242a850 82e9dfe3 e242a8a4 0000000d e242a8f8 nt!MmCreateSection+0xbff
e242a8c4 82ec7957 e242a954 0000000d e242a8f8 nt!NtCreateSection+0x16e
e242a940 82f16ada e242a9c8 e16bb230 00000000 nt!PfpFileBuildReadSupport+0xe4
e242a998 82ec7d62 e242a9c8 00000000 e242ab28 nt!PfpPrefetchFiles+0x19c
e242aa44 82ec8d38 e16b7000 ce8d7239 e242ab3c nt!PfpPrefetchRequestPerform+0x34c
e242aa98 82e2e24c e242ab28 82ca2f01 ce8d73fd nt!PfpPrefetchRequest+0x16e
e242ab5c 82e2fa2e 0131f674 00000014 82ca2f01 nt!PfSetSuperfetchInformation+0x182
e242ac94 9295d45f 0000004f 00000000 00000014 nt!NtSetSystemInformation+0xb00
WARNING: Stack unwind information not available. Following frames may be wrong.
e242ad20 82c8079a 0000004f 0131f674 00000014 SYMEVENT+0x1445f
e242ad20 03c53ea0 0000004f 0131f674 00000014 nt!KiFastCallEntry+0x12a
ffffffff 00000000 00000000 00000000 00000000 0x3c53ea0
　
STACK_COMMAND: kb
FOLLOWUP_IP:
SYMEVENT+1445f
9295d45f ?? ???
SYMBOL_STACK_INDEX: 9
SYMBOL_NAME: SYMEVENT+1445f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: SYMEVENT
IMAGE_NAME: SYMEVENT.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4a428942
FAILURE_BUCKET_ID: 0x8E_SYMEVENT+1445f
BUCKET_ID: 0x8E_SYMEVENT+1445f
Followup: MachineOwner
---------
0: kd> lmvm SYMEVENT
start end module name
92949000 9296e000 SYMEVENT T (no symbols)
Loaded symbol image file: SYMEVENT.SYS
Image path: SYMEVENT.SYS
Image name: SYMEVENT.SYS
Timestamp: Wed Jun 24 13:14:58 2009 (4A428942)
CheckSum: 00024D55
ImageSize: 00025000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
0: kd> .trap 0xffffffffe242a5ec
ErrCode = 00000000
eax=afa110e8 ebx=c77b3b20 ecx=e242a7c0 edx=8546a318 esi=e242a7b0 edi=00000000
eip=82e248aa esp=e242a660 ebp=e242a72c iopl=0 nv up ei ng nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010296
nt!MmExtendSection+0x1c:
82e248aa 8b471c mov eax,dword ptr [edi+1Ch] ds:0023:0000001c=????????
0: kd> .trap 0xffffffffe242a5ec
ErrCode = 00000000
eax=afa110e8 ebx=c77b3b20 ecx=e242a7c0 edx=8546a318 esi=e242a7b0 edi=00000000
eip=82e248aa esp=e242a660 ebp=e242a72c iopl=0 nv up ei ng nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010296
nt!MmExtendSection+0x1c:
82e248aa 8b471c mov eax,dword ptr [edi+1Ch] ds:0023:0000001c=????????