Random Restarts (Win10)

1

1002

Active member
Joined
Jul 4, 2020
Posts
28
I have 2 HDDs with win7(Disk 1) and win10(Disk 0). My windows10 crashed and was not able to boot. Then I logged in trough win7 and the next day it was not able to boot too. I tried multiple times to fix the windows startup recovery and DOS options, but no success. For win 7 diagnostics found wdfldr.sys corrupted, sfc operation not able to fix it.
For win 10 - tried to reset PC, but was not able to start and didn't show anything at diagnostic.
No lost files but still not able to boot.

I reinstalled win7 on the disk 0, where was win 10,
I started reinstalling the programs, I noticed some of the exe-files become size 0b. I went through the volumes and found randomly damaged files. Affected files: exe, txt, pdf, avi, mkv, mp3. Not affected: jpg, mp4. From volume D 30Gb out of 120GB was lost, E-100 GB out of 400.

I am with Bitdefender. They sent a program to scan the system and sent it back. The log file was generated from newly installed windows. The analysis showed no virus or trojan. The other disk is not bootable and no option to run the test.

Questions:
I. What could be the reason for 2 disks to become unbootable at the same time?
1. Virus - No
I scanned with bootable disks of Bitdefender and Kaspersky and they didn't found a virus.
2. Hardware - No
From Bitdefender support suspect my HDDs (12 years old). I scanned them both with their manufacturing software, long test- no issues found.
3. Ransomware - No
0b files are not encrypted files.
4. syswin.exe
I didn't find any traces in Windows 7 (disk 1)

II. Can I still fix Win7 from bootable USB? I read, there is an option to download from MS win7 repair installation disk. The problem is, download is allowed for people who have retail version SN only.

III. Can I recover the disk 0, with the 0b files? I tried "the easy fix" for exe-files but it didn't work.
 
Hi 1002,

Who is the vendor of the HDDs?

If syswin.exe is the file described in Worm.Win32.PYFILEDEL.AA - Threat Encyclopedia - Trend Micro USA then I would suggest removing it immediately.

What do you mean with crashed? Did it become literally unbootable like a message from the BIOS or UEFI showed something like 'no disk found' or were error codes showing?

When did you notice these executables became zero-sized files?

What is volume D?

What is this 'easy fix' for executables?

Please answer these questions
· x86 (32-bit) or x64 (64-bit)?
· What was the originally installed OS on the system?
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)?
· Age of system (hardware)
· Age of OS installation - have you re-installed the OS?

· CPU
· Video Card
· MotherBoard - (if NOT a laptop)
· Power Supply - brand & wattage (if laptop, skip this one)

· System Manufacturer
· Exact model number (if laptop, check label on the bottom)

· Laptop or Desktop?


We cannot answer your second and third questions until we have more information on the status of your computer.
 
Hi axe0,

Who is the vendor of the HDDs?
disk 0 with the files 0b WD 750GB 7K 32M SATA 3.0Gb/s 3.5" WD7501AALS
disk 1 Seagate 750GB, SATA-II 7200RPM 16MB 3.5 - ST3750640AS

What do you mean with crashed? Did it become literally unbootable like a message from the BIOS or UEFI showed something like 'no disk found' or were error codes showing?

WD was with windows 10. When I logged in I removed NAV, because it was expired and asked for a restart. After it saw the BSOD. I was not able to repair it that day and logged back in Seagate. The next day I was not able to log into any of them.

IMG_20200626_win10 wont st.jpg
When did you notice these executables became zero-sized files? After being unable to repair windows, I installed win 7 on C: and noticed files 0b on D: and E: (WD)

What is this 'easy fix' for executables?
I tried 5 out of 6 ways but none of them worked for me (6 Ways to Restore 0 Byte Files in Windows 10/8/7 – EaseUS )
, C:\Windows\system32>chkdsk /f D: see below
The type of the file system is NTFS.

Chkdsk cannot run because the volume is in use by another
process. Chkdsk may run if this volume is dismounted first.
ALL OPENED HANDLES TO THIS VOLUME WOULD THEN BE INVALID.
Would you like to force a dismount on this volume? (Y/N) y
Volume dismounted. All opened handles to this volume are now invalid.
Volume label is New D.

CHKDSK is verifying files (stage 1 of 3)...
207104 file records processed.
File verification completed.
102 large file records processed.
0 bad file records processed.
0 EA records processed.
0 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 3)...
219866 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 3)...
Deleting an index entry with Id 807 from index $SII of file 9.
Deleting an index entry with Id 808 from index $SII of file 9.
Deleting an index entry with Id 809 from index $SII of file 9.
Deleting an index entry with Id 810 from index $SII of file 9.
Deleting an index entry with Id 811 from index $SII of file 9.
Deleting an index entry with Id 812 from index $SII of file 9.
Deleting an index entry with Id 813 from index $SII of file 9.
Deleting an index entry with Id 814 from index $SII of file 9.
Deleting an index entry with Id 808 from index $SDH of file 9.
Deleting an index entry with Id 809 from index $SDH of file 9.
Deleting an index entry with Id 814 from index $SDH of file 9.
Deleting an index entry with Id 805 from index $SDH of file 9.
Deleting an index entry with Id 812 from index $SDH of file 9.
Deleting an index entry with Id 811 from index $SDH of file 9.
Deleting an index entry with Id 810 from index $SDH of file 9.
Deleting an index entry with Id 813 from index $SDH of file 9.
Deleting an index entry with Id 807 from index $SDH of file 9.
Replacing invalid security id with default security id for file 1318.
Replacing invalid security id with default security id for file 8987.
68 percent complete. (9769 of 207104 file SDs/SIDs processed)
Replacing invalid security id with default security id for file 10020.
Replacing invalid security id with default security id for file 10287.
69 percent complete. (21311 of 207104 file SDs/SIDs processed)
Replacing invalid security id with default security id for file 21516.
Replacing invalid security id with default security id for file 26931.
Replacing invalid security id with default security id for file 27002.
Replacing invalid security id with default security id for file 27007.
70 percent complete. (32854 of 207104 file SDs/SIDs processed)
Replacing invalid security id with default security id for file 41280.
Replacing invalid security id with default security id for file 41292.
Replacing invalid security id with default security id for file 41308.
207104 file SDs/SIDs processed.
Cleaning up 84 unused index entries from index $SII of file 9.
Cleaning up 84 unused index entries from index $SDH of file 9.
Cleaning up 84 unused security descriptors.
Security descriptor verification completed.
6381 data files processed.
CHKDSK is verifying Usn Journal...
Repairing Usn Journal $J data stream.
Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

129576243 KB total disk space.
83657512 KB in 56480 files.
41424 KB in 6383 indexes.
0 KB in bad sectors.
277231 KB in use by the system.
65536 KB occupied by the log file.
45600076 KB available on disk.

4096 bytes in each allocation unit.
32394060 total allocation units on disk.
11400019 allocation units available on disk.


Please answer these questions
· x86 (32-bit) or x64 (64-bit)? 64-bit win 10
· What was the originally installed OS on the system? 6m ago
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? retail
· Age of system (hardware) 12 years
· Age of OS installation - have you re-installed the OS? fist time installation

· CPU AMD A10-5800K
· Video Card Radeon HD 5700
· MotherBoard - (if NOT a laptop) MSI A88X-G45
· Power Supply - brand & wattage (if laptop, skip this one) extreme power 550w

· System Manufacturer
· Exact model number (if laptop, check label on the bottom)

· Laptop or Desktop? Desktop assembled

disk 1 Seagate 750GB, SATA-II 7200RPM 16MB 3.5 - ST3750640AS
with win 7, second installation 5 years ago
Because this was my active drive and I made multiple tries to recover windows. There are no 0b files on it and it was connected as a logical drive.
I didn't install new software or hardware recently.

IMG_20200627_bad sys.jpg
IMG_20200627_scannow.jpg

IMG_20200626_chkdsk.jpg
 
I have a few suspects. I know you say some of them aren't the cause because of tests, tests are not 100% conclusive. Despite their thoroughness, it's possible that they missed something.
- RAM
- HDD
- Installation media used

I understand you reinstalled Windows, but also are not able to get a new repair disk. The installation media that you used on disk 0, how often have you used it and how old is it?
 
I have a few suspects. I know you say some of them aren't the cause because of tests, tests are not 100% conclusive. Despite their thoroughness, it's possible that they missed something.
- RAM
Run windows memory test from DOS
IMG_20200601_memory.jpg
- HDD
I used manufacturer's software and I believe it is the best.
Seagate_001_.jpg
WD_001_.jpg
WD_002_.jpg

- Installation media used

I understand you reinstalled Windows, but also are not able to get a new repair disk. The installation media that you used on disk 0, how often have you used it and how old is it? I don't have repair disk. The installation disk is 2 years old.
 

Attachments

  • Seagate_001_.jpg
    Seagate_001_.jpg
    40.5 KB · Views: 0
axe0,
Seagate and WD. I tested WD with both software because it has data loss.
I tested the RAM overnight, with no issues. The program run 10 hs (8GB) and was on pass 5.
For some reason, the USB stick didn't want to boot, until TURN OFF the PC and removed the power supply cabal for 10 sec.

The new win 10 with new Seagate restarted 2x. No BSOD, no dump file. Checked Devise Manager for driver issues.

mem test IMG_20200716_073118.jpg
 
I meant on top of WD, do you have 2 Seagate drives? The Seatools screenshots show 2 different Seagate drives.

The memtest86+ test is a beta version that hasn't been thoroughly tested yet.
I would recommend to use version 5.01 and run it for at least 8 passes.
 
Hi 1002,

It's been a while since our last talk.

Please update me on the status of your computer.
 
It happened randomly - on previous windows 7 ones a month, on windows 10 – several times. I am not playing games. It happens when browsing or PC is at an idle – black screen and restart. No dump files.

Tried:
Tested RAM – no issue.
Unchecked the PC to restart in order to crash and to generate a crash report – not working.
Disabled hardware acceleration on browsers. – no change.
Reinstalled the video card driver with a special tool and installed it using another tool - no change.
No virus.

Hardware:
Motherboard A88X-G45
CPU: AMD A10-5800K
Video card AMD Radeon HD 5700
HDD: Seagate Barracuda 1TB - new
 
I don't have another supply. This one is Corsair vx550w. I calculated the wattage of the PC and it is about 380W - far from the limit on the PSU.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top