Constant BSOD, ntoskrnl.exe and ntfs.sys apparent culprit

Page 2 - Seeking answers? Join the Tom's Hardware community: where nearly two million members share solutions and discuss the latest tech.

Llorty

Reputable
Jan 29, 2015
27
0
4,530
Hi there

I have been getting constant BSOD's for the last month, I have my computer under warranty so I sent it in to get checked and there is no hardware problems. I re installed windows the problem persisted after my system updated. My Pc works fine in safe mode so I think its a driver/s that are causing the problem. I don't know what services or software are causing this problem so It would be helpful if someone could help me identify them or help me fix this problem.

Cheers

Here are two dump files from Whocrashed

On Wed 1/28/2015 10:01:46 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\012915-24164-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x76E80)
Bugcheck code: 0x50 (0xFFFFFA80C4B27A20, 0x0, 0xFFFFF80002CAEDE8, 0x5)
Error: PAGE_FAULT_IN_NONPAGED_AREA
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that invalid system memory has been referenced.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Wed 1/28/2015 8:46:53 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\012815-22011-01.dmp
This was probably caused by the following module: ntfs.sys (Ntfs+0x4211)
Bugcheck code: 0x24 (0x1904FB, 0xFFFFF880064AD5E8, 0xFFFFF880064ACE40, 0xFFFFF880012BBF92)
Error: NTFS_FILE_SYSTEM
file path: C:\Windows\system32\drivers\ntfs.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT File System Driver
Bug check description: This indicates a problem occurred in the NTFS file system.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.
 
One beep means that the system is okay, I am taking a look at updating my bios as its seems to be the 2013 version, I am having trouble starting @bios though, one of the programs for updating
 
One beep means that the system is okay, I am taking a look at updating my bios as its seems to be the 2013 version, I am having trouble starting @bios though, one of the programs for updating
 


I just re-installed windows to try and fix the error but it keeps on happening, I read some where that means that it could be an automatically updated software, so I guess a fix would be to undo all my updates?

 
My thinking is that it was working when it was a clean slate, so then an update would be causing the error.

I am disabling auto updates and un-installing all the updates, If this doesn't work then I will do what you say and bring it back to the shop after I hear what johnbl can say after looking at the

Thank you for your help
 
looks like the memory dump is not on a public cloud server. your link wants me to sign in to
The University of Auckland. maybe try microsoft one drive ? or skydrive whatever it is called now.

the verifiy flags should make the system bugcheck much faster. When a driver writes outside the bounds of it allocated memory, the system will check and force a bugchec and name the driver. otherwise, it just corrupts another drivers data then much later the second driver crashes and it is hard to figure out why.



 
run cmd.exe as an admin
then run the command
sfc.exe /scannow
and confirm your core windows files are not corrupted.


=-===
looking at the bugcheck info
you might remove SCDEmu.sys dated oct 8 2014
PowerISO Virtual Drive driver (known for various bugcheck problems)
------
none of the verifier.exe debugging flags are set. you need to set the flags with the verifier.exe tool
to enable easy debugging and device driver checking by windows.

2: kd> !verifier

Verify Flags Level 0x00000000

STANDARD FLAGS:
[ ] (0x00000000) Automatic Checks
[ ] (0x00000001) Special pool
[ ] (0x00000002) Force IRQL checking
[ ] (0x00000008) Pool tracking
[ ] (0x00000010) I/O verification
[ ] (0x00000020) Deadlock detection
[ ] (0x00000080) DMA checking
[ ] (0x00000100) Security checks
[ ] (0x00000800) Miscellaneous checks

ADDITIONAL FLAGS:
[ ] (0x00000004) Randomized low resources simulation
[ ] (0x00000200) Force pending I/O requests
[ ] (0x00000400) IRP logging

[X] Indicates flag is enabled


Summary of All Verifier Statistics

RaiseIrqls 0x0
AcquireSpinLocks 0x0
Synch Executions 0x0
Trims 0x0

Pool Allocations Attempted 0x0
Pool Allocations Succeeded 0x0
Pool Allocations Succeeded SpecialPool 0x0
Pool Allocations With NO TAG 0x0
Pool Allocations Failed 0x0

Current paged pool allocations 0x0 for 00000000 bytes
Peak paged pool allocations 0x0 for 00000000 bytes
Current nonpaged pool allocations 0x0 for 00000000 bytes
Peak nonpaged pool allocations 0x0 for 00000000 bytes



==========
your system is attempting to install a patch to
.NET Framework 4.5 Patch Details
http://www.manageengine.com/products/desktop-central/patch-management/Dot-NET-Framework-4.5/NDP45-KB2898869-x64.html

the patch came out feb 11 2014

you might want to find out why it is having problems. maybe remove/ update the .net framework.
I would also stop uTorrent.exe that is currently running on your machine.
maybe go into safe mode and see if you can fix your system.

maybe download and install the patch again from http://www.microsoft.com/en-us/download/details.aspx?id=41903
you might have to start task manager and kill the current patch install or boot in safe mode.
it looks like you have a lot of files attempting to make a update to the framework at the same time.
(mscorsvw.exe , msiexec.exe, setup.exe, ndp45-kb289886.exe, ngen.exe, trusted installer)









 


I spend a while working on this

I deleted SCDEmu.sys, utorrent and Poweriso

I had trouble updating/reinstalling the frame work due to the computer not letting me update/unistall in any mode, I don't know what process is the one to stop when in safe mode.

I am currently trying to set up verifier.exe flags but its hard due to bsod and other crashes.

I will send the report when my pc crashes and stays stable enough to upload on google drive

Update: I am uploading a new /dmp now.

I don't want to rock the boat so I will wait until the upload is finished before I try to update the net thing and run sfc.exe /scannow
 


I uninstalled them and it looks like I got everything.

I am fixing the error I with the core checker by doing this

"Windows Resource Protection could not perform the requested operation.

To resolve this problem, perform the System File Checker scan in safe mode, and make sure that the PendingDeletes and PendingRenames folders exist under %WinDir%\WinSxS\Temp."

Update: Turning of windows firewall let me do the system file checker, will turn back on after it gets fixed
 



I just use it as a gaming computer and to record videos for youtube, so I have all the programs you would expect with that application in mind, I use obs which uses up a lot of cpu but it crashes when thats not running.

I took it into the shop yesterday for the second time to get them to have another look at it so hopefully they can fix it.

Thank you so much for your time and effort, I really appreciate it
 


You still can, I just got it back from the shop, All they did pretty much was re-install windows and give me a new security system.

As per usual I re-installed the programs I need to use for uni and gaming and it started crashing again.

I think the culprit is a drivers cd that I installed. I uninstalled everything that came with it and am waiting for for my pc to crash again... Fingers crossed (for it to not crash)

Update: It crashed again

Its not as frequent as the other times but it still crashes when I am trying to record

My dad is going to try and get my pc replaced from pb tech