Welcome to Seven Forums.
Please fill in your 'System Specs' in the lower left corner in any of your posts, this will help anyone that is looking at your case. It will also keep us from searching the thread for information.
Disconnect all peripherals that are not absolutely needed, 3 1/2" floppy drive, CD/DVD drive, any hubs, any external device, pretty much everything except what is needed for the computer to run.
This is for testing purposes, they can all be re-connected after the problem has been found.
D/L and run
Western Digital Lifeguard – Quick Test and Extended Test
Be sure to run both tests, the extended test will take a while.
STOP 0x00000024: NTFS_FILE_SYSTEM
Usual causes: Disk corruption, insufficient physical memory, Device
driver, Indexing, Resident antivirus, backup, defrag programs, Disk/Drive failing/failure
Cause:
One possible cause of this bug check is disk corruption. Corruption in the NTFS file system or bad blocks (sectors) on the hard disk can induce this error. Corrupted SCSI and IDE
drivers can also adversely affect the system's ability to read and write to disk, thus causing the error.
Another possible cause is depletion of nonpaged pool memory. If the nonpaged pool memory is completely depleted, this error can stop the system. However, during the indexing process, if the amount of available nonpaged pool memory is very low, another kernel-mode driver requiring nonpaged pool memory can also trigger this error.
Try disabling any virus scanners, backup programs, or disk defragmenter tools that continually monitor the system. You should also run hardware diagnostics supplied by the system manufacturer. For details on these procedures, see the owner's manual for your computer. Run Chkdsk /f /r to detect and resolve any file system structural corruption. You must restart the system before the disk scan begins on a system partition.
Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff8800743c3c8
Arg3: fffff8800743bc30
Arg4: fffff80002aeb486
Debugging Details:
------------------
EXCEPTION_RECORD: fffff8800743c3c8 -- (.exr 0xfffff8800743c3c8)
ExceptionAddress: fffff80002aeb486 (nt!IoSetShareAccessEx+0x0000000000000016)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff8800743bc30 -- (.cxr 0xfffff8800743bc30)
rax=0000000000000000 rbx=0000000000000001 rcx=00000000000e0080
rdx=0000000000000007 rsi=fffffa80092b9368 rdi=fffff88007139400
rip=fffff80002aeb486 rsp=fffff8800743c608 rbp=0000000000000000
r8=fffdfa8008f799d0 r9=fffff8a001635c40 r10=fffff8a000212000
r11=0000000000000007 r12=fffff88007139520 r13=fffff8a001635a80
r14=00000000000e0080 r15=fffff880071394b0
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!IoSetShareAccessEx+0x16:
fffff800`02aeb486 4588504a mov byte ptr [r8+4Ah],r10b ds:002b:fffdfa80`08f79a1a=??
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d010e0
ffffffffffffffff
FOLLOWUP_IP:
Ntfs!NtfsOpenAttribute+1b7
fffff880`010fca07 488b9c2410010000 mov rbx,qword ptr [rsp+110h]
FAULTING_IP:
nt!IoSetShareAccessEx+16
fffff800`02aeb486 4588504a mov byte ptr [r8+4Ah],r10b
BUGCHECK_STR: 0x24
LAST_CONTROL_TRANSFER: from fffff880010fca07 to fffff80002aeb486
STACK_TEXT:
fffff880`0743c608 fffff880`010fca07 : 00000000`00000000 fffff880`07139400 00000000`000001f0 fffff8a0`01635e18 : nt!IoSetShareAccessEx+0x16
fffff880`0743c610 fffff880`010eae45 : fffffa80`09281540 fffffa80`092b9368 fffffa80`07992180 fffff8a0`01635e18 : Ntfs!NtfsOpenAttribute+0x1b7
fffff880`0743c720 fffff880`010e778b : fffff880`071394b0 fffffa80`09281540 fffff8a0`01635e18 fffff8a0`00000024 : Ntfs!NtfsOpenExistingAttr+0x145
fffff880`0743c7e0 fffff880`010d0049 : fffffa80`09281540 fffffa80`092b9010 fffff8a0`01635e18 fffff8a0`00000024 : Ntfs!NtfsOpenAttributeInExistingFile+0x5ab
fffff880`0743c970 fffff880`010f3b04 : fffff880`071394b0 fffffa80`092b9010 fffffa80`09281540 00000000`00000000 : Ntfs!NtfsOpenFile+0x51d
fffff880`0743cb50 fffff880`0105cc0d : fffffa80`09281540 fffffa80`092b9010 fffff880`071394b0 fffffa80`0844ab00 : Ntfs!NtfsCommonCreate+0xc54
fffff880`0743cd30 fffff800`02ac1447 : fffff880`07139420 4a10aeec`ade75957 192f4969`c3b85174 c81f538c`63e4d84a : Ntfs!NtfsCommonCreateCallout+0x1d
fffff880`0743cd60 fffff800`02ac1401 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KySwitchKernelStackCallout+0x27
fffff880`071392f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwitchKernelStackContinue
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: Ntfs!NtfsOpenAttribute+1b7
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc14f
STACK_COMMAND: .cxr 0xfffff8800743bc30 ; kb
FAILURE_BUCKET_ID: X64_0x24_Ntfs!NtfsOpenAttribute+1b7
BUCKET_ID: X64_0x24_Ntfs!NtfsOpenAttribute+1b7
Followup: MachineOwner
--------- After a quick look, all your drivers look ok, might need to come back to this.
This is pretty much the same as the one above.
Usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint with no debugger attached, Hardware incompatibility, Faulty system service, Memory, 3rd party remote control,
This bug check indicates that a system thread generated an exception that the error handler did not catch.
Some basic troubleshooting techniques.
- Make sure you have enough disk space.
- If a driver is identified in the bug check message, disable the driver or check with the manufacturer for driver updates.
- Try changing video adapters.
- Check with your hardware vendor for any BIOS updates.
- Disable BIOS memory options such as caching or shadowing.
Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002a8c7c6, The address that the exception occurred at
Arg3: fffff88005ea15d8, Exception Record Address
Arg4: fffff88005ea0e40, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!KiCommitThreadWait+2b6
fffff800`02a8c7c6 488901 mov qword ptr [rcx],rax
EXCEPTION_RECORD: fffff88005ea15d8 -- (.exr 0xfffff88005ea15d8)
ExceptionAddress: fffff80002a8c7c6 (nt!KiCommitThreadWait+0x00000000000002b6)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff88005ea0e40 -- (.cxr 0xfffff88005ea0e40)
rax=fffff80002c041c8 rbx=fffff80002c041c0 rcx=fffdf80002c041c8
rdx=fffffdfffead8226 rsi=fffffa8008e34980 rdi=0000000000000001
rip=fffff80002a8c7c6 rsp=fffff88005ea1810 rbp=0000000000000000
r8=fffff80002a15000 r9=0000000000007e00 r10=000000000000000f
r11=fffffa80073c9382 r12=0000000000000000 r13=0000000000000000
r14=fffff80002c02080 r15=00000000000000fa
iopl=0 nv up ei pl nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202
nt!KiCommitThreadWait+0x2b6:
fffff800`02a8c7c6 488901 mov qword ptr [rcx],rax ds:002b:fffdf800`02c041c8=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cbd0e0
ffffffffffffffff
FOLLOWUP_IP:
dxgmms1!VidSchiWaitForSchedulerEvents+1bc
fffff880`03dd327c 8bd8 mov ebx,eax
BUGCHECK_STR: 0x7E
LAST_CONTROL_TRANSFER: from fffff80002a88beb to fffff80002a8c7c6
STACK_TEXT:
fffff880`05ea1810 fffff800`02a88beb : fffffa80`08e3f000 fffffa80`08e3f000 00000000`000000fa 00000000`00000000 : nt!KiCommitThreadWait+0x2b6
fffff880`05ea18a0 fffff880`03dd327c : fffffa80`00000002 fffff880`05ea1ba8 00000000`00000001 00000000`00000000 : nt!KeWaitForMultipleObjects+0x271
fffff880`05ea1b50 fffff880`03da62c6 : ffffffff`ff676980 fffffa80`08e21410 00000000`00000000 00000000`00000000 : dxgmms1!VidSchiWaitForSchedulerEvents+0x1bc
fffff880`05ea1bf0 fffff880`03dd2e7a : 00000000`00000000 fffffa80`08ee3a80 00000000`00000080 fffffa80`08e21410 : dxgmms1!VidSchiScheduleCommandToRun+0x1da
fffff880`05ea1d00 fffff800`02d256fa : 00000000`0382ce9b fffffa80`08e348c0 fffffa80`069ab9e0 fffffa80`08e348c0 : dxgmms1!VidSchiWorkerThread+0xba
fffff880`05ea1d40 fffff800`02a63b46 : fffff880`009e7180 fffffa80`08e348c0 fffff880`009f1f40 00010609`00000407 : nt!PspSystemThreadStartup+0x5a
fffff880`05ea1d80 00000000`00000000 : fffff880`05ea2000 fffff880`05e9c000 fffff880`05ea1690 00000000`00000000 : nt!KiStartSystemThread+0x16
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: dxgmms1!VidSchiWaitForSchedulerEvents+1bc
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: dxgmms1
IMAGE_NAME: dxgmms1.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc578
STACK_COMMAND: .cxr 0xfffff88005ea0e40 ; kb
FAILURE_BUCKET_ID: X64_0x7E_dxgmms1!VidSchiWaitForSchedulerEvents+1bc
BUCKET_ID: X64_0x7E_dxgmms1!VidSchiWaitForSchedulerEvents+1bc
Followup: MachineOwner
---------
The driver mentioned, dxgmms1.sys, is a DirectX Graphics MMS driver and only available from a Windows update.
Lets take a look at your RAM.
First thing will be to run memtest86+ for a full 7 passes, this will take several hours.
Best to run overnight while you sleep.
If you get any errors you can stop the test and report here.
For the first test, run with both RAM cards installed.
We can look at the other tests in the tutorial if there are any errors.
Sometimes errors from these tests can be corrected by adjusting the settings.
RAM - Test with Memtest86+
D/L
CPUZ and post a snip of the CPU, Mainboard, Memory, and SPD tabs.
For posting the information , enter 'Snipping tool' in the Start button > Search box, hit enter. Select the area you want to post and save to a convenient place.
How to Post a Screenshot in Seven Forums
Have you been checking your temperatures?
Use
Core Temp , to check the CPU temps when at idle, under load and/or testing.
Let us know the minimum and maximum temps you get.
Go to your BIOS and tell us what the CPU, RAM and the CPU integrated memory controller voltages are.
This is important, I will need this information to help you further.