Solved Repeated BSODs from ntfs.sys, ntoskrnl.exe, and fltmgr.sys

tazmanaic · Dec 3, 2012

I've had repeated BSODs for about a month. It stopped for about 3 days, but then started up again last night. They happen seemingly at random. It will crash when I'm not there, when I'm playing games (like League of Legends and DOSBox), or when I'm watching YouTube videos. It also has crashed when a shutdown order was given, also at the end or during of my AVG Anti-Virus scans.

As far as trying to keep windows updated, that is hit and miss. I cannot install SP1, and random updates will fail their installation.

System Specs
Operating System: Windows 7 Professional 64bit
Motherboard: ASRock K10N78D
Processor: AMD Athlon 7850
Memory: 4.00 GB Dual-Channel DDR2 @ 399MHz (5-5-5-18)
Graphics Card: 1023MB GeForce GTX 550 Ti (EVGA)
HDD: ST500DM002-1BD142 ATA Device

EDIT: I re-installed on a new hard-drive on or around October 12, 2012.

Attached are the dump records from the diagnostic tool provided by your website.

Solved Edit: Upgraded the MoBo, RAM, and CPU. Re-installed windows 7 Professional 64bit. 0 BSODs, no windows update errors, no issues at all.

x BlueRobot · Dec 3, 2012

Code:

[COLOR="Red"]BugCheck 24[/COLOR], {1904fb, fffff88002fbd818, fffff88002fbd080, fffff880010b444e}

Probably caused by : [COLOR="Red"]Ntfs.sys[/COLOR] ( Ntfs!NtfsTeardownStructures+18e )

Code:

Usual causes:  Disk corruption, insufficient physical memory, Device driver, Indexing, Resident antivirus, backup, defrag programs, Disk/Drive failing/failure

Follow these hard-drive diagnostic procedures:

Hard Drive Diagnostic Procedure

Additional hard-drive tests which can be used:

Post a screenshot of the Crystal Disk Info summary:

http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

Could you upload a .NFO file:

Start

rb: > Type: msinfo32 > File, Save

tazmanaic · Dec 3, 2012

Here are the screenshot and .nfo you requested. Once I post this, I'm going to run the seatools to check my hard-drive.

Sorry for my slow response, had to head off to work.

View attachment 244109

View attachment 244110

EDIT: Finished scanning with the seatool program. Found nothing wrong with the HD.

x BlueRobot · Dec 4, 2012

Uninstall AVG:

Code:

Start Menu\Programs\AVG

The versions of AVG after 2008, are particularly well-known to cause crashes and BSODs with Windows 7. You can replace the program with much more stable and lightweight on-demand scanners and real-time protection programs such as:

I understand you have Malwarebytes installed, which is good, perform full scans with the two listed programs and Malwarebytes.

Scan for any corrupted or missing Windows files with System File Checker:

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Check for any file system corruption and errors with:

http://www.sevenforums.com/tutorials/433-disk-check.html

tazmanaic · Dec 4, 2012

Just got through uninstalling AVG and installing Microsoft Security Essentials. While it was updating I got an other BSOD. This is what WhoCrashed says.

Code:

This was probably caused by the following module: ntoskrnl.exe (nt+0x705C0) 
Bugcheck code: 0x1A (0x5003, 0xFFFFF70001080000, 0xABF0, 0xABEE000157E4)
Error: MEMORY_MANAGEMENT
file path: C:\Windows\system32\ntoskrnl.exe

EDIT: I ran sfc /scannow. It got to 55% but came back with this.

Code:

Windows Resource Protection could not perform the requested operation

The TDSSKiller came back clean.

x BlueRobot · Dec 4, 2012

Upload the .dmp file please, and what were the results of the Malwarebytes and MSE scans?

tazmanaic · Dec 4, 2012

View attachment 244271

I don't have the results from MalwareBytes because my computer has bsod on me three times while scanning. It has done it twice while I was present and once while I was at work. It also blue-screened around 4 times while I was gone at work while it was idle. I'm going to try and run MSE and hope that doesn't get interrupted by a blue-screen too.

Fun fact, Windows 7 says that this has happened 75 times since I re-installed.

EDIT: I managed to get quick-scans from both malware and mse. Both came back negative for problems. Both, however, are interrupted by BSODs before I can do a full scan.

EDIT2: I was trying to use the diagnostics tool to prepare another upload, but it BSOD on me even while doing that. Ran CCleaner and ran its registry cleaner. He're is another .zip
View attachment 244283
Included in the zip is a sfcdetails.txt.

EDIT3: I was running a disk check before I went to bed. Ended up falling asleep while it was checking. My computer had bluescreened 6 times while I was asleep. The evening prior to this, it behaved itself after cleaning the registry.
View attachment 244374
zip containing last nights BSOD errors.
I can manage to get quick-scans from MSE and MalwareBytes. They both come back clean. Whenever I try to do a full scan with either, however, it BSODs.

x BlueRobot · Dec 5, 2012

Code:

[COLOR="Red"]BugCheck 24[/COLOR], {1904fb, fffff88002fb6728, fffff88002fb5f90, fffff80002eac500}

Probably caused by : ntkrnlmp.exe ( nt!FsRtlUninitializeOplock+44 )

Code:

Usual causes:  Disk corruption, insufficient physical memory, Device driver, Indexing, Resident antivirus, backup, defrag programs, Disk/Drive failing/failure

Call Stack:

Code:

nt!KeBugCheckEx
fffff880`02fb5750 fffff880`013374b4 : fffff880`01295410 fffff880`02fb6be0 fffff880`02fb6be0 00000000`00000003 : [COLOR="Red"]Ntfs! ?? ::FNODOBFM::`string'+0x29c9[/COLOR]
fffff880`02fb5790 fffff800`02ef159c : 00000014`00000000 00000000`00000801 00000000`000007ff 00000000`00000000 : [COLOR="red"]Ntfs! ?? ::NNGAKEGL::`string'+0x7d6d[/COLOR]
fffff880`02fb57e0 fffff800`02ee8cad : fffff880`01295404 fffff880`02fb6be0 00000000`00000000 fffff880`01244000 : nt!_C_specific_handler+0x8c
fffff880`02fb5850 fffff800`02ef0310 : fffff880`01295404 fffff880`02fb58c8 fffff880`02fb6728 fffff880`01244000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`02fb5880 fffff800`02efd36f : fffff880`02fb6728 fffff880`02fb5f90 fffff880`00000000 00000000`00000705 : nt!RtlDispatchException+0x410
fffff880`02fb5f60 fffff800`02ec2c02 : fffff880`02fb6728 fffff880`02fb6a28 fffff880`02fb67d0 00000000`00000706 : nt!KiDispatchException+0x16f
fffff880`02fb65f0 fffff800`02ec150a : 00000000`000007ff 00000000`000000c0 fffff8a0`02e12838 fffff880`01105373 : nt!KiExceptionDispatch+0xc2
fffff880`02fb67d0 fffff800`02eac500 : fffff8a0`0b616580 00000000`00000000 fffffa80`6666744e fffffa80`000003ab : nt!KiGeneralProtectionFault+0x10a (TrapFrame @ fffff880`02fb67d0)
fffff880`02fb6960 fffff880`012d6c35 : ff00f8a0`085db640 fffff880`02fb6a28 00000000`00000706 00000000`00000705 : nt!FsRtlUninitializeOplock+0x44
fffff880`02fb69a0 fffff880`012d6999 : fffff800`01010000 00000000`00000000 fffff800`03067500 00000000`00000001 : [COLOR="red"]Ntfs!NtfsDeleteScb+0xad[/COLOR]
fffff880`02fb69e0 fffff880`0124caa0 : fffff8a0`0e971040 fffff8a0`0e971140 fffff800`03067500 fffff880`02fb6b52 :[COLOR="Red"] Ntfs![/COLOR][COLOR="red"]NtfsRemoveScb+0x61[/COLOR]
fffff880`02fb6a20 fffff880`012d439c : fffff8a0`0e971010 fffff800`030675a0 fffff880`02fb6b52 fffffa80`074e8010 : [COLOR="red"]Ntfs![/COLOR][COLOR="red"]NtfsPrepareFcbForRemoval+0x50[/COLOR]
fffff880`02fb6a50 fffff880`01255972 : fffffa80`074e8010 fffffa80`074e8010 fffff8a0`0e971010 fffff880`02fb6c00 :[COLOR="red"] Ntfs![/COLOR][COLOR="red"]NtfsTeardownStructures+0xdc[/COLOR]
fffff880`02fb6ad0 fffff880`012eb8e3 : fffffa80`04909180 fffff800`030675a0 fffff8a0`6366744e 00000000`00000009 : [COLOR="red"]Ntfs!NtfsDecrementCloseCounts+0xa2[/COLOR]
fffff880`02fb6b10 fffff880`012c5cc7 : fffffa80`074e8010 fffff8a0`0e971140 fffff8a0`0e971010 fffffa80`04909180 : [COLOR="red"]Ntfs!NtfsCommonClose+0x353[/COLOR]
fffff880`02fb6be0 fffff800`02ed0801 : 00000000`00000000 fffff880`012c5b00 fffffa80`039f8601 00000442`00000002 : [COLOR="red"]Ntfs!NtfsFspClose+0x15f[/COLOR]
fffff880`02fb6cb0 fffff800`0316296a : 00000442`00000000 fffffa80`039f8680 00000000`00000080 fffffa80`03973890 : nt!ExpWorkerThread+0x111
fffff880`02fb6d40 fffff800`02ea1ac6 : fffff880`009ea180 fffffa80`039f8680 fffff880`009f4f40 00000442`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`02fb6d80 00000000`00000000 : fffff880`02fb7000 fffff880`02fb1000 fffff880`02fb69f0 00000000`00000000 : nt!KiStartSystemThread+0x16

There seems to quite few !ntfs errors and calls within the Call Stack, with the addition of Stop 0x24 crashes. What were the results of Disk Check?

Did you use the following command with Elevated Command Prompt:

Code:

chkdsk C: /f /r

This will check the file system for errors and physical bad sectors on your hard-drive.

Have you ran the short and long tests with Seagate Tools?

The best diagnostic tools is to use your manufacturer's hard-drive diagnostics:

Hard Drive Diagnostic Procedure

You can try and attempt to use System File Checker at boot:

http://www.sevenforums.com/tutorials/139810-sfc-scannow-run-command-prompt-boot.html

tazmanaic · Dec 5, 2012

I believe I ran the long test with seagate tools. It said everything was fine. The check disk came back with everything is fine too. I'll work on the sfc /scannow when I get home from work. I'm sorry that I can't get all this information to you faster, I really am.

gregrocker · Dec 5, 2012

Check for Malware now by running full scan of Malwarebytes in Safe Mode if necessary. If it won't run then use Windows Defender Offline from boot CD or booted USB stick.

Then run SFC /SCANNOW Run in Command Prompt at Boot from the Win7 DVD or System Repair Disk

If System files will not repair run a Repair Install after backing up your files.

If too unstable to run Repairs then follow these same steps for getting a perfect Clean Reinstall - Factory OEM Windows 7

tazmanaic · Dec 6, 2012

I'm currently running SpinRite6.0 at a the behest of a close friend. I thought it would take a few hours... 27 hours later, with 23 hours to go. I'll try to run malwarebytes again when this is all done. Then try in safemode if it fails. I'll post another reply when I get results.

x BlueRobot · Dec 7, 2012

Okay, and if Malwarebytes doesn't work with the full scan, then use Windows Defender Offline as suggested by Greg.

Try and use Malwarebytes in Safe Mode.

tazmanaic · Dec 8, 2012

SpinRite finished earlier today. It didn't seem to find anything awry. I immediately started a MalwareBytes scan when I got my computer booted up. It ran for about an hour before crashing. (Made it longer than before, but still got a blue screen.) It also blue screened when I tried to reboot. I booted into safe mode and ran MalwareBytes and did a full scan, which it actually completed. It found no malicious software. I'm currently running a MSE full scan in safe mode as well.

I just realized I had forgot to mention that Desktop Window Manager frequently crashes on me. In fact, it crashes about a minute after I boot up windows, then it restarts itself a minute later.

I'm currently posting from my dad's laptop. I'll upload the BSOD information in the morning after I finish scanning with MSE.

EDIT: Nevermind. It blue-screened in safemode during the MSE scan. Here is the BSOD info.
View attachment 244763

koolkat77 · Dec 8, 2012

Just a little input..Hope you don't mind.

You should test the RAM. And in the following manner:

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

The goal is to test all the RAM sticks and all the motherboard slots.

Check your motherboard manual to ensure the RAM sticks are in the recommended motherboard slots. Some motherboards have very specific slots required for the number of RAM sticks installed.

If you get errors, stop the test and continue with the next step.

1. Remove all but one stick of RAM from your computer (this will be RAM stick #1), and run Memtest86 again, for 7 passes.

*Be sure to note the RAM stick, use a piece of tape with a number, and note the motherboard slot.

If this stick passes the test then go to step #3.

2. If RAM stick #1 has errors, repeat the test with RAM stick #2 in the same motherboard slot.

*If RAM stick #2 passes, this indicates that RAM stick #1 may be bad. If you want to be absolutely sure, re-test RAM stick #1 in another known good slot.

*If RAM stick #2 has errors, this indicates another possible bad RAM stick, a possible motherboard slot failure or inadequate settings.

3. Test the next stick of RAM (stick #2) in the next motherboard slot.

*If this RAM stick has errors repeat step #2 using a known good stick if possible, or another stick.

*If this RAM stick has no errors and both sticks failed in slot#1, test RAM stick #1 in this slot.

4. If you find a stick that passes the test, test it in all the other motherboard slots.

If Part 2 testing shows errors, and all tests in Part 3 show errors, you will need to test the RAM sticks in another computer and/or test other RAM in your computer to identify the problem.

In this way, you can identify whether it is a bad stick of RAM, a bad motherboard, or incompatibility between the sticks.

:info: Errors are sometimes found after 8 passes.
:tip: Do this test overnight, before going to bed.

tazmanaic · Dec 10, 2012

Ran 8 passes with memtest86+. No errors. I'm considering formatting and re-installing with one of the .iso file provided earlier in the thread.

Is there any other scan's you would like me to do before this?

koolkat77 · Dec 11, 2012

tazmanaic said:
Ran 8 passes with memtest86+. No errors. I'm considering formatting and re-installing with one of the .iso file provided earlier in the thread.

Is there any other scan's you would like me to do before this?

Nope, go ahead.

We'll be here if you need help

tazmanaic · Dec 14, 2012

Well, made a fresh install. Downgraded to 32bit to see if that made any difference. I managed to get to 3 windows updates remaining. Those 2 of those will simply not install, the other makes my computer freak out. (As in, explorer.exe failed to start). While updating my computer to this point, I had to run Windows Update Readiness Tool, which allowed about 40 updates to install. I've had to run system restore around 5 times and startup repair twice during the update process.

I tried to install motherboard drivers, this caused my computer to freak out as well (giving the explorer.exe failed to start and others every time I tried to reboot). I managed to get my video and sound drivers installed without too much issue. I've tried to run an sfc /scannow from safe-mode with command prompt. It completed the verification step to 100% but then came back with "Windows Resource Protection could not perform the requested operation" (I ran this as an attempted fix for those 2 windows updates).

I decided to try and install a game, league of legends, to see how it would handle that. Left for a few hours, came back to find out that my computer had BSODed while I was gone. While typing this, Desktop Window Manager has crashed twice.

EDIT: Inlcuded .zip of BSOD and PC info. SF Diagnostic Tool had an error, included the error info in the .zip under SFDTError.txt.
View attachment 245619

EDIT2: I tried to continue with the installation of League of Legends. When I clicked the .exe I got the error "extended attributes are inconsistent".

Vir Gnarus · Dec 14, 2012

I really do think you have a bad hard drive or hard drive controller (which means mobo). While the Seatools and all came up clean, understand that they only do basic SMART and read testing - not write and other advanced testing like MBR/GPT and NTFS partition activity. All these issues are consistently hardware-based, and they are most commonly referring to storage-related problems.

First, reconnect the cables from both your drive ends and mobo/PSU ends. Check for any debris or dust inside the case and clean em off, as well as ensuring the connections to your drive are clean. Then, if that doesn't work, go and update your BIOS. If that also does not work, then do a final last resort test on the CPU with Prime95 to ensure this isn't some CPU fluke (doubtful). Run on torture test with blend settings overnight, then follow up with another overnight run on large FFT settings, regardless whether first one crashes/errors or not. Report back on results.

TBH, I'm thinking bad mobo or drive is responsible for this. Get your warranties ready, and start replacing em.

gregrocker · Dec 14, 2012

Were you replacing drivers provided by WIn7? Did you read the Clean Reinstall tutorial linked which says clearly that you should use only the drivers given by the installers, quickly updated via optional Windows Updates when you enable Automatically deliver drivers via Windows Update (Step 3).

Only after all Important and Optional WIndows Updates are finished should you import just the drivers still missing in Device Manager, from the Support Downloads webpage for the make/model of PC or device.

Do you have a Seagate HD? Did Seatools extended CD scan find anything? How about SpinRite results? Was a disk check run as well? Do you have another HD to try test install? If the same problems reoccur with only the mobo and HD attached with another HD then it's likely the mobo.

If you did not allow all Updates to install before importing drivers, I would run the install again. But this time first wipe the HD with Diskpart Clean Command to clear the boot sector of any possible corrupt code. Only install Updates first to see if problems occur, then give adequate testing after installing each program (including Flash, Java and Adobe) to see which program might be causing problems.

tazmanaic · Dec 14, 2012

I installed no drivers manually until all important updates were installed save the 3 that wouldn't install. Before installing any drivers manually, I ran sfc /scannow which returned with "Windows Resource Protection couldn't perform the requested operation". I installed windows updates in batches of 5 at a time, never exceeding 10mb at a time. Any file that was larger than 10mb was run on its own, with a restart put between each install. During this time, with only the recommended installation, I had to roll back at least 5 times due to errors that would prevent windows from starting. After all of this, the sound wasn't functional until I downloaded and installed the driver for it.

I ran the Seagate short and long scans, both came back fine. SpinRite came back fine. Diskcheck came back fine. I also said that it has been behaving the exact same way with different harddrives earlier. I had first installed on a 300gb HD then reinstalled on a 500gb HD, with similar results. Throughout all of this, I've had only 1 HD in my computer at a time.

Looking back and the only thing I may have replaced was the video driver. If you think I'll need to re-install I'll do that later tonight or tomorrow.

Solved Repeated BSODs from ntfs.sys, ntoskrnl.exe, and fltmgr.sys

New member

My Computer My Computer

At a glance

Closed by request

My Computer My Computer

New member

My Computer My Computer

At a glance

Closed by request

My Computer My Computer

New member

My Computer My Computer

At a glance

Closed by request

My Computer My Computer

New member

My Computer My Computer

At a glance

Closed by request

My Computer My Computer

New member

My Computer My Computer

At a glance

New member

New member

My Computer My Computer

At a glance

Closed by request

My Computer My Computer

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

New member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer