BSOD Windows 7 ntkrnlpa.exe and ntfs.sys

essenbe · 01 Sep 2014

Go by this. It should tell you exactly how Driver Verifier - Enable and Disable

Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

Information

What is Driver Verifier:
It puts stress on the drivers, and therefore it makes the unstable drivers crash. Hopefully the driver that crashes is recorded in the memory dump.

How we know that DV is enabled:
It will make the system bit slow and sluggish.

Warning

Before enabling DV, make it sure that you have created a restore point.
make a System Restore Point manually before enabling DV.

Tip

If you fail to get on the Desktop because of DV, Boot into Advanced Boot Options > Safe mode. Disable DV there. Now boot normally again, and try following the instruction of enabling DV again.
If you cannot boot in Safe mode too, do a System Restore to a point you made earlier.

Let us know the results, with the subsequent crash dumps, if any.

JackFlash · 01 Sep 2014

ok, from startup of verifier, ive selected custom developer option> select individual settings from full list > ticked everything > next > next > select driver names from a list > see a huge list of drivers and ticked all non-microsoft drivers > next > gonna reboot now

JackFlash · 01 Sep 2014

just had a thought. im off to bed soon. will verifier load up with same settings after a reboot? im gonna turn off in the morning, go to work, and then drop off the pc. or do i need to select all the settings from previous post again, reboot, keep pc off, and then give back to my mate, and tell him to keep it on and use as normal until it blue screens?

once it does blue screen, do i need to get you a log file or something after?

cheers, im crashing now, so will be up and hungover in about 5 hours time.

essenbe · 01 Sep 2014

Don't use low resolution setting

Attachment 331616

essenbe · 01 Sep 2014

It will stay on until you turn it off. Remember to tell your Mate that it will seem slow and sluggish with verifier on, but use it to do whatever you usually do or anything you want. We want it to be used for 24 hours or until it crashes. The point of verifier is to make it crash and trap the offending driver, hopefully. Just be sure youhave created a restore point before enabling it.

JackFlash · 03 Sep 2014

Hi

My mate has been using his pc with Driver verifier on. It blue screened as soon as he plugged in a USB drive. When I had the machine, it also blue screened twice while I had verifier running and plugged in a usb device.

Would any log files from verifier be of any use in these circumstances? The blue screens that were originally the problem were not happening when usb drives were plugged in and verifier was not running...

essenbe · 03 Sep 2014

Yes, they would. That is the purpose of DV, to make it BSOD and hopefully trap the offending driver. Just post Blue Screen of Death (BSOD) Posting Instructions

JackFlash · 04 Sep 2014

hi. i ran the 2 options for getting logs. didnt have time to upload them from his pc, i just whacked them in dropbox. not sure why, but it extracted all the files when i put them in dropbox. everything is present in the 2 attachments, just have non standard filenames. cheers for helping

essenbe · 04 Sep 2014

This is the driver it caught. This is several times and I suggest removing it with this https://kb.acronis.com/content/34876

Code:

lmvm fltsrv
start    end        module name
85fd2000 85fe9000   fltsrv   T (no symbols)           
    Loaded symbol image file: fltsrv.sys
    Image path: \SystemRoot\system32\DRIVERS\fltsrv.sys
    Image name: fltsrv.sys
    Timestamp:        Mon May 13 04:41:02 2013 (5190B52E)
    CheckSum:         000236CE
    ImageSize:        00017000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Acronis Storage Filter Management Driver

Acronis causes problems with a lot of people and is near impossible to completely remove. In fact, I had it at one point and had to reinstall the OS to get rid of it. One suggestion, there is a setting in Acronis that allows it to take over Windows Backup. Before removing it, reverse that setting where windows backup is primary. Then uninstall the program with the removal tool. Follow those instructions.

I would disable verifier before uninstalling Acronis, then enable it again and see if there are any other misbehaving drivers. This will tell you how to disable it. Much easier than enabling it. Driver Verifier - Enable and Disable

JackFlash · 04 Sep 2014

thanks. the only reason the guy got acronis was because his pc was making really strange noises and bluescreening and he had a nightmare reinstalling (or upgrading) windows 7. he now has used acronis to make a full image, so if his pc does die, it will be a doddle to get it back up and running without any updates or config or software to be installed.

i can do as you suggest, thats not a problem, but if the guy was getting blue screens before acronis was installed, is there anything else pointed out in the logs as to what is going on with his pc?

cheers