It is a stop 0x24; which is a Ntfs file system error. It may occur for various reasons like a failing HDD, failing storage controllers and cables, the file system monitoring drivers of an antivirus, or a virus.
Form your crash dumps, I got the failing modules are ...
avast! Virtualization Driver
Code:
fffff880`02911310 fffff880`03fbbcf1*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=aswSnx.SYS"]aswSnx.SYS[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=aswSnx.SYS"]aswSnx.SYS[/URL]
aswSnx+0xf0cf1
Description here:
Driver Reference Table - aswSnx.SYS
COMODO Firewall Pro Sandbox Driver
Code:
fffff880`02910af8 fffff880`03e0d371Unable to load image \SystemRoot\System32\DRIVERS\[URL="http://www.carrona.org/drivers/driver.php?id=cmdguard.sys"]cmdguard.sys[/URL], Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=cmdguard.sys"]cmdguard.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=cmdguard.sys"]cmdguard.sys[/URL]
cmdguard+0xd371
Description here:
Driver Reference Table - cmdguard.sys
Uninstall Avast. Uninstall Comodo, too. Use
Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and
free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.
Now, you need to pay attention to this one ....
Drive | C:
Size | 97.66 GB (104,857,595,904 bytes)
Free Space |
2.79 GB
(2,997,383,168 bytes)
That's extremely low. No doubt that the storage will fail. Salvage some space. At first, disable hibernate. it will salvage a good space.
http://www.sevenforums.com/tutorials/819-hibernate-enable-disable.html
Next, follow this guide:
http://www.sevenforums.com/tutorials/129976-hard-disk-space-free-up-recover.html
Let us know the situation when it is at least 12-15 GBS free.
_________________________________________________________________________
BSOD ANALYSIS:
Code:
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, fffff88003185878, fffff880031850d0, fffff88001319b13}
Probably caused by : Ntfs.sys ( Ntfs!NtfsPerformVerify+23 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88003185878
Arg3: fffff880031850d0
Arg4: fffff88001319b13
Debugging Details:
------------------
EXCEPTION_RECORD: fffff88003185878 -- (.exr 0xfffff88003185878)
ExceptionAddress: fffff88001319b13 (Ntfs!NtfsPerformVerify+0x0000000000000023)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 00000000000000b8
Attempt to read from address 00000000000000b8
CONTEXT: fffff880031850d0 -- (.cxr 0xfffff880031850d0)
rax=fffff88003185ae8 rbx=0000000000000000 rcx=fffffa8009080010
rdx=0000000000000000 rsi=0000000000000000 rdi=fffffa8009080010
rip=fffff88001319b13 rsp=fffff88003185ab0 rbp=fffff80003680280
r8=00000000ffffffff r9=0000000000000727 r10=fffff88001265700
r11=fffff8a001328140 r12=fffff88001267000 r13=0000000000000000
r14=fffff88003185c48 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
Ntfs!NtfsPerformVerify+0x23:
fffff880`01319b13 488b8ab8000000 mov rcx,qword ptr [rdx+0B8h] ds:002b:00000000`000000b8=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 00000000000000b8
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003712100
GetUlongFromAddress: unable to read from fffff800037121c0
00000000000000b8 Nonpaged pool
FOLLOWUP_IP:
Ntfs!NtfsPerformVerify+23
fffff880`01319b13 488b8ab8000000 mov rcx,qword ptr [rdx+0B8h]
FAULTING_IP:
Ntfs!NtfsPerformVerify+23
fffff880`01319b13 488b8ab8000000 mov rcx,qword ptr [rdx+0B8h]
BUGCHECK_STR: 0x24
DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE
LAST_CONTROL_TRANSFER: from fffff8800122fb39 to fffff88001319b13
STACK_TEXT:
fffff880`03185ab0 fffff880`0122fb39 : 00000000`00000000 fffff800`03680280 00000000`00000000 fffffa80`09080010 : Ntfs!NtfsPerformVerify+0x23
fffff880`03185af0 fffff880`012962f4 : fffffa80`09080010 00000000`00000000 fffff8a0`0132eb40 fffffa80`077e5180 : Ntfs! ?? ::FNODOBFM::`string'+0x6f90
fffff880`03185be0 fffff800`034e4251 : 00000000`00000000 fffff800`03680200 fffff800`036e1800 00000000`00000005 : Ntfs!NtfsFspClose+0x128
fffff880`03185cb0 fffff800`03778ede : 00000000`00000000 fffffa80`06727b50 00000000`00000080 fffffa80`0669c890 : nt!ExpWorkerThread+0x111
fffff880`03185d40 fffff800`034cb906 : fffff880`02f64180 fffffa80`06727b50 fffff880`02f6efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03185d80 00000000`00000000 : fffff880`03186000 fffff880`03180000 fffff880`031859e0 00000000`00000000 : nt!KiStartSystemThread+0x16
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: Ntfs!NtfsPerformVerify+23
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5167f5fc
STACK_COMMAND: .cxr 0xfffff880031850d0 ; kb
FAILURE_BUCKET_ID: X64_0x24_Ntfs!NtfsPerformVerify+23
BUCKET_ID: X64_0x24_Ntfs!NtfsPerformVerify+23
Followup: MachineOwner
---------
