BSOD - fileinfo.sys and ntoskrnl.exe

[bigdave]

now it's showing the other drivers now but last time I tried it didn't, my computer is acting very strange. 2 times now I have started it after a crash and my firefox will not work and when it finally comes up all my book marks are gone. This time my bookmarks are all visible and I'm showing all of my drivers. I'll run verifier now.

 

[bigdave]

When I tried to clear my update list last time it didn't work either, but now it is. I remember yesterday also I couldn't open itunes because it said the folder it was in is blocked. It's like I don't always have full access to my own system.

I removed .NET 4.5 and I'm re-installing then running verifier.

 

[Arc]

As and when it will crash with verifier enabled, report us, with crash dump.

 

[bigdave]

No BSOD yet but still same issues with windows, I can run itunes tells me I don't have permissions, I can't uninstall any programs or remove Firefox which just moves super slow or locks up. Also my bookmarks are gone again, but they were here last night before I went to bed. Running malware bytes for the hell of it

 

[Arc]

If the computer works slow, it is due to the driver verifier. Whenever you will disable it, it will come back to normal.

Malwarebyte is a good idea, but do the scan in safe mode, as in safe mode almost a lot of system services are running in safe mode, MBAM can do a close scan.

When you will disable the verifier, if it crashes anymore, let us know it, and we will take the next step then.

 

[bigdave]

But is there any explination why my permissions might have changed? Should I do a system restore to 9-18 before all the issues started?

 

[Arc]

Most probably, after disabling verifier, you will get your iTunes permission and and firefox bookmarks back.

While it is running, please be patient.

If the cause of the crash is hardware, system restore will have nothing to do with it.

 

[bigdave]

those issues were before I ran verifier actually, I'll let verifier finish the last 12 hours while I'm at work.

 

[Arc]

First let the verifier finish. With it running, dont do a system restore.

Then first disable the verifier, and do that system restore.
After that, boot into safe mose, and do a full scan with MBAM.

 

[bigdave]

completed the 24 hours of verifier with no issue, performed the system restore and malwarebytes is running currently in safe mode. The game automatically downloads and updates through Steam, should I let this occur to see if I have issues again? I'm going to do the .net install manually prior to the game install so make sure it's completed properly.

 

[bigdave]

Didn't get the .net framework repair install loop this time, but it still installed some .net 4.0 files and microsoft visual c++ 2005,2008 and 2010 that are required for the game.

Made sure I had the up to date flash and java as well. My previous dump files didn't point to any problem at all?

 

[Arc]

Last three of your uploaded dumps did not show any real cause of a crash

But there was a .net installation error in the events, and that was very repeating. As now you have installed it manually, let us see what happens there.

 

[bigdave]

here we go again

I had no issues for a couple of weeks, last night all I did some windows updates but they all went through fine.

 

[bigdave]

BSODs following a power outage due to hurricane Sandy

Please help, been having mystery issues for 3 months now.

ZIP attached.

 

[Arc]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffffa804014b278, 0, fffff8800121866d, 5}


Could not read faulting driver name
Probably caused by : memory_corruption

Followup: memory_corruption
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa804014b278, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8800121866d, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003304100
GetUlongFromAddress: unable to read from fffff800033041c0
 fffffa804014b278 Nonpaged pool

FAULTING_IP: 
Ntfs!NtfsPlanComplexIoRuns+1e5
fffff880`0121866d 4c8b98488b4330  mov     r11,qword ptr [rax+30438B48h]

MM_INTERNAL_CODE:  5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x50

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880035a0b20 -- (.trap 0xfffff880035a0b20)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800fd12730 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff880035a0ea8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800121866d rsp=fffff880035a0cb0 rbp=0000000000000000
 r8=0000000000000000  r9=0000000000000000 r10=fffffa800d5b34a0
r11=fffffa800fad6670 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
Ntfs!NtfsPlanComplexIoRuns+0x1e5:
fffff880`0121866d 4c8b98488b4330  mov     r11,qword ptr [rax+30438B48h] ds:fffffa80`4014b278=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff8000307b8af to fffff800030d4fc0

STACK_TEXT:  
fffff880`035a09b8 fffff800`0307b8af : 00000000`00000050 fffffa80`4014b278 00000000`00000000 fffff880`035a0b20 : nt!KeBugCheckEx
fffff880`035a09c0 fffff800`030d30ee : 00000000`00000000 fffffa80`4014b278 00000000`00000300 fffff880`035a0e50 : nt! ?? ::FNODOBFM::`string'+0x437c1
fffff880`035a0b20 fffff880`0121866d : fffffa80`105efe01 00000000`00000000 00000000`00000000 fffff880`035a0d20 : nt!KiPageFault+0x16e
fffff880`035a0cb0 fffff880`012234ec : fffffa80`105efe40 fffffa80`0f5aec10 fffff880`035a0e00 fffffa80`00001000 : Ntfs!NtfsPlanComplexIoRuns+0x1e5
fffff880`035a0d80 fffff880`0122263c : fffffa80`0f5aec10 fffffa80`0d2168d0 fffff880`035a0ea0 00001f80`01010001 : Ntfs!NtfsPrepareBuffers+0x1ac
fffff880`035a0e00 fffff880`0121aff6 : fffffa80`105efe40 fffffa80`0f5aec10 fffff8a0`04224140 fffff8a0`04224010 : Ntfs!NtfsNonCachedIo+0x1bc
fffff880`035a0fd0 fffff880`0121ca98 : fffffa80`105efe40 fffffa80`0f5aec10 fffff880`035a1101 fffffa80`0fbb3c01 : Ntfs!NtfsCommonRead+0x7a6
fffff880`035a1170 fffff880`0105dbcf : fffffa80`0f5aefb0 fffffa80`0f5aec10 fffffa80`0fbb3c30 00000000`00000001 : Ntfs!NtfsFsdRead+0x1b8
fffff880`035a1220 fffff880`0105c6df : fffffa80`0d6e7850 fffffa80`0e399500 fffffa80`0d6e7800 fffffa80`0f5aec10 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`035a12b0 fffff800`030fc1b5 : fffffa80`0f5aec30 fffffa80`0f29d380 fffffa80`0e399660 00000000`0000007f : fltmgr!FltpDispatch+0xcf
fffff880`035a1310 fffff800`0336d287 : fffffa80`0e399500 fffffa80`0e399500 fffffa80`0f29d382 fffff880`035a13b8 : nt!IoPageRead+0x255
fffff880`035a13a0 fffff800`0336d381 : fffffa80`0fb7dd50 fffffa80`0e5ed1e0 fffff880`035a14d8 00000000`00000001 : nt!MiPfExecuteReadList+0xff
fffff880`035a1400 fffff800`030c33ad : fffffa80`0fb7dd50 00000000`00000000 00000000`00001000 00000000`00000000 : nt!MmPrefetchForCacheManager+0xb5
fffff880`035a1450 fffff800`033ba960 : fffffa80`00000000 00000000`00000000 fffffa80`0f29d380 00000000`0b693870 : nt!CcFetchDataForRead+0x17d
fffff880`035a14b0 fffff880`0121a760 : fffff8a0`00000000 fffff880`00000001 fffffa80`00040000 fffff880`0126d001 : nt!CcCopyRead+0x180
fffff880`035a1570 fffff880`0121add3 : 00000000`00000000 fffff8a0`04224140 fffff880`035a17a0 fffff880`035a1698 : Ntfs!NtfsCachedRead+0x180
fffff880`035a15d0 fffff880`0121ca98 : fffffa80`0e27b180 fffffa80`105dc740 fffff880`035a1701 fffffa80`0e41fc00 : Ntfs!NtfsCommonRead+0x583
fffff880`035a1770 fffff880`0105dbcf : fffffa80`105dcae0 fffffa80`105dc740 fffffa80`0e41fc30 00000000`00000001 : Ntfs!NtfsFsdRead+0x1b8
fffff880`035a1820 fffff880`0105c6df : fffffa80`0d6e7850 00000000`00000001 fffffa80`0d6e7800 fffffa80`105dc740 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`035a18b0 fffff800`033d8dfb : 00000000`00000000 fffffa80`0f29d380 00000000`00000001 fffffa80`105dc740 : fltmgr!FltpDispatch+0xcf
fffff880`035a1910 fffff800`033ba6b3 : fffffa80`0f29d380 fffffa80`0f29d380 fffffa80`0f29d380 fffff800`030de101 : nt!IopSynchronousServiceTail+0xfb
fffff880`035a1980 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtReadFile+0x631


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !Ntfs
    fffff8800121866f - Ntfs!NtfsPlanComplexIoRuns+1e7
    [ d8:98 ]
1 error : !Ntfs (fffff8800121866f)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
---------

I can suggest you two things here ....
http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html
Run it for at least 8 passes.

And, Disc related checks.

1. Update the firmware, if you are using a SSD.
2. Reseat the sata and power.
3. Run chkdsk /f/r, following the option two of the tutorial Disk Check
4. Seatool for dos: SeaTools | Seagate download
   Burn it in a blank cd. boot from the CD, click on "Accept", wait for it to finish detecting the drives, then in the upper left corner select "Basic Tests", then select "Long Test" and let it run.

EDIT: Uninstall the following programs:

• Start Menu\Programs\Catalyst Control Center
• Start Menu\Programs\GIGABYTE
• Start Menu\Programs\GIGABYTE\AutoGreen
• Start Menu\Programs\GIGABYTE\ET6
• Start Menu\Programs\GIGABYTE\Smart 6

 

[bigdave]

If I complete all test with no errors what would be the next step? Would that indicate that my motherboard is messed up? I passed the HD checks and have completed 6 passes of the ram so far.

 

[Arc]

Have you completed them all?

Let us know the results please, including the uninstallations. It is important!

 

[bigdave]

Completed 9 passes with memtest86+ with no errors
Passed the short and long seatools dos checks with no errors
Removed all the listed programs
Ran check disk

 

[Arc]

And still it is crashing? Mai I see any new dump?

 

[bigdave]

I was just informing you that I completed everything you asked, no crash yet I will post if/when it does.