Random BSOD, NTFS.sys & ntsokrnl.exe tried a few things.

[Maxcobos]

Hi All,

Seen this BSOD before during work "ntfs.sys", the user was due a upgrade to an SSD so we wiped the HDD and it got sent to WEEE waste.

Now I have the same BSOD on my personal laptop and I don't really want to install Win 7 again (no matter how easy it is)

Tried running CHKDSK, found no errors, same with sfc /scannow.

Nothing seems to trigger it and it will BSOD randomly, sometimes after logging in, sometimes after a few hours, resuming from standby, shutting down etc.

I've attached the dump file, now i'm just waiting for the good or bad news (please just be drivers )

Thanks, Max.

 

[axe0]

Hi Maxcobos,

Welcome to the 7forums.

In case of

If you are using a program like Ccleaner please stop using it while troubleshooting.
This because programs like Ccleaner remove dump files that are needed to troubleshoot.
Or configure Ccleaner to not remove dump files:

Because in both the crashes there is a lot of NTFS activity, please test your hard drive once again

Diagnostics Test

 HDD TEST

Run chkdsk /r http://www.sevenforums.com/tutorials/433-disk-check.html

If there are still no errors, please run driver verifier.

Diagnostic Test

 DRIVER VERIFIER

   Warning

Please make a backup of your important files and get your rescue media or create one.
Please create a restore point.

Please follow this tutorial to run driver verifier.

Some windows drivers are blamed in a few crashes, but that usually means that a 3rd party driver is actually the cause.
Driver verifier stresses your drivers and will crash your pc if any driver fails due to a violation.

Driver verifier should be performed for a max of 48 hours, or when you have a bluescreen, whatever comes first.

If driver verifier has found a violation and you can't get back into windows normally, try to boot into safe mode and reset in safe mode driver verifier, or in the troubleshooting options open command prompt and type verifier /reset.

   Note

Your system will act very sluggishly while driver verifier is enabled, this is normal as your drivers will be being subjected to heavy testing in order to make them crash.

STACK_TEXT:  
fffff880`0358c890 fffff880`0163724f : fffff8a0`0a96cbc0 00000000`00000000 fffff8a0`0aa71160 fffffa80`0732b860 : [COLOR="red"]Ntfs[/COLOR]!NtfsAcquireExclusiveFcb+0x65
fffff880`0358c8e0 fffff880`016cacce : fffffa80`0732b8b8 00000000`00000000 00000000`00000000 00000000`00000000 : [COLOR="red"]Ntfs[/COLOR]!NtfsAcquireExclusiveScb+0x1f
fffff880`0358c910 fffff880`01643255 : fffffa80`07442b80 fffffa80`0732b860 5da3cec6`d6d6a75c 00000000`c0000102 : [COLOR="red"]Ntfs[/COLOR]!NtfsDeallocateRecordsComplete+0x3e
fffff880`0358c940 fffff880`0162f7b4 : fffffa80`0732b860 4dd62c90`00000001 00000000`00000000 fffffa80`07442b80 : [COLOR="red"]Ntfs[/COLOR]! ?? ::FNODOBFM::`string'+0x5245
fffff880`0358c990 fffff880`01638f19 : fffffa80`07442b80 00000000`00000000 fffffa80`0732b860 fffff880`03365180 : [COLOR="red"]Ntfs[/COLOR]!NtfsExtendedCompleteRequestInternal+0xd4
fffff880`0358c9d0 fffff880`016224ab : fffffa80`0732b860 fffffa80`07442b80 00000000`c0000102 fffff800`02cc6300 : [COLOR="red"]Ntfs[/COLOR]!NtfsProcessException+0x829
fffff880`0358caa0 fffff800`02c8a1b5 : fffffa80`07035700 fffff800`02f76c00 fffff800`02e2b200 fffffa80`00000001 : [COLOR="Red"]Ntfs[/COLOR]!NtfsFspDispatch+0x52b
fffff880`0358cb70 fffff800`02f198e2 : 00000000`00000000 fffffa80`07031660 00000000`00000080 fffffa80`07008040 : nt!ExpWorkerThread+0x111
fffff880`0358cc00 fffff800`02c71f46 : fffff880`033d7180 fffffa80`07031660 fffff880`033e1fc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`0358cc40 00000000`00000000 : fffff880`0358d000 fffff880`03587000 fffff880`0358c790 00000000`00000000 : nt!KxStartSystemThread+0x16

 

[Maxcobos]

Hi Axe0,

Apologies for the late reply, I will conduct these tests tomorrow and let you know how I get on.

Regards, Max.

 

[axe0]

Hi Max,

It is no problem, take the time you need, there is no rush

 

[Maxcobos]

Hi axe0,

As promised!

I ran the tests that you stated, both were not very good.

Chkdsk /r would not let me carry this out while the disk was being used, on restart I got the error that is shown in the attached photo.

I then ran verifier and got a bluescreen after I could log in, I tried this a few more times until I disabled the driver verifier again.

 

[axe0]

The crashes are caused by a driver from Sony that is really old!
I suggest you check Sony for driver updates, link below is for more information about this driver.
Driver Reference Table - SFEP.sys

*** WARNING: Unable to verify timestamp for SFEP.sys
*** ERROR: Module load completed but symbols could not be loaded for SFEP.sys
3: kd> lmvm SFEP
start             end                 module name
fffff880`0517c000 fffff880`0517ec80   SFEP     T (no symbols)           
    Loaded symbol image file: SFEP.sys
    Image path: \SystemRoot\system32\DRIVERS\SFEP.sys
    Image name: SFEP.sys
    Timestamp:        [COLOR="Red"]Fri Aug 03 07:35:53 2007[/COLOR] (46B2BEB9)
    CheckSum:         00003282
    ImageSize:        00002C80
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[Maxcobos]

Wow... fast response!

I've found an updated driver from 2012 and installed it and restarted, shall I run those tests again? Or just the verifier one?

 

[axe0]

Just test your system, if any crash occurs report back with a new zip from dm log collector and description of what you were doing and what happened.

 

[Maxcobos]

Hi Axe0

Unfortunately it has just blue screened, I was literally going through my itunes library getting rid of music that I don't even know why I have, so i'd be listening to a few songs through my phone while working, if i heard one i didn't like i'd go and delete it.

I go stuck dealing with an issue for a while and my laptop went to sleep/hibernate, when i turned it back on I got the blue screen.

 

[axe0]

The NTFS again and DirectX which refers to the graphics.
Please run HDTune to run a few tests
Please run Furmark to test your graphics card, note the temps while idle and under load.
If furmark reaches aroun 82C abort the test, this test is safe as long as you keep a keen eye on it. If you don't , furmark could damage your GPU due to the temps that could cause overheating damage.

As a test, please uninstall Avast and install Microsoft Security Essentials
http://www.sevenforums.com/tutorials/343783-avast-uninstall-completely.html
Microsoft Security Essentials - Microsoft Windows

fffff880`03585b70  fffff880`1031a500 [COLOR="Red"]dxgmms1[/COLOR]!VidSchiIsHardwareCompletedDependingCommandForFlip+0x38

0: kd> k
Child-SP          RetAddr           Call Site
fffff880`03585890 fffff880`0141d24f [COLOR="red"]Ntfs[/COLOR]!NtfsAcquireExclusiveFcb+0x65
fffff880`035858e0 fffff880`014b0cce [COLOR="red"]Ntfs[/COLOR]!NtfsAcquireExclusiveScb+0x1f
fffff880`03585910 fffff880`01429255 [COLOR="red"]Ntfs[/COLOR]!NtfsDeallocateRecordsComplete+0x3e
fffff880`03585940 fffff880`014157b4 [COLOR="red"]Ntfs[/COLOR]! ?? ::FNODOBFM::`string'+0x5245
fffff880`03585990 fffff880`0141ef19 [COLOR="red"]Ntfs[/COLOR]!NtfsExtendedCompleteRequestInternal+0xd4
fffff880`035859d0 fffff880`014084ab [COLOR="red"]Ntfs[/COLOR]!NtfsProcessException+0x829
fffff880`03585aa0 fffff800`02c931b5 [COLOR="red"]Ntfs[/COLOR]!NtfsFspDispatch+0x52b
fffff880`03585b70 fffff800`02f228e2 nt!ExpWorkerThread+0x111
fffff880`03585c00 fffff800`02c7af46 nt!PspSystemThreadStartup+0x5a
fffff880`03585c40 00000000`00000000 nt!KxStartSystemThread+0x16

Diagnostics Test

 HDD TEST

Run HDTune to scan for errors, health and benchmark.
Let me know what the results are, prefered screenshots.

Diagnostic test

 GPU TEST

Run Furmark to test your GPU. Furmark tutorial

   Note

Run Furmark for around 30 minutes

   Warning

Your GPU temperatures will rise quickly while Furmark is running. Keep a keen eye on them and abort the test if temperatures rise too high

 

[Maxcobos]

Hi Axe,

As requested, see attached screenshots, removed Avast and installed MSE.

FurMark ran fine and nothing overheated either.

I've noticed that any browser I open freezes for around 5 minutes before I can use it, or I just get BSOD..

 

[axe0]

An SSD that gets 70MB/s? Really low even if it is the lowest rate.
How old is the SSD?

 

[Maxcobos]

It's around a year and half old, it was used in my work laptop before I upgraded it, it was wiped completely as well but it was heavily used. I used a health checker on it before I used it again and it everything showed up fine.

I mean it works like a normal SSD most of the time with speeds etc. but if this is causing my problem then i'll need to get rid of it. Do you think it's worth cloning this onto another SSD or just getting a new one and starting fresh?

 

[axe0]

Please check Kingston for firmware updates for the SSD

 

[Maxcobos]

Hi Axe,

Downloaded the Kingston SSD firmware toolbox, no firmware update is needed.

I've copied the device and SMART data and attached these also, I run some Kingston Diagnostics and the SSD passed every test with no errors!

 

[axe0]

Let me know how it goes.
If another bluescreen occurs, just run the dm log collector, upload the zip and give some description of what you were doing and what happened