Ntfs.sys BSOD crash

talormanda · May 25, 2013

Wasn't really doing anything had a game up and chrome and was afk and it randomly crashed.

Picture of BSOD: http://i.imgur.com/LmUFtoL.png

The full dump and minidump on my dropbox: https://www.dropbox.com/sh/bfr1t9wm9d7wkkj/4n0fBBwj2c

Code:

==================================================
Dump File         : 052513-12218-01.dmp
Crash Time        : 5/25/2013 12:06:48 AM
Bug Check String  : 
Bug Check Code    : 0x00000109
Parameter 1       : a3a039d8`ab1f6511
Parameter 2       : b3b7465e`fd9e4b11
Parameter 3       : fffff880`01be45d0
Parameter 4       : 00000000`00000001
Caused By Driver  : Ntfs.sys
Caused By Address : Ntfs.sys+ee5d0
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+5a440
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\Windows\Minidump\052513-12218-01.dmp
Processors Count  : 8
Major Version     : 15
Minor Version     : 9200
Dump File Size    : 297,032
==================================================

I updated my Nvidia drivers yesterday to GeForce 320.18

And around April 15th I upgraded to a VisionTek Racer Series SSD 120GB Ultra Performance SATA III 6.0Gb/s 2.5-Inch Solid State Drive (900499)

What caused this?

usasma · May 25, 2013

I'm late for work, this'll be quick. Please post back and I'll go into more detail if needed.

Only 54 Windows Updates installed. Most systems have 66 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

SSD's were temperamental when they first came out, but their reliability has improved greatly over the last year or two. There are 2 things that MUST be checked on systems with BSOD's and SSD's:

1) That the SSD firmware is the latest available for the SSD
2) That the storage controller drivers on the motherboard are the most recent. They must date from late 2012 or later. This is ALL controllers, not just the one that the SSD is attached to.

Wireless and Bluetooth are disabled. Is this deliberate? If so, why?

Please run these free hardware diagnostics on ALL hard drives: Hard Drive Diagnostic Procedure
See the caveats about SSD testing.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

Rt630x64.sys Wed Oct 19 08:12:55 2011 (4E9EBEC7)
Realtek PCI/PCIe Adapters
http://www.carrona.org/drivers/driver.php?id=Rt630x64.sys

If all of this doesn't stop the BSOD's, please run Driver Verifier according to these instructions: Driver Verifier Settings

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Sat May 25 00:05:51.501 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\052513-12218-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16581.amd64fre.win8_gdr.130410-1505
System Uptime:[B]0 days 2:25:43.185[/B]
Probably caused by :[B]Ntfs.sys ( Ntfs!NtfsAccessCheck+0 )[/B]
BugCheck [B]109, {a3a039d8ab1f6511, b3b7465efd9e4b11, fffff88001be45d0, 1}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000109]CRITICAL_STRUCTURE_CORRUPTION (109)[/url]
Arguments: 
Arg1: a3a039d8ab1f6511, Reserved
Arg2: b3b7465efd9e4b11, Reserved
Arg3: fffff88001be45d0, Failure type dependent information
Arg4: 0000000000000001, Type of corrupted region, can be
    0 : A generic data region
    1 : Modification of a function or .pdata
    2 : A processor IDT
    3 : A processor GDT
    4 : Type 1 process list corruption
    5 : Type 2 process list corruption
    6 : Debug routine modification
    7 : Critical MSR modification
BUGCHECK_STR:  0x109
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  csrss.exe
FAILURE_BUCKET_ID: [B]0x109_1_Ntfs!NtfsAccessCheck[/B]
CPUID:        "Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  A10
  BIOS Release Date             10/19/2012
  Manufacturer                  Dell Inc.
  Product Name                  XPS 8500  
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Sat May 25 00:05:51.501 2013 (UTC - 4:00)**************************
[COLOR=RED][B]Rt630x64.sys                Wed Oct 19 08:12:55 2011 (4E9EBEC7)[/B][/COLOR]
btath_bus.sys               Fri Nov  2 01:35:15 2012 (50935B93)
btath_lwflt.sys             Fri Nov  2 01:35:44 2012 (50935BB0)
intelppm.sys                Mon Nov  5 22:55:02 2012 (50988A16)
HECIx64.sys                 Mon Dec 17 14:32:21 2012 (50CF7345)
btath_avdt.sys              Tue Dec 18 04:53:53 2012 (50D03D31)
btfilter.sys                Tue Dec 18 04:54:27 2012 (50D03D53)
btath_rcp.sys               Tue Dec 18 04:54:50 2012 (50D03D6A)
btath_hcrp.sys              Tue Dec 18 04:54:54 2012 (50D03D6E)
btath_flt.sys               Tue Dec 18 04:55:02 2012 (50D03D76)
btath_a2dp.sys              Tue Dec 18 04:55:11 2012 (50D03D7F)
point64.sys                 Wed Jan  9 06:15:52 2013 (50ED5168)
cthda.sys                   Mon Jan 28 22:42:06 2013 (5107450E)
cthdb.sys                   Mon Jan 28 22:42:11 2013 (51074513)
nvhda64v.sys                Mon Feb 25 00:27:35 2013 (512AF647)
dump_iaStorA.sys            Mon Mar 18 19:36:36 2013 (5147A504)
iaStorA.sys                 Mon Mar 18 19:36:36 2013 (5147A504)
nvlddmkm.sys                Sun May 12 15:09:45 2013 (518FE8F9)
[/font]

talormanda · May 25, 2013

I disable wifi and bluetooth because I'm hardwired and I don't need it running. I have all the windows updates besides silverlight and bing desktop. Don't want those.

As far as ssd firmware goes, I didn't see any new version but I emailed their tech to ask.

So you want me to update the thing in red is that correct?

And what program did you use to do this analysis?

talormanda · May 25, 2013

View attachment 22295
Driver updated (Got from dell.com). Booted to regular harddrive with factory OS install on it and it is the same driver as that one now. I couldn't issue the driverquery command on that OS though because some things became corrupted or missing when I probably changed the boot order around for the SSD but I can still check device manager.

I'm curious now that everything else is updated? I went to intel.com to double check and it picked up my RAID drivers okay and said they are current but the chipset I would have thought to been detected?:

View attachment 22296

usasma · May 26, 2013

More current Realtek drivers are available at: Realtek
Please give them a try.

Please run Seagate SeaTools diagnostics on your Seagate hard drive (instructions here: http://www.carrona.og/hddiag.html)
Please run any manufacturer's diagnostics that you may have on the SSD

The program that I use to do this is developed by a couple of friends of mine. It uses programming to pass specialized commands to kd.exe - the command line version of Microsoft's Debugging Tools. If you're interested in obtaining a copy, you'll can get one from OFFICIAL UPDATE: Sysnative BSOD Processing Apps - Page 2 - Sysnative Forums (you must be registered in order to download it).

While the Intel autodetect tool is a nice feature, it doesn't always detect the latest/proper version.

I only check the drivers that are involved in the memory dump - not every driver on the system.
The info listed above shows all 3rd party drivers (in dated order) that were seen in the memory dump.
As 90+% of BSOD's are caused by 3rd party drivers, we find that this is the best method.

Just FYI - the next 10% or less (approximately) of BSOD problems are caused by hardware problems.
And less than 1% are found to be due to Windows problems.

My only other suggestion would be to update the Intel Management Engine - it's driver (HECIx64.sys) dates from Dec 17, 2012 - and there have been updates to it recently. It's really not all that old (having been released after Win8 was released) - but I have seen recent updates released - to include a version available at Windows Update.

talormanda · May 26, 2013

1. I don't get any update for anything else in Windows Update currently. So wheres the page with the driver for Intel Management Engine?

2. For the Realtek I downloaded "Win8 Auto Installation Program (SID:1581789)" but didn't install anything, I went to device manager and did an update driver and browsed to the drivers in the folder and it updated from

Version 8.2.612.2012 --> 8.15.410.2013 Sound good?

View attachment 22312

3. I also ran the diagnostics that Dell has on the system that tests all hardware and it didn't show anything wrong.

4. Also the manufacturer doesn't have any tools that I can see for SSD.

usasma · May 26, 2013

1. Most likely this one for the Management Engine: https://downloadcenter.intel.com/De...ldID=22596&keyword=management+engine&lang=eng
If it doesn't work, then try this one: https://downloadcenter.intel.com/De...ldID=22597&keyword=management+engine&lang=eng

2. Realtek drivers look good!

3. Glad to hear that it passed the Dell hardware diagnostics. I have more faith in the Seagate SeaTools than in the Dell diagnostics - but it's your system, so it's your choice.

4. Try this for the SSD: Software - Crystal Dew World
I'm not familiar with the test and it's limitations - so you'll have to read the documentation that it comes with.

talormanda · May 26, 2013

How can I tell which download of yours to use so I don't mess anything up?

When I installed the SSD it seems to have messed up the OS on the seagate drive so I disabled it from the bootmenu because I can't go to it anymore. I want to check the firmware but I can't figure out how to get the serial number of that drive. Device Manager only shows model number. The seagate program to detect serial numbers only shows it on the boot drive which is the SSD. And the Seagate tools for windows says "Compatibility issues" when I try to install it.

Going to try the DOS thing on the bootable media now.

EDIT: Can't get computer to pick up the CD/DVD Media, it should be noted that Windows 8 Install Disc are picked up, so it's not broken or anything.

EDIT 2: Got the Serial number, Model, and Firmware from Intel Rapid Storage Application and I have the latest [CC24]

usasma · May 27, 2013

Intel is a reliable company and won't let it's drivers install on incompatible hardware.
Try the first one - it's the most likely to work (IMO). You can also post on the Intel forums for more info on how to figure out which device is which - but that's beyond my ability.

Now we wait for the next BSOD. If it happens, zip up the contents of C:\Windows\Minidump and upload it with your next post.

Good luck!

talormanda · May 27, 2013

Nothing so far...

talormanda · Jun 1, 2013

"Application popup: explorer.exe - Application Error : The instruction at 0xd5ec4f06 referenced memory at 0xd4fa1d38. The memory could not be read.

Click on OK to terminate the program"

Appeared when I shutdown. Not sure what it means.

usasma · Jun 1, 2013

Are you still getting BSOD's
Does the explorer.exe problem continue to appear after 3 consecutive reboots?
Please upload another set of reports so we can see what's going on inside the system.

Also, please do the following:
- open Event Viewer (eventvwr.msc)
- expand the Custom Views category (left click on the > next to the words "Custom Views")
- right click on Administrative Events
- select "Save all Events in Custom View as..."
- save the file as Admin.evtx
- zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
- upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).

talormanda · Jun 1, 2013

Did 3 or so reboots in a row with no error.

usasma · Jun 2, 2013

Not much evidence of recent explorer.exe issues. Found some dating from 24 May and earlier.
These blame a system file named DUI70.dll. Try running sfc.exe /scannow from an elevated (Run as administrator) Command Prompt

There are other signs of problems, but nothing real specific.
You have svchost.exe using your registry while the system tries to unload it (don't know what) and some problems with webcache files in IE (try clearing all history/cached in IE10).

Just a hunch, but have you scanned for viruses with at least 2 different scanners? Here's a list of some free scanners: Free Online AntiMalware Resources

talormanda · Jun 2, 2013

I did scannow like 3 times and it says nothing wrong and I cleared cache and disk cleanup for the webcache thing but idk how to fix that?

talormanda · Jun 2, 2013

I think I'm going to just reinstall windows tonight... Question is..I have an ssd, 2tb drive, and 32gb cache ssd thing. Wondering if i should still install raid drivers post install..

No virus I doubt that all I do is load up a game I never go on any sites.

usasma · Jun 2, 2013

RAID drivers should be one of the downloads listed at the Dell website for your system.
If they're older than mid-2012, then update them.

talormanda · Jun 2, 2013

I get them off intel because they are newer.

Ntfs.sys BSOD crash

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer