Multiple BSODs - FLTMGR, klif, ntoskrnl, ntfs, nvstor etc

sunilclaire656 · Oct 8, 2015

Hi

Brought a self-build 4/5 years ago. Several BSODs occurred soon after purchase. (if I remember correctly some were linked to graphics drivers according to their error codes).

About a year ago hard disk failed and a replacement installed. BSODs have occurred again in the past few months and are becoming more frequent (every few minutes sometimes!). Using bluescreen view and searching error codes there are so many I don't know where to start and fixing them! :cry:

Other (related?) issues:

windows updates fail a lot and windows always asks me to "verify" my account. when i try to do this it is unable to connect to the network (however i can browse the web as normal)
MS Office becomes fails every few weeks and requires re-installation (sometimes have to use those downloadable FixIt tools from Microsoft to do this).
Kaspersky often pops up saying it has failed to start.
one of the fans inside the computer sounds like it is undergoing a bit of a struggle sometimes (noticeably louder)
when the harddrive was replaced a an extra fan was installed by the repair shop and an extra vent added to the case

Attached is the DM log.
Your help is much appreciated, Cheers

axe0 · Oct 8, 2015

Hi sunilclaire656,

Welcome to the 8forums.

There are many causes, pretty much every crash I have checked has another cause although the error codes are sometimes the same.

Please uninstall Kaspersky, it is possible a problem with the date of Kaspersky or corruption when updating.
Please uninstall Malwarebytes, it has been marked multiple times as with Kaspersky.
Please reinstall Google Chrome to ensure you have the most recent version, remove the data history too. If you don't want to loose any bookmark, setting or extension enable synchronisation
Please check Nvidia for the storage driver updates
Please test your hard drive(s)

Note

You can of course install Kaspersky and Malwarebytes again when they are uninstalled, I suspect the dates are possibly causing problems

Diagnostics Test

HDD TEST

Run SeaTools to check the integrity of your HDD. SeaTools for DOS and Windows - How to Use - Windows 7 Help Forums

Note

Do not run SeaTools on an SSD as the results will be invalid.

Run chkdsk http://www.sevenforums.com/tutorials/433-disk-check.html

Above is the first notice when looking at the first couple of crashes.

Kaspersky driver

Code:

*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys

3: kd> lmvm klif
start             end                 module name
fffff801`73c83000 fffff801`73d71000   klif     T (no symbols)           
    Loaded symbol image file: klif.sys
    Image path: \SystemRoot\system32\DRIVERS\klif.sys
    Image name: [U]klif.sys[/U]
    Timestamp:        [COLOR=#ff0000][U]Tue Jun 23 17:12:16 2015[/U][/COLOR] (55897750)
    CheckSum:         000ED288
    ImageSize:        000EE000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Malwarebytes

Code:

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x1

[COLOR=#ff0000]PROCESS_NAME:  mbam.exe[/COLOR]

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre

Nvidia Storage driver

Code:

*** WARNING: Unable to verify timestamp for nvstor.sys
*** ERROR: Module load completed but symbols could not be loaded for nvstor.sys

2: kd> lmvm nvstor
start             end                 module name
fffff800`69a00000 fffff800`69a2b000   nvstor   T (no symbols)           
    Loaded symbol image file: nvstor.sys
    Image path: \SystemRoot\System32\drivers\nvstor.sys
    Image name: [U]nvstor.sys[/U]
    Timestamp:        [COLOR=#ff0000][U]Tue Sep 13 01:53:04 2011[/U][/COLOR] (4E6E9B60)
    CheckSum:         00034558
    ImageSize:        0002B000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

NTFS is the file system

Code:

STACK_TEXT:  
ffffd001`a23a7bf0 fffff801`8c3b27fc : ffffe001`767e7180 ffffc001`ed3d2a58 ffffd001`a23a7eb1 fffff803`9a1099c0 : [COLOR=#FF0000]Ntfs[/COLOR]!NtfsCheckAttributeRecord+0x358
ffffd001`a23a7c70 fffff801`8c3a417e : ffffe001`79293888 ffffd001`a23a7eb1 ffffe001`767e7180 00000000`01bc9800 : [COLOR=#FF0000]Ntfs[/COLOR]!NtfsCheckFileRecord+0x161
ffffd001`a23a7d00 fffff801`8c3a4354 : 00000000`00000001 00000000`00001000 ffffe001`7a2cd080 00000000`00000001 : [COLOR=#FF0000]Ntfs[/COLOR]!NtfsReadMftRecord+0x289
ffffd001`a23a7e10 fffff801`8c3a3c98 : ffffb000`607c0a48 ffffb000`607c0a48 ffffe001`740c9b80 ffffc001`f7f9d0b8 : [COLOR=#FF0000]Ntfs[/COLOR]!NtfsReadFileRecord+0x74
ffffd001`a23a7f00 fffff801`8c3b28b3 : ffffc001`f7f9d010 ffffc001`ed3d2b80 ffffc001`ed3d2b01 ffffc001`00010000 : [COLOR=#FF0000]Ntfs[/COLOR]!NtfsLookupInFileRecord+0x68
ffffd001`a23a7f90 fffff801`8c3cc637 : ffffc001`4946744e ffffe001`787f3518 ffffe001`7a2cd080 00000000`20206f49 : [COLOR=#FF0000]Ntfs[/COLOR]!FindFirstIndexEntry+0x53
ffffd001`a23a8020 fffff801`8c3add99 : ffffc001`fa056140 ffffc001`ed3d2b80 ffffe001`7871a3f8 00000000`0000002a : [COLOR=#FF0000]Ntfs[/COLOR]!NtfsRestartIndexEnumeration+0x147
ffffd001`a23a8270 fffff801`8c3ca652 : 00000000`00000000 ffffe001`7871a010 00000000`00000000 ffffe001`755421c0 : [COLOR=#FF0000]Ntfs[/COLOR]!NtfsQueryDirectory+0x9c9
ffffd001`a23a8620 fffff801`8c3cab46 : 00000000`00000000 ffffe001`7871a010 ffffe001`7871a001 ffffd001`a23a8720 : [COLOR=#FF0000]Ntfs[/COLOR]!NtfsCommonDirectoryControl+0xa2
ffffd001`a23a8660 fffff801`8c073b1e : ffffe001`7871a3f8 ffffe001`7871a010 ffffe001`79293888 ffffd001`a23a8688 : [COLOR=#FF0000]Ntfs[/COLOR]!NtfsFsdDirectoryControl+0xc6
ffffd001`a23a86d0 fffff801`8c0720c2 : ffffd001`a23a8790 ffffe001`767e6380 ffffe001`79df0780 ffffe001`7871a010 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2ce
ffffd001`a23a8770 fffff803`3e7cd140 : 00000000`00000002 ffffd001`a23a8851 ffffe001`79df0780 ffffe001`79df0780 : FLTMGR!FltpDispatch+0xb2
ffffd001`a23a87d0 fffff803`3e88668f : ffffffff`80000590 00000000`00000000 00000000`00000000 ffffe001`7a2cd080 : nt!IopSynchronousServiceTail+0x160
ffffd001`a23a88a0 fffff803`3e56f1b3 : ffffd001`a23a8958 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtQueryDirectoryFile+0xcb
ffffd001`a23a8960 fffff803`3e567620 : fffff801`8c0a0ba5 ffffe001`00000102 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
ffffd001`a23a8b68 fffff801`8c0a0ba5 : ffffe001`00000102 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiServiceLinkage
ffffd001`a23a8b70 fffff801`8c0a11b7 : 00000000`00000000 ffffe001`78da9580 00000000`00000058 00000000`00000000 : FLTMGR!FltpNormalizeNameComponent+0x91
ffffd001`a23a8c80 fffff801`8c09e601 : ffffe001`78da0001 ffffe001`00000017 00000000`00000059 ffffe001`78da9580 : FLTMGR!FltpExpandShortNames+0x1bf
ffffd001`a23a8d10 fffff801`8c09e65e : ffffe001`78da9580 ffffd001`a23a0000 00000000`00000000 00000000`00000000 : FLTMGR!FltpGetNormalizedFileNameWorker+0x159
ffffd001`a23a8d50 fffff801`8c09e275 : 00000000`00000150 ffffe001`656c6946 ffffd001`a23a90b8 00000000`00000000 : FLTMGR!FltpGetNormalizedFileName+0x1a
ffffd001`a23a8da0 fffff801`8c0a4e83 : ffffe001`78da9580 ffffe001`767ea670 00000000`00000000 fffff801`8c072a3d : FLTMGR!FltpCreateFileNameInformation+0x174
ffffd001`a23a8dd0 fffff801`8c079fe1 : ffffe001`78da9580 00000000`00000000 00000000`00000401 00000000`00000000 : FLTMGR!CreateTemporaryFileNameInformation+0x3b
ffffd001`a23a8e20 fffff801`8c07772e : ffffe001`78da9580 00000000`00000000 00000000`00000000 00000000`00000000 : FLTMGR!HandleStreamListNotSupported+0x165
ffffd001`a23a8e60 fffff801`8c07910a : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe001`7a3ab920 : FLTMGR!FltpGetFileNameInformation+0x11e
ffffd001`a23a8ef0 fffff801`8d610eb5 : ffffe001`78da9580 ffffe001`7466b820 00000000`00000000 ffffe001`761c5001 : FLTMGR!FltGetFileNameInformation+0x14a
ffffd001`a23a8f80 fffff801`8c09e75b : ffffe001`7466b820 00000000`00000000 ffffd001`a23a9038 fffff803`3e485071 : luafv!LuafvGenerateFileName+0x55
ffffd001`a23a8fb0 fffff801`8c09e4d7 : ffffe001`7466b800 ffffe001`7466b820 00000000`00000000 fffff801`8c077ef2 : FLTMGR!FltpCallOpenedFileNameHandler+0x83
ffffd001`a23a8ff0 fffff801`8c09e65e : ffffe001`7466b820 ffffd001`a23a4000 00000000`00000000 ffffe001`7761f010 : FLTMGR!FltpGetNormalizedFileNameWorker+0x2f
ffffd001`a23a9030 fffff801`8c09e275 : 00000000`00000000 ffffe001`7a3ab920 00000000`00000000 ffffe001`78f4db80 : FLTMGR!FltpGetNormalizedFileName+0x1a
ffffd001`a23a9080 fffff801`8c0a4e83 : ffffe001`7466b820 ffffe001`767ea670 00000000`00000000 fffff801`8c072a3d : FLTMGR!FltpCreateFileNameInformation+0x174
ffffd001`a23a90b0 fffff801`8c079fe1 : ffffe001`7466b820 ffffe001`7761f010 00000000`00000401 00000000`00000000 : FLTMGR!CreateTemporaryFileNameInformation+0x3b
ffffd001`a23a9100 fffff801`8c07772e : ffffe001`7466b820 00000000`00000000 ffffe001`7761f010 00000000`00000000 : FLTMGR!HandleStreamListNotSupported+0x165
ffffd001`a23a9140 fffff801`8c07910a : 00000000`00000000 00000000`00000000 ffffe001`7761f010 ffffe001`7a3ab920 : FLTMGR!FltpGetFileNameInformation+0x11e
ffffd001`a23a91d0 fffff801`8ce1cc0d : ffffe001`7466b820 ffffc001`fbf80c00 ffffe001`761c5010 00000000`00000005 : FLTMGR!FltGetFileNameInformation+0x14a
ffffd001`a23a9260 ffffe001`7466b820 : ffffc001`fbf80c00 ffffe001`761c5010 00000000`00000005 00000000`00000001 : [COLOR=#FF0000]klif[/COLOR]+0x19c0d
ffffd001`a23a9268 ffffc001`fbf80c00 : ffffe001`761c5010 00000000`00000005 00000000`00000001 fffff801`8cea2892 : 0xffffe001`7466b820
ffffd001`a23a9270 ffffe001`761c5010 : 00000000`00000005 00000000`00000001 fffff801`8cea2892 ffffe001`78f05bd8 : 0xffffc001`fbf80c00
ffffd001`a23a9278 00000000`00000005 : 00000000`00000001 fffff801`8cea2892 ffffe001`78f05bd8 ffffe001`00000401 : 0xffffe001`761c5010
ffffd001`a23a9280 00000000`00000001 : fffff801`8cea2892 ffffe001`78f05bd8 ffffe001`00000401 ffffd001`a23a92b0 : 0x5
ffffd001`a23a9288 fffff801`8cea2892 : ffffe001`78f05bd8 ffffe001`00000401 ffffd001`a23a92b0 ffffc001`fbf80c50 : 0x1
ffffd001`a23a9290 ffffe001`78f05bd8 : ffffe001`00000401 ffffd001`a23a92b0 ffffc001`fbf80c50 00000000`00000000 : [COLOR=#FF0000]klif[/COLOR]+0x9f892
ffffd001`a23a9298 ffffe001`00000401 : ffffd001`a23a92b0 ffffc001`fbf80c50 00000000`00000000 00000000`00000007 : 0xffffe001`78f05bd8
ffffd001`a23a92a0 ffffd001`a23a92b0 : ffffc001`fbf80c50 00000000`00000000 00000000`00000007 ffffc001`fbf80c50 : 0xffffe001`00000401
ffffd001`a23a92a8 ffffc001`fbf80c50 : 00000000`00000000 00000000`00000007 ffffc001`fbf80c50 fffff801`8cea5ab0 : 0xffffd001`a23a92b0
ffffd001`a23a92b0 00000000`00000000 : 00000000`00000007 ffffc001`fbf80c50 fffff801`8cea5ab0 ffffe001`78f05bd8 : 0xffffc001`fbf80c50

sunilclaire656 · Oct 8, 2015

Hi,

I have uninstalled kasperksy, malwarebytes and chrome which i have reinstalled.
I will not reinstall kaspersky of malware bytes for the moment (will windows defender be sufficient for protection?)
I have updated the nvidia storage controller (to version 11.1.0.43) from this site: NVIDIA nForce Serial ATA Controller Drivers Download for Windows 10, 8.1, 7, Vista, XP

I tried running the SeaTools program to check hard drive but it didnt detect any drives (I tried pressing rescan a few times but no drives appear as they do in the screenshot on the guide page)?
should i be worried?! googling this someone suggested "Flip your controller to IDE mode (from AHCI) in the BIOS before booting Seatools." in a forum but i couldnt find this option in the BIOS.

i have ran check disk both in windows and through the cmd prompt so it runs on start up - no errors are detected/fixes applied.

A few hours ago the monitor display turned off and on a few times with error messages popping up saying something along the lines of "AMD controller failed but was successfully restarted".

Thank you,

axe0 · Oct 8, 2015

It is better to have at least Malwarebytes along with Windows Defender for an extra layer of protection.
A good AV + a good AM + your own attention on the internet should be enough.

Please fill in your system specs

Please follow this tutorial and download the tool. The tool will give you detailed information about your system specs, please fill in your system specs more completely.

How to fill in your system specs:

sunilclaire656 · Oct 8, 2015

Hi

I have reinstalled malwarebytes and filled in system specs as best I could (done manually)

Had another BSOD just now so have attached the log. And also the AMD control centre crash and recovery message again with screen flicking off and on.

Cheers

axe0 · Oct 8, 2015

Some old drivers.
Realtek update
Nvidia update

Code:

1: kd> lmvm Rtnic64
start             end                 module name
fffff800`99b2a000 fffff800`99b3c000   Rtnic64    (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\Rtnic64.sys
    Image name: [U]Rtnic64.sys[/U]
    Timestamp:        [COLOR=#ff0000][U]Fri May 30 17:12:23 2008[/U][/COLOR] (48401957) // Realtek Ethernet NIC driver
    CheckSum:         00015B78
    ImageSize:        00012000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

1: kd> lmvm nvmf6264
start             end                 module name
fffff800`99b55000 fffff800`99ba8a80   nvmf6264   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\nvmf6264.sys
    Image name: [U]nvmf6264.sys[/U]
    Timestamp:        [COLOR=#ff0000][U]Fri Mar 05 02:04:39 2010[/U][/COLOR] (4B9058A7) // nVidia nForce network driver
    CheckSum:         000565B2
    ImageSize:        00053A80
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

1: kd> lmvm nvstor64
start             end                 module name
fffff800`9875c000 fffff800`9879b000   nvstor64   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\nvstor64.sys
    Image name: [U]nvstor64.sys[/U]
    Timestamp:        [COLOR=#ff0000][U]Fri Apr 09 11:22:41 2010[/U][/COLOR] (4BBEF1E1) // nVidia Storage Driver (nForce chipset driver)
    CheckSum:         0003FFC4
    ImageSize:        0003F000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

sunilclaire656 · Oct 9, 2015

Hi

I have updated the above listed drivers (I hope!) and a few others (AMD graphics, monitor).

For the nVidia storage driver I wasn't sure where to find it on the Nvidia driver page so downloaded the following driver :

NVIDIA nForce Serial ATA Controller Drivers Download for Windows 10, 8.1, 7, Vista, XP

Driver Version: 11.1.0.43
Release Date: 2010-04-09
File Size: 62.87M
Supported OS: Windows 10 64 bit, Windows 8.1 64bit, Windows 7 64bit, Windows Vista 64bit

Also had a whole load of BSODs throughout today whilst trying to update things... I have attached a new DM log..

Also is there any free tool to keep drivers up to date or at least identify outdated ones? ... windows update doesn't seem to provide the latest ones.

Cheers

axe0 · Oct 9, 2015

Warning

Programs that claim to update your drivers install either the wrong or corrupted drivers.
Never install any driver of such programs

If there is anyone telling you to do so, ignore them for the stability of your system.
Recently I helped someone who had used Driver Booster 3, a program to update drivers.
He ended up with installing Windows all over again, the drivers were all corrupt (thanks to DB3) and he didn't knew what drivers were updated through that program. He could kept stressing the drivers to find the corrupted drivers, but that could take weeks before all the drivers were restored.

The problem is that you install drivers from another site then Nvidia self and that causes problems.
I can't either find a source of Nvidia to download new drivers, so you'll have to contact Nvidia for it.

Multiple BSODs - FLTMGR, klif, ntoskrnl, ntfs, nvstor etc

sunilclaire656

New Member

My Computer

System One

axe0

BSOD Analyst & Security Analyst

HDD TEST

My Computer

System One

sunilclaire656

New Member

My Computer

System One

axe0

BSOD Analyst & Security Analyst

My Computer

System One

sunilclaire656

New Member

My Computer

System One

axe0

BSOD Analyst & Security Analyst

My Computer

System One

sunilclaire656

New Member

My Computer

System One

axe0

BSOD Analyst & Security Analyst

My Computer

System One