HELP BSOD ntoskrnl.exe at startup windows 10

Page 1 of 3 123 LastLast

  1. Posts : 13
    Windows 10 pro x64
       #1

    [HELP] ntoskrnl.exe and NTFS.sys BSOD at startup windows 10


    I clean installed my windows 3 days ago and i have multiple BSOD this week, and all of them happened on startup windows, before i clean install i have this BSOD too on startup(i have backed up those minidump before reinstall windows) , clean install doesn't help afterall
    (minidump that i attached is for the recent bsod)

    This BSOD only appear when i shut down my pc for 5+ hours and boot it up, if i regular restart or shut down for like 1 hour it wont causing BSOD (strange). It caused by ntoskrnl.exe. And im not OC my hardware. My ram was oc'ed via XMP profile when the first BSOD happened, and then i disable the XMP profile and still this morning i got the same BSOD too. I thought it was enabling XMP profile that causing the BSOD, apparently it is not.

    Ive checked my ram with memtest 4 passes and its normal, pict on attachment.

    Can someone interpret my bsod message? thanks..
    Last edited by reyzapper; 01 Jan 2016 at 04:34.
      My Computer


  2. Posts : 14,901
    Windows 10 Pro
       #2




    Diagnostics Test

     HDD TEST


    Run SeaTools to check the integrity of your HDD. SeaTools for DOS and Windows - How to Use - Windows 7 Help Forums

    Note   Note
    Do not run SeaTools on an SSD as the results will be invalid.


    Run chkdsk
    Disk Check - Windows 7 Help Forums

    Run HDTune to
    • scan for errors, no quick scan but full scan
    • check the health,
    • benchmark.

    It may take some time, but please take the time you need to perform it properly.
    Let me know what the results are
    • of the error scan,
    • make a screenshot of the health of every hard drive and post the screenshots,
    • post screenshots with the benchmark of the
      • transfer rate,
      • access time,
      • burst rate,
      • cpu usage.

    Please update following drivers
    Code:
    **************************Wed Dec 30 00:41:36.686 2015 (UTC + 1:00)************************** 
    MBfilt64.sys Fri Jul 31 05:40:32 2009 (4A7267B0) 
    BazisVirtualCDBus.sys Mon Aug 8 20:11:12 2011 (4E4026C0) 
    ISCTD64.sys Tue Nov 27 20:52:34 2012 (50B51A02) 
    netr28ux.sys Fri Jun 6 04:14:29 2014 (53912405) 
    edevmon.sys Fri Jul 18 15:11:31 2014 (53C91D03) 
    ehdrv.sys Fri Jul 18 15:11:50 2014 (53C91D16) 
    eamonm.sys Thu Jul 31 14:59:02 2014 (53DA3D96) 
    epfwwfpr.sys Thu Sep 11 18:06:11 2014 (5411C873) 
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии`` 
    http://www.carrona.org/drivers/driver.php?id=MBfilt64.sys 
    http://www.carrona.org/drivers/driver.php?id=BazisVirtualCDBus.sys 
    http://www.carrona.org/drivers/driver.php?id=ISCTD64.sys 
    http://www.carrona.org/drivers/driver.php?id=netr28ux.sys 
    http://www.carrona.org/drivers/driver.php?id=edevmon.sys 
    http://www.carrona.org/drivers/driver.php?id=ehdrv.sys 
    http://www.carrona.org/drivers/driver.php?id=eamonm.sys 
    http://www.carrona.org/drivers/driver.php?id=epfwwfpr.sys
    Code:
    **************************Wed Dec 30 00:41:36.686 2015 (UTC + 1:00)************************** 
    Loading Dump File [E:\Download\BSOD\DESKTOP-UPJBJ70-Wed_12_30_2015__75625_26\123015-10359-01.dmp] 
    Windows 8 Kernel Version 10586 MP (8 procs) Free x64 
    Built by: 10586.17.amd64fre.th2_release.151121-2308 
    System Uptime:0 days 14:34:05.335 
    *** ERROR: Module load completed but symbols could not be loaded for NTFS.sys 
    Probably caused by :Pool_Corruption ( nt!ExFreePool+bbf ) 
    BugCheck 139, {3, ffffd0002c07b420, ffffd0002c07b378, 0} 
    BugCheck Info: KERNEL_SECURITY_CHECK_FAILURE (139) 
    Arguments: 
    Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove). 
    Arg2: ffffd0002c07b420, Address of the trap frame for the exception that caused the bugcheck 
    Arg3: ffffd0002c07b378, Address of the exception record for the exception that caused the bugcheck 
    Arg4: 0000000000000000, Reserved 
    BUGCHECK_STR: 0x139 
    DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT 
    PROCESS_NAME: System 
    FAILURE_BUCKET_ID: 0x139_3_nt!ExFreePool 
    CPUID: "Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz" 
    MaxSpeed: 3500 
    CurrentSpeed: 3500 
    BIOS Version V1.8 
    BIOS Release Date 05/30/2014 
    Manufacturer MSI 
    Product Name MS-7821 
    Baseboard Product Z87-G45 GAMING (MS-7821) 
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии`` 
    **************************Sun Dec 27 01:56:46.530 2015 (UTC + 1:00)************************** 
    Loading Dump File [E:\Download\BSOD\DESKTOP-UPJBJ70-Wed_12_30_2015__75625_26\122715-9453-01.dmp] 
    Windows 8 Kernel Version 10586 MP (8 procs) Free x64 
    Built by: 10586.17.amd64fre.th2_release.151121-2308 
    System Uptime:0 days 20:48:14.174 
    *** ERROR: Module load completed but symbols could not be loaded for fileinfo.sys 
    Probably caused by :fileinfo.sys ( fileinfo+ece8 ) 
    BugCheck 3B, {c0000005, fffff80075864fe3, ffffd0002047dcf0, 0} 
    BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b) 
    Arguments: 
    Arg1: 00000000c0000005, Exception code that caused the bugcheck 
    Arg2: fffff80075864fe3, Address of the instruction which caused the bugcheck 
    Arg3: ffffd0002047dcf0, Address of the context record for the exception that caused the bugcheck 
    Arg4: 0000000000000000, zero. 
    BUGCHECK_STR: 0x3B 
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT 
    PROCESS_NAME: svchost.exe 
    FAILURE_BUCKET_ID: 0x3B_fileinfo+ece8 
    CPUID: "Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz" 
    MaxSpeed: 3500 
    CurrentSpeed: 3500 
    BIOS Version V1.8 
    BIOS Release Date 05/30/2014 
    Manufacturer MSI 
    Product Name MS-7821 
    Baseboard Product Z87-G45 GAMING (MS-7821)
      My Computers


  3. Posts : 13
    Windows 10 pro x64
    Thread Starter
       #3

    Ty for the reply axe0 ,
    Got BSOD again (Haven't done any diagnostic test yet or updating my driver) when boot up my pc this morning, but now caused by NTFS.sys . Before clean instal my windows, i got this NTFS.sys BSOD twice along with ntoskrnl.exe . Is it possible my HDD caused my BSOD?

    Running diagnostic test now...
    Last edited by reyzapper; 31 Dec 2015 at 02:53.
      My Computer


  4. Posts : 14,901
    Windows 10 Pro
       #4

    NTFS refers to the Windows File System what refers to the hard drive, same for the fileinfo.sys driver you might see in the code I added.
      My Computers


  5. Posts : 13
    Windows 10 pro x64
    Thread Starter
       #5

    axe0 said:
    NTFS refers to the Windows File System what refers to the hard drive, same for the fileinfo.sys driver you might see in the code I added.
    Got it..

    Here's the results..
    * For Seatools, I run each of the test twice just to make sure.
    * Seatools long generic test always stop at 99% but it passes, idk why..
    * For realtek audio, i downloded the latest version from my MB manufacturer
      My Computer


  6. Posts : 14,901
    Windows 10 Pro
       #6

    They're looking good.

    I have the same with SeaTools, likely a bug.

    Please update the drivers I posted earlier :)
      My Computers


  7. Posts : 13
    Windows 10 pro x64
    Thread Starter
       #7

    All drivers are updated. Let's see tommorow's boot

    UPDATE 1
    got another startup ntoskrnl.exe BSOD after 2 hours shutdown

    UPDATE 2
    got another startup NTFS.sys BSOD after 3 hours shutdown
    Last edited by reyzapper; 31 Dec 2015 at 19:38.
      My Computer


  8. Posts : 14,901
    Windows 10 Pro
       #8

    If you are using a program like Ccleaner please stop using it while troubleshooting.
    This because programs like Ccleaner remove dump files that are needed to troubleshoot.
    Or configure Ccleaner to not remove dump files:


    Do you have a spare hard drive you can use for testing?




    Diagnostic Test

     RAM TEST


    Run MemTest86+ to analyse your RAM. MemTest86+ - Test RAM - Windows 10 Forums

    Note   Note


    MemTest86+ needs to be run for at least 8 passes for conclusive results. Set it running before you go to bed and leave it overnight. We're looking for zero errors here. Even a single error will indicate RAM failure.

    Code:
    Probably caused by : memory_corruption
    Please uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from Nvidia. Be sure the clean install box is checked and only install the Graphics driver and the PhysX driver.
    Attachment 56407
    Code:
    ffffd000`25982808  fffff801`808d386cUnable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for nvlddmkm.sys
    *** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
     nvlddmkm+0x25386c
    6: kd> lmvm nvlddmkm
    start             end                 module name
    fffff801`80680000 fffff801`81177000   nvlddmkm T (no symbols)           
        Loaded symbol image file: nvlddmkm.sys
        Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
        Image name: nvlddmkm.sys
        Timestamp:        Tue Nov 24 19:15:37 2015 (5654A949)
        CheckSum:         00ABBCF5
        ImageSize:        00AF7000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
      My Computers


  9. Posts : 13
    Windows 10 pro x64
    Thread Starter
       #9

    Unfortunately i dont have spare hdd to test right now, but i can manage to get an ssd maybe? cuz i dont have one yet.

    I use ccleaner and have configured to not delete minidump file long ago.
    I have backed up all my minidump files since this bsod kicks my pc. If BSOD happens, should i put the recent minidump or all minidumps?

    for right now im going to retest my ram one by one, i'll let you know..
    and btw that nvidia driver crash is from the recent minidump or the past?
      My Computer


  10. Posts : 14,901
    Windows 10 Pro
       #10

    I noticed in the 2 most recent zips only 1 dump was present, that makes it difficult to get an overview of what happens.
    Keep the dumps in 1 place, the minidump folder.

    Both suggestions are from your 2 most recent uploads, because they contained both a single dump and you talked about multiple crashes.
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

й Designer Media Ltd
All times are GMT -5. The time now is 11:10.
Find Us




Windows 10 Forums