Windows 10: [HELP] ntoskrnl.exe and NTFS.sys BSOD at startup windows 10

I clean installed my windows 3 days ago and i have multiple BSOD this week, and all of them happened on startup windows, before i clean install i have this BSOD too on startup(i have backed up those minidump before reinstall windows) , clean install doesn't help afterall *Sad
(minidump that i attached is for the recent bsod)

This BSOD only appear when i shut down my pc for 5+ hours and boot it up, if i regular restart or shut down for like 1 hour it wont causing BSOD (strange). It caused by ntoskrnl.exe. And im not OC my hardware. My ram was oc'ed via XMP profile when the first BSOD happened, and then i disable the XMP profile and still this morning i got the same BSOD too. I thought it was enabling XMP profile that causing the BSOD, apparently it is not.

Ive checked my ram with memtest 4 passes and its normal, pict on attachment.

Can someone interpret my bsod message? thanks..

:)

 

how to fix this driver (ntoskrnl.exe ) causing blue screen

IRQL_NOT_LESS_OR_EQUAL 0x0000000a 00000000`00000000
00000000`000000ff 00000000`00000000 fffff803`79449f11
NTFS.sys NTFS.sys+c2a74 x64 ntoskrnl.exe+1756e0
C:\Windows\Minidump\021018-31156-01.dmp 4 15
16299

reinstalling windows does not work

i have tried all the possible solutions on net

 

bluescreen pops up driver_irql_not_less_or_equal

Original title: driver_irql_not_less_or_equal

got a new system amd a8 7600 with gigabyte motherboard.

win 10 clean install

there are times when i restart or boot up pc bluescreen pops up

dump files says it's ntfs.sys and ntoskrnl.exe

need help

 

Diagnostics Test

HDD TEST


Run SeaTools to check the integrity of your HDD. SeaTools for DOS and Windows - How to Use - Windows 7 Help Forums



Note Do not run SeaTools on an SSD as the results will be invalid.



Run chkdsk
Disk Check - Windows 7 Help Forums



Run HDTune to

• scan for errors, no quick scan but full scan
• check the health,
• benchmark.

It may take some time, but please take the time you need to perform it properly.
Let me know what the results are

• of the error scan,
• make a screenshot of the health of every hard drive and post the screenshots,
• post screenshots with the benchmark of the
  • transfer rate,
  • access time,
  • burst rate,
  • cpu usage.

Please update following drivers
Code: **************************Wed Dec 30 00:41:36.686 2015 (UTC + 1:00)************************** MBfilt64.sys Fri Jul 31 05:40:32 2009 (4A7267B0) BazisVirtualCDBus.sys Mon Aug 8 20:11:12 2011 (4E4026C0) ISCTD64.sys Tue Nov 27 20:52:34 2012 (50B51A02) netr28ux.sys Fri Jun 6 04:14:29 2014 (53912405) edevmon.sys Fri Jul 18 15:11:31 2014 (53C91D03) ehdrv.sys Fri Jul 18 15:11:50 2014 (53C91D16) eamonm.sys Thu Jul 31 14:59:02 2014 (53DA3D96) epfwwfpr.sys Thu Sep 11 18:06:11 2014 (5411C873) ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨`` http://www.carrona.org/drivers/driver.php?id=MBfilt64.sys http://www.carrona.org/drivers/driver.php?id=BazisVirtualCDBus.sys http://www.carrona.org/drivers/driver.php?id=ISCTD64.sys http://www.carrona.org/drivers/driver.php?id=netr28ux.sys http://www.carrona.org/drivers/driver.php?id=edevmon.sys http://www.carrona.org/drivers/driver.php?id=ehdrv.sys http://www.carrona.org/drivers/driver.php?id=eamonm.sys http://www.carrona.org/drivers/driver.php?id=epfwwfpr.sys[/quote] Code: **************************Wed Dec 30 00:41:36.686 2015 (UTC + 1:00)************************** Loading Dump File [E:\Download\BSOD\DESKTOP-UPJBJ70-Wed_12_30_2015__75625_26\123015-10359-01.dmp] Windows 8 Kernel Version 10586 MP (8 procs) Free x64 Built by: 10586.17.amd64fre.th2_release.151121-2308 System Uptime:0 days 14:34:05.335 *** ERROR: Module load completed but symbols could not be loaded for NTFS.sys Probably caused by :Pool_Corruption ( nt!ExFreePool+bbf ) BugCheck 139, {3, ffffd0002c07b420, ffffd0002c07b378, 0} BugCheck Info: KERNEL_SECURITY_CHECK_FAILURE (139) Arguments: Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove). Arg2: ffffd0002c07b420, Address of the trap frame for the exception that caused the bugcheck Arg3: ffffd0002c07b378, Address of the exception record for the exception that caused the bugcheck Arg4: 0000000000000000, Reserved BUGCHECK_STR: 0x139 DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT PROCESS_NAME: System FAILURE_BUCKET_ID: 0x139_3_nt!ExFreePool CPUID: "Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz" MaxSpeed: 3500 CurrentSpeed: 3500 BIOS Version V1.8 BIOS Release Date 05/30/2014 Manufacturer MSI Product Name MS-7821 Baseboard Product Z87-G45 GAMING (MS-7821) ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨`` **************************Sun Dec 27 01:56:46.530 2015 (UTC + 1:00)************************** Loading Dump File [E:\Download\BSOD\DESKTOP-UPJBJ70-Wed_12_30_2015__75625_26\122715-9453-01.dmp] Windows 8 Kernel Version 10586 MP (8 procs) Free x64 Built by: 10586.17.amd64fre.th2_release.151121-2308 System Uptime:0 days 20:48:14.174 *** ERROR: Module load completed but symbols could not be loaded for fileinfo.sys Probably caused by :fileinfo.sys ( fileinfo+ece8 ) BugCheck 3B, {c0000005, fffff80075864fe3, ffffd0002047dcf0, 0} BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b) Arguments: Arg1: 00000000c0000005, Exception code that caused the bugcheck Arg2: fffff80075864fe3, Address of the instruction which caused the bugcheck Arg3: ffffd0002047dcf0, Address of the context record for the exception that caused the bugcheck Arg4: 0000000000000000, zero. BUGCHECK_STR: 0x3B DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT PROCESS_NAME: svchost.exe FAILURE_BUCKET_ID: 0x3B_fileinfo+ece8 CPUID: "Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz" MaxSpeed: 3500 CurrentSpeed: 3500 BIOS Version V1.8 BIOS Release Date 05/30/2014 Manufacturer MSI Product Name MS-7821 Baseboard Product Z87-G45 GAMING (MS-7821)[/quote]

 

Ty for the reply axe0 ,
Got BSOD again (Haven't done any diagnostic test yet or updating my driver) when boot up my pc this morning, but now caused by NTFS.sys . Before clean instal my windows, i got this NTFS.sys BSOD twice along with ntoskrnl.exe . Is it possible my HDD caused my BSOD?

Running diagnostic test now...

 

NTFS refers to the Windows File System what refers to the hard drive, same for the fileinfo.sys driver you might see in the code I added.

 

Got it..

Here's the results..
* For Seatools, I run each of the test twice just to make sure.
* Seatools long generic test always stop at 99% but it passes, idk why..
* For realtek audio, i downloded the latest version from my MB manufacturer

 

They're looking good.

I have the same with SeaTools, likely a bug.

Please update the drivers I posted earlier *Smile

 

All drivers are updated. Let's see tommorow's boot

UPDATE 1
got another startup ntoskrnl.exe BSOD after 2 hours shutdown

UPDATE 2
got another startup NTFS.sys BSOD after 3 hours shutdown

 

If you are using a program like Ccleaner please stop using it while troubleshooting.
This because programs like Ccleaner remove dump files that are needed to troubleshoot.
Or configure Ccleaner to not remove dump files:




Do you have a spare hard drive you can use for testing?






Diagnostic Test

RAM TEST
*Name: Views: Size: Attachment 56407
Code: ffffd000`25982808 fffff801`808d386cUnable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for nvlddmkm.sys *** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys nvlddmkm+0x25386c 6: kd> lmvm nvlddmkm start end module name fffff801`80680000 fffff801`81177000 nvlddmkm T (no symbols) Loaded symbol image file: nvlddmkm.sys Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys Image name: nvlddmkm.sys Timestamp: Tue Nov 24 19:15:37 2015 (5654A949) CheckSum: 00ABBCF5 ImageSize: 00AF7000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4[/quote]

 

Unfortunately i dont have spare hdd to test right now, but i can manage to get an ssd maybe? cuz i dont have one yet.

I use ccleaner and have configured to not delete minidump file long ago.
I have backed up all my minidump files since this bsod kicks my pc. If BSOD happens, should i put the recent minidump or all minidumps?

for right now im going to retest my ram one by one, i'll let you know..
and btw that nvidia driver crash is from the recent minidump or the past?

 

I noticed in the 2 most recent zips only 1 dump was present, that makes it difficult to get an overview of what happens.
Keep the dumps in 1 place, the minidump folder.

Both suggestions are from your 2 most recent uploads, because they contained both a single dump and you talked about multiple crashes.

 

Ok thanks for the clarification, next time i'll keep the all dumps in one place.

 

Got BSOD Last night, now when shutdown the PC. This happened before i retest my ram.
Bug check string CRITICAL_PROCESS_DIED ntoskrnl.exe

 

The last dump hasn't been copied (correctly), after the ram test has zero errors check the dump location (C:\Windows\Minidump) for the most recent file.
Select the file, right click > copy > zip and upload the zip.