Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista performance & maintenance

Vista - BSOD and minidump points to ntfs.sys

Reply
 
Old 01-02-2008   #1 (permalink)


Vista Business x32
 
 

BSOD and minidump points to ntfs.sys

I have quite a new computer and recently i installed a version on windows Vista Business. I get the BSOD regularly showing such errors as BAD_POOL_CALLER
PAGE_FAULT_IN_NON_PAGED_AREA
tdx.sys stop 0x0000007E

As stated in another forum I downloaded the windows debugger and searched the minidump file setting the symbols location to the one stated in the microsoft website. Here is the dump file. I looked through sevaral of these and most of these seems to point to ntfs.sys

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\Mini010108-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*Symbol information
Executable search path is:
Windows Vista Kernel Version 6000 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6000.16575.x86fre.vista_gdr.071009-1548
Kernel base = 0x81800000 PsLoadedModuleList = 0x81911e10
Debug session time: Tue Jan 1 10:35:58.593 2008 (GMT+5)
System Uptime: 0 days 9:01:26.467
Loading Kernel Symbols
.................................................................................................................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904ab, 87ecbb10, 87ecb80c, 818e7fc5}

Probably caused by : Ntfs.sys ( Ntfs!NtOfsFreeReadContext+29 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 001904ab
Arg2: 87ecbb10
Arg3: 87ecb80c
Arg4: 818e7fc5
Debugging Details:
------------------


EXCEPTION_RECORD: 87ecbb10 -- (.exr 0xffffffff87ecbb10)
ExceptionAddress: 818e7fc5 (nt!ExFreePoolWithTag+0x0000045b)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 4b46664a
Attempt to read from address 4b46664a
CONTEXT: 87ecb80c -- (.cxr 0xffffffff87ecb80c)
eax=00000000 ebx=818e7b69 ecx=b22d3c4c edx=00000000 esi=4b466650 edi=4b466650
eip=818e7fc5 esp=87ecbbd8 ebp=87ecbc34 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!ExFreePoolWithTag+0x45b:
818e7fc5 0fb74ffa movzx ecx,word ptr [edi-6] ds:0023:4b46664a=????
Resetting default scope
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: STRING_DEREFERENCE
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
READ_ADDRESS: GetPointerFromAddress: unable to read from 819315ac
Unable to read MiSystemVaType memory at 819117e0
4b46664a
BUGCHECK_STR: 0x24
LAST_CONTROL_TRANSFER: from 8756dbe9 to 818e7fc5
STACK_TEXT:
87ecbc34 8756dbe9 4b466650 00000000 b23dac18 nt!ExFreePoolWithTag+0x45b
87ecbc4c 8759e95e b22d3b88 87ecbd14 83db6508 Ntfs!NtOfsFreeReadContext+0x29
87ecbc64 87597fc7 b23dac18 87ecbd14 876bef1f Ntfs!NtfsDeleteCcb+0x33
87ecbcb0 8757d126 83db6508 b23dad08 b23dac18 Ntfs!NtfsCommonClose+0x4bf
87ecbd44 81878fa0 00000000 00000000 83285ad0 Ntfs!NtfsFspClose+0x117
87ecbd7c 81a254e0 00000000 87ec0680 00000000 nt!ExpWorkerThread+0xfd
87ecbdc0 8189159e 81878ea3 00000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

FOLLOWUP_IP:
Ntfs!NtOfsFreeReadContext+29
8756dbe9 8b4730 mov eax,dword ptr [edi+30h]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: Ntfs!NtOfsFreeReadContext+29
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4549aceb
STACK_COMMAND: .cxr 0xffffffff87ecb80c ; kb
FAILURE_BUCKET_ID: 0x24_Ntfs!NtOfsFreeReadContext+29
BUCKET_ID: 0x24_Ntfs!NtOfsFreeReadContext+29
Followup: MachineOwner
---------
0: kd> .exr 0xffffffff87ecbb10
ExceptionAddress: 818e7fc5 (nt!ExFreePoolWithTag+0x0000045b)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 4b46664a
Attempt to read from address 4b46664a
0: kd> .cxr 0xffffffff87ecb80c
eax=00000000 ebx=818e7b69 ecx=b22d3c4c edx=00000000 esi=4b466650 edi=4b466650
eip=818e7fc5 esp=87ecbbd8 ebp=87ecbc34 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!ExFreePoolWithTag+0x45b:
818e7fc5 0fb74ffa movzx ecx,word ptr [edi-6] ds:0023:4b46664a=????

And theres another point. I am almost certain that i get the BSOD when i acces one file named $WINDOWS.~LS in one of my partitions. Other than that i also get the BSOD randomly. I tried defragmenting the hard disk but that ddnt fix it. I also tried the seatools analysis software on my seagate hard disk and ddnt show up any errors. I would greatly appreciate if someone could help me out with this. My pc is

Core 2 Duo E4400
2 GB Kingston DDR667 PC5300 memory
ExpertVision Nvidia Geforce 8600GT
onboard LAN and Sound
ASUS P5B motherboard
Benq DVD RW drive
LG Combo drive
Hauppauge WinTV TV card

Thats about all of it THANKS.

My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Solved BSOD (with minidump) Drivers
0x124 BSoD (with minidump) General Discussion
BSOD minidump analysis Vista performance & maintenance
on NTFS junction points Vista account administration
BSOD -- need help understanding minidump Vista General


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46