Windows 7 programs crashing and BSOD caused by ntfs.sys

By carmina917
Jun 29, 2011
Post New Reply
  1. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    Don't bother with memtest again just see how the computer performs during normal use.

    Just confirmed the correct voltage is 1.65V with a max of 1.85V I would stick with the lower setting first for testing.
  2. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    ok i am gonna test tht game of mine it was the program giving me the most problems
  3. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    ok so far no problems no blue screens but my microsoft security essentials has said it is not monitoring my pc and click here to start again once but apart from tht nothing i am going to find sumthing tht i can test my cpu as i think there is a fault with it
  4. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    Please explain your reason for this.

    The CPU is one of the least likely components to have a fault, they are very reliable and rarely develop faults unless they have been regularly overheated. Errors usually only occur when overclocked beyond the limits of the CPU.

    There are tests available for CPU's which are often used to test the CPU's stability when being overclocked, this is a popular one. I have included the basic instructions plus links to more in depth instructions.

    http://files.extremeoverclocking.com/file.php?f=103

    Prime95 Setup:
    - extract the contents of the zip file to a location of your choice
    - double click on the executable file
    - select "Just stress testing"
    - select the "Blend" test. If you've already run MemTest overnight please run the "Small FFTs" test instead. (run all 3 if you find a problem and note how long it takes to error out with each)
    - "Number of torture test threads to run" should equal the number of CPU's times 2 (if you're using hyperthreading).
    The easiest way to figure this out is to go to Task Manager...Performance tab - and see the number of boxes under CPU Usage History
    Then run the test for 6 to 24 hours - or until you get errors (whichever comes first).
    This won't necessarily crash the system - but check the output in the test window for errors.
    The Test selection box and the stress.txt file describes what components that the program stresses.

    Windows 7 forum instructions.
    http://www.sevenforums.com/tutorials/100352-cpu-stress-test-prime95.html

    Prime95 instructions
    http://www.playtool.com/pages/prime95/prime95.html
  5. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    If Microsoft Security Essentials is continuing to be unreliable you should uninstall it and then download it again, make sure you get the correct one for your version of windows and the correct bit rate 32 or 64.

    I doubt if this bares any relation to the main problem.
  6. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    well it has done tht thing once but other than tht i think everything is ok i will keep you posted the pc has been on maybe an hour and no blue screens
  7. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    I think it likely that the only problem was the RAM voltage being too low. Early days though.
  8. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    ok well the game i have has crashed once i am restarting it but if it persists i might up the voltage one thing i noticed in cpuz my ram is running at 669.9mhz when the ram is 1333mhz does it run at an idling speed l=and when the ram is being used more go up to a max speed of 1333mhz?
  9. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    This is approaching the borders of my knowledge but as far as I know the frequency is only related to the supply voltage and remains constant. Try uping the voltage and see if it then shows the correct frequency.

    You have got the sticks fitted in the correct slots?, your motherboard manual will have instructions for this, the normal positions are slots 1 & 3.
  10. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    ok pretty much i restarted my pc and well the game hasnt crashed or nothin thanx for your help if anything happens i will keep you posted but man you are good couldnt thank you anymore been trying since christmas to get this to work
  11. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    and what i was saying there it does idle tht number changes as i do more stuff
    and the ram is in slots 1 and 3
  12. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    ok just having a few problems number 1 internet explorer is acting up a little it will crash randomly but not ht bad emm and while watching a youtube video there it said tht an amd video driver has just recovered and before it said tht it froze for about 10 seconds so we still have a few problems but otherwise its better no bsods at all
  13. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    **** ok first blue screen here is the minidump blue screen said due to video manager so looks like ram is fixed now the graphics card is giving me greif

    Attached Files:

     
  14. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    also i cannot at all run a microsoft security essentials scan without the pc freaking out and i end up haveing to hard reset it apsolutely no alternative the start bar dosent work mse goes faded like no responding and so does my windows background if i can't get this fixed it is going to have to go to a pc repair shop no other alternative
  15. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    First, I will do the best I can to help you fix this so no need to go and spend loads of money in a PC repair shop.

    It does sound as if the RAM is now running correctly, this recent BSOD was caused by a different error not related to RAM. It is more related to video memory and the most likely cause is the driver.

    It also sounds as if there is still a problem with MSE so uninstall and reinstall a fresh download as I suggested in post 30. If it still causes a problem then uninstall it and download this to take its place. http://www.avira.com/en/avira-free-antivirus. Please activate and update the software but do not run a scan yet. I would like to see the HJT log as instructed below before any scans are run.

    Now for the graphics driver. Go to the manufacturer's site and download the driver for Windows 7 64bit and save it to your desktop. Go into Device Manager from the Control Panel and under Display Adapters find the graphics card and right click on it. Select Uninstall, confirm and close all the boxes. Then on the desktop double click on the new driver and it will install.

    Now download this and save it to your desktop http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html. Now follow these instructions.

    When the TrendMicro HJT install box appears, double click on the HJTInstall.exe. Click on Install.
    * It will be installed by default here: C:\Program Files\Trend Micro\HijackThis.
    * A shortcut to the application will also be placed on your Desktop.
    * The program will open automatically after installation.
    * The folder HijackThis is where you will find the HJT logs that you save.
    * The first time you open HijackThis, check the Main Menu button at the bottom centre. When the main menu appears check the box "Show this window when I start HijackThis".
    * Click on "Do a system scan and save logfile." When the log pops up in Notepad, copy and paste that file back here as a New Message in this forum.

    This log is only for observation so I can see if you have any suspicious files in your system which could explain what is happening when you try to run MSE. Please do not use the Fix it button or try to do anything else with this software. It is completely safe and is used on a lot of forums in the Malware section. It should not be used to perform any alterations without the guidance of Malware Staff.
  16. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    ok will do al tht plus i have another bsod minidump for you

    Attached Files:

  17. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    This pinpoints the same driver again.

    Can you tell me what version of DirectX you are running?
  18. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    dear goodness i am losing the will to live here here is another minidump file

    Attached Files:

  19. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    direct x 9 is installed
  20. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    ok mse is reinstalled and my drivers for my card have been updated i am now doing your hjt thing now plus here is another minidump

    Attached Files:

  21. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    I am losing the will to stay awake, it's 2.00AM here. Do the driver reinstall and the HJT log and I'll pick up where I left off tomorrow.

    You should be on DirectX 11 but I doubt that will stop the crashes but the graphics driver reinstall might.
  22. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    sam ok here is the hjt file i am off to bed aswell night thanx for your help :)


    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 01:13:46, on 01/07/2011
    Platform: Windows 7 SP1 (WinNT 6.00.3505)
    MSIE: Internet Explorer v9.00 (9.00.8112.16421)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
    C:\Program Files (x86)\Steam\Steam.exe
    C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    F2 - REG:system.ini: UserInit=userinit.exe
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
    O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
    O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
    O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
    O4 - Startup: Logitech . Product Registration.lnk = C:\Program Files (x86)\Logitech\Ereg\eReg.exe
    O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
    O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
    O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --
    End of file - 7511 bytes
  23. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    The latest minidump points to System Service, Drivers, Graphic Driver or Memory.

    The HJT log appears to be clean of any suspicious entries but there is something very strange, apart from HJT you only have two running processes, have you any idea why? How many processes appear in Task Manager when you open it with no software running or internet explorer?

    I see a program called MSI Afterburner which is for overclocking MSI graphics cards which you are not using. I have a hunch this could cause some conflicts with your existing card so try uninstalling it and see if that improves anything. Had you used it to overclock the existing card, if so return it to default settings.
  24. carmina917

    carmina917 Newcomer, in training Topic Starter Posts: 49

    52 processes are running but i think tht is what programs are running steam msi afterburner and the hjt thing the rest is just system processes and the msi afterburner is to set the fan speed on my graphics card not to overclock at 40 degrees the fan goes to like 60% 50 degrees 80% and 65 degrees 100% tht is the only resean for it since the reinstall of drivers for card there have been no blue screens but mse keeps doing tht thing plus i can run a quick scan but not a full scan shortly after starting the full scan the service stops and it gives me the error code 0x80016ba
  25. Mark56

    Mark56 TechSpot Paladin Posts: 2,271

    OK, MSE is clearly having problems, uninstall it and put this in its place, you can always revert back to it once the system is stable.

    http://www.avira.com/en/avira-free-antivirus This is a very popular free anti virus that I use myself to great effect.

    Let me know how it runs after MSE is out of the picture. I should get a fairly quick reply about the process list in the HJT log.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.