Windows 7 programs crashing and BSOD caused by ntfs.sys

ok will do al tht plus i have another bsod minidump for you

This pinpoints the same driver again.

Can you tell me what version of DirectX you are running?

dear goodness i am losing the will to live here here is another minidump file

direct x 9 is installed

ok mse is reinstalled and my drivers for my card have been updated i am now doing your hjt thing now plus here is another minidump

I am losing the will to stay awake, it's 2.00AM here. Do the driver reinstall and the HJT log and I'll pick up where I left off tomorrow.

You should be on DirectX 11 but I doubt that will stop the crashes but the graphics driver reinstall might.

sam ok here is the hjt file i am off to bed aswell night thanx for your help


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 01:13:46, on 01/07/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Logitech . Product Registration.lnk = C:\Program Files (x86)\Logitech\Ereg\eReg.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7511 bytes

The latest minidump points to System Service, Drivers, Graphic Driver or Memory.

The HJT log appears to be clean of any suspicious entries but there is something very strange, apart from HJT you only have two running processes, have you any idea why? How many processes appear in Task Manager when you open it with no software running or internet explorer?

I see a program called MSI Afterburner which is for overclocking MSI graphics cards which you are not using. I have a hunch this could cause some conflicts with your existing card so try uninstalling it and see if that improves anything. Had you used it to overclock the existing card, if so return it to default settings.

52 processes are running but i think tht is what programs are running steam msi afterburner and the hjt thing the rest is just system processes and the msi afterburner is to set the fan speed on my graphics card not to overclock at 40 degrees the fan goes to like 60% 50 degrees 80% and 65 degrees 100% tht is the only resean for it since the reinstall of drivers for card there have been no blue screens but mse keeps doing tht thing plus i can run a quick scan but not a full scan shortly after starting the full scan the service stops and it gives me the error code 0x80016ba

OK, MSE is clearly having problems, uninstall it and put this in its place, you can always revert back to it once the system is stable.

http://www.avira.com/en/avira-free-antivirus This is a very popular free anti virus that I use myself to great effect.

Let me know how it runs after MSE is out of the picture. I should get a fairly quick reply about the process list in the HJT log.

here is another minidump and i will uninstall msi afterburner

msi afterburner is off mse of off and i installed avast antivirus not avira dont want to pay until this works with avast i am running a full system scan see how it goes

We are back to Ntfs.sys with this dump.

See how it goes with MSE and the MSI Afterburner out of the way.

well the full system scan is at 54% no bsods yet

ryt full system scan no errors no malware either

ok was playing my game america's army 3 it said aa3games has crashed i clicked close went to desktop and then bsod here is minidump

Just to check, did you completely uninstall MSE and the MSI software or just disable?

The Avira link was also for a free version but Avast is just as good.

This last dump is back to graphics again. and video memory

We saw a big improvement when the RAM voltage was increased, go back and check it has not reset back to the wrong voltage. Make sure before you leave the Bios you select Save before you exit. If the setting is still ok then increase the voltage but do not go more than 1.85V.

If you still get more BSOD's I think I will have to conclude that it is due to the RAM not being 100% compatible with your motherboard. The graphics card is most likely using part of the RAM which is giving misleading errors in the crash dumps.

The only other thing you could try is to borrow a good working graphics card from another PC, if that still causes errors then again I would have to suspect the RAM.

It would also be useful to borrow another make of RAM to test your system, preferably something that is in the motherboard compatibility list.

Another option you could try is putting the sticks in slot 2 & 4.

I would not like to advise you to buy new RAM sticks without proving that it is them first. It is up to you if you take that gamble but I would not like to be held responsible if new sticks make no difference. This is one of those occasions when I wish I had the PC infront of me.

See if you get any crashes when not running America's Army.

ok i have another nvidia graphics card tht i could use i have completely uninstalled mse ad msi afterburner and the ram i have contacted pcworld the place i bought the ram from and have said tht it is faulty i have the receipt and the packaging and have asked for a refund then my plan is to buy compatible ram of the list in my mobo book

upped the voltage the computer went to boot windows and aprently it blue screened ....i didnt see a blue screen it just rebooted but here is the minidump

That was a bug check code of 124 which confirms a hardware fault. As you had just changed the RAM voltage and are still below the maximum settings that does add to the evidence of the RAM being the problem.

I will keep my fingers firmly crossed that when you get the new compatible RAM this problem comes to a happy ending. Please post back to this thread once you have it installed, and hopefully with some good news. Make sure you set the correct voltage for the new RAM.