Windows 7 programs crashing and BSOD caused by ntfs.sys

[Mark56]

Don't bother with memtest again just see how the computer performs during normal use.

Just confirmed the correct voltage is 1.65V with a max of 1.85V I would stick with the lower setting first for testing.

 

[carmina917]

ok i am gonna test tht game of mine it was the program giving me the most problems

 

[carmina917]

ok so far no problems no blue screens but my microsoft security essentials has said it is not monitoring my pc and click here to start again once but apart from tht nothing i am going to find sumthing tht i can test my cpu as i think there is a fault with it

 

[Mark56]

i am going to find sumthing tht i can test my cpu as i think there is a fault with it

Please explain your reason for this.

The CPU is one of the least likely components to have a fault, they are very reliable and rarely develop faults unless they have been regularly overheated. Errors usually only occur when overclocked beyond the limits of the CPU.

There are tests available for CPU's which are often used to test the CPU's stability when being overclocked, this is a popular one. I have included the basic instructions plus links to more in depth instructions.

http://files.extremeoverclocking.com/file.php?f=103

Prime95 Setup:
- extract the contents of the zip file to a location of your choice
- double click on the executable file
- select "Just stress testing"
- select the "Blend" test. If you've already run MemTest overnight please run the "Small FFTs" test instead. (run all 3 if you find a problem and note how long it takes to error out with each)
- "Number of torture test threads to run" should equal the number of CPU's times 2 (if you're using hyperthreading).
The easiest way to figure this out is to go to Task Manager...Performance tab - and see the number of boxes under CPU Usage History
Then run the test for 6 to 24 hours - or until you get errors (whichever comes first).
This won't necessarily crash the system - but check the output in the test window for errors.
The Test selection box and the stress.txt file describes what components that the program stresses.

Windows 7 forum instructions.
http://www.sevenforums.com/tutorials/100352-cpu-stress-test-prime95.html

Prime95 instructions
http://www.playtool.com/pages/prime95/prime95.html

 

[Mark56]

If Microsoft Security Essentials is continuing to be unreliable you should uninstall it and then download it again, make sure you get the correct one for your version of windows and the correct bit rate 32 or 64.

I doubt if this bares any relation to the main problem.

 

[carmina917]

well it has done tht thing once but other than tht i think everything is ok i will keep you posted the pc has been on maybe an hour and no blue screens

 

[Mark56]

I think it likely that the only problem was the RAM voltage being too low. Early days though.

 

[carmina917]

ok well the game i have has crashed once i am restarting it but if it persists i might up the voltage one thing i noticed in cpuz my ram is running at 669.9mhz when the ram is 1333mhz does it run at an idling speed l=and when the ram is being used more go up to a max speed of 1333mhz?

 

[Mark56]

This is approaching the borders of my knowledge but as far as I know the frequency is only related to the supply voltage and remains constant. Try uping the voltage and see if it then shows the correct frequency.

You have got the sticks fitted in the correct slots?, your motherboard manual will have instructions for this, the normal positions are slots 1 & 3.

 

[carmina917]

ok pretty much i restarted my pc and well the game hasnt crashed or nothin thanx for your help if anything happens i will keep you posted but man you are good couldnt thank you anymore been trying since christmas to get this to work

 

[carmina917]

and what i was saying there it does idle tht number changes as i do more stuff
and the ram is in slots 1 and 3

 

[carmina917]

ok just having a few problems number 1 internet explorer is acting up a little it will crash randomly but not ht bad emm and while watching a youtube video there it said tht an amd video driver has just recovered and before it said tht it froze for about 10 seconds so we still have a few problems but otherwise its better no bsods at all

 

[carmina917]

**** ok first blue screen here is the minidump blue screen said due to video manager so looks like ram is fixed now the graphics card is giving me greif

 

[carmina917]

also i cannot at all run a microsoft security essentials scan without the pc freaking out and i end up haveing to hard reset it apsolutely no alternative the start bar dosent work mse goes faded like no responding and so does my windows background if i can't get this fixed it is going to have to go to a pc repair shop no other alternative

 

[Mark56]

First, I will do the best I can to help you fix this so no need to go and spend loads of money in a PC repair shop.

It does sound as if the RAM is now running correctly, this recent BSOD was caused by a different error not related to RAM. It is more related to video memory and the most likely cause is the driver.

It also sounds as if there is still a problem with MSE so uninstall and reinstall a fresh download as I suggested in post 30. If it still causes a problem then uninstall it and download this to take its place. http://www.avira.com/en/avira-free-antivirus. Please activate and update the software but do not run a scan yet. I would like to see the HJT log as instructed below before any scans are run.

Now for the graphics driver. Go to the manufacturer's site and download the driver for Windows 7 64bit and save it to your desktop. Go into Device Manager from the Control Panel and under Display Adapters find the graphics card and right click on it. Select Uninstall, confirm and close all the boxes. Then on the desktop double click on the new driver and it will install.

Now download this and save it to your desktop http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html. Now follow these instructions.

When the TrendMicro HJT install box appears, double click on the HJTInstall.exe. Click on Install.
* It will be installed by default here: C:\Program Files\Trend Micro\HijackThis.
* A shortcut to the application will also be placed on your Desktop.
* The program will open automatically after installation.
* The folder HijackThis is where you will find the HJT logs that you save.
* The first time you open HijackThis, check the Main Menu button at the bottom centre. When the main menu appears check the box "Show this window when I start HijackThis".
* Click on "Do a system scan and save logfile." When the log pops up in Notepad, copy and paste that file back here as a New Message in this forum.

This log is only for observation so I can see if you have any suspicious files in your system which could explain what is happening when you try to run MSE. Please do not use the Fix it button or try to do anything else with this software. It is completely safe and is used on a lot of forums in the Malware section. It should not be used to perform any alterations without the guidance of Malware Staff.

 

[carmina917]

Ok will do al tht plus I have another bsod minidump for you

 

[Mark56]

This pinpoints the same driver again.

Can you tell me what version of DirectX you are running?

 

[carmina917]

Dear goodness I am losing the will to live here here is another minidump file

 

[carmina917]

direct x 9 is installed

 

[carmina917]

Ok mse is reinstalled and my drivers for my card have been updated I am now doing your hjt thing now plus here is another minidump

 

[Mark56]

I am losing the will to stay awake, it's 2.00AM here. Do the driver reinstall and the HJT log and I'll pick up where I left off tomorrow.

You should be on DirectX 11 but I doubt that will stop the crashes but the graphics driver reinstall might.

 

[carmina917]

sam ok here is the hjt file i am off to bed aswell night thanx for your help


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 01:13:46, on 01/07/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Logitech . Product Registration.lnk = C:\Program Files (x86)\Logitech\Ereg\eReg.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7511 bytes

 

[Mark56]

The latest minidump points to System Service, Drivers, Graphic Driver or Memory.

The HJT log appears to be clean of any suspicious entries but there is something very strange, apart from HJT you only have two running processes, have you any idea why? How many processes appear in Task Manager when you open it with no software running or internet explorer?

I see a program called MSI Afterburner which is for overclocking MSI graphics cards which you are not using. I have a hunch this could cause some conflicts with your existing card so try uninstalling it and see if that improves anything. Had you used it to overclock the existing card, if so return it to default settings.

 

[carmina917]

52 processes are running but i think tht is what programs are running steam msi afterburner and the hjt thing the rest is just system processes and the msi afterburner is to set the fan speed on my graphics card not to overclock at 40 degrees the fan goes to like 60% 50 degrees 80% and 65 degrees 100% tht is the only resean for it since the reinstall of drivers for card there have been no blue screens but mse keeps doing tht thing plus i can run a quick scan but not a full scan shortly after starting the full scan the service stops and it gives me the error code 0x80016ba

 

[Mark56]

OK, MSE is clearly having problems, uninstall it and put this in its place, you can always revert back to it once the system is stable.

http://www.avira.com/en/avira-free-antivirus This is a very popular free anti virus that I use myself to great effect.

Let me know how it runs after MSE is out of the picture. I should get a fairly quick reply about the process list in the HJT log.