Another BSOD - NTFS_FILE_SYSTEM
-
Another BSOD - NTFS_FILE_SYSTEM
Alright, I was having some sound card errors, outlined here. I pulled the sound card, and that seemed to solve the problem,so that we don't have sound now, until we can get a new card, but no big.
Today, however, I got a new BSOD:
Opened log file 'c:\debuglog.txt'
Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [E:\WINDOWS\Minidump\Mini022608-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: E:\WINDOWS;E:\WINDOWS\system32;E:\WINDOWS\system32 \drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Tue Feb 26 15:12:29.578 2008 (GMT-5)
System Uptime: 0 days 5:06:30.144
Loading Kernel Symbols
.................................................. .................................................. .................
Loading User Symbols
Loading unloaded module list
..............
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1902fe, b9a786f8, b9a783f4, f7688bf5}
Probably caused by : hardware ( Ntfs!NtfsNonCachedIo+28 )
Followup: MachineOwner
---------
kd> !analyze -v;r;kv;lmtn;.logclose;q
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 001902fe
Arg2: b9a786f8
Arg3: b9a783f4
Arg4: f7688bf5
Debugging Details:
------------------
EXCEPTION_RECORD: b9a786f8 -- (.exr 0xffffffffb9a786f8)
.exr 0xffffffffb9a786f8
ExceptionAddress: f7688bf5 (Ntfs!NtfsNonCachedIo+0x00000028)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 468a5a75
Attempt to read from address 468a5a75
CONTEXT: b9a783f4 -- (.cxr 0xffffffffb9a783f4)
.cxr 0xffffffffb9a783f4
eax=00000000 ebx=00000000 ecx=8669be14 edx=e18698a0 esi=e18698a0 edi=00002200
eip=f7688bf5 esp=b9a787c0 ebp=b9a7897d iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00210286
Ntfs!NtfsNonCachedIo+0x28:
f7688bf5 c48b75088a46 les ecx,fword ptr [ebx+468A0875h] ds:0023:468a0875=????????????
.cxr
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: firefox.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
READ_ADDRESS: 468a5a75
BUGCHECK_STR: 0x24
EXCEPTION_DOESNOT_MATCH_CODE: This indicates a hardware error.
Instruction at f7688bf5 does not read/write to 468a5a75
LAST_CONTROL_TRANSFER: from 70f768de to f7688bf5
MISALIGNED_IP:
Ntfs!NtfsNonCachedIo+28
f7688bf5 c48b75088a46 les ecx,fword ptr [ebx+468A0875h]
STACK_TEXT:
b9a7897d 70f768de 60b9a78a a08669bc 00e18698 Ntfs!NtfsNonCachedIo+0x28
WARNING: Frame IP not in any known module. Following frames may be wrong.
b9a7899d 8c8669bc 00b9a78b 00000000 00000000 0x70f768de
b9a789a1 00b9a78b 00000000 00000000 00000000 0x8c8669bc
b9a789a5 00000000 00000000 00000000 00000000 0xb9a78b
FOLLOWUP_IP:
Ntfs!NtfsNonCachedIo+28
f7688bf5 c48b75088a46 les ecx,fword ptr [ebx+468A0875h]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: Ntfs!NtfsNonCachedIo+28
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: hardware
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: .cxr 0xffffffffb9a783f4 ; kb
MODULE_NAME: hardware
FAILURE_BUCKET_ID: IP_MISALIGNED_Ntfs.sys
BUCKET_ID: IP_MISALIGNED_Ntfs.sys
Followup: MachineOwner
---------
eax=ffdff13c ebx=b9a786f8 ecx=00000000 edx=00000000 esi=b9a78a70 edi=c0000005
eip=8053354e esp=b9a781d0 ebp=b9a781e8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200286
nt!KeBugCheckEx+0x1b:
8053354e 5d pop ebp
ChildEBP RetAddr Args to Child
b9a781e8 f7695fdb 00000024 001902fe b9a786f8 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
b9a78218 f7694c12 b9a78a70 b9a78244 804e24f1 Ntfs!NtfsExceptionFilter+0x1cc (FPO: [Non-Fpo])
b9a78224 804e24f1 b9a7824c 00000000 b9a7824c Ntfs!NtfsFsdRead+0x249 (FPO: [Non-Fpo])
b9a7824c 804db49a b9a786f8 b9a78bfc b9a783f4 nt!_except_handler3+0x61 (FPO: [Uses EBP] [3,0,7])
b9a78270 804db46b b9a786f8 b9a78bfc b9a783f4 nt!ExecuteHandler2+0x26
b9a78320 8050a82e b9a786f8 b9a783f4 468a5a75 nt!ExecuteHandler+0x24
b9a786dc 804df235 b9a786f8 00000000 b9a7874c nt!KiDispatchException+0x13e (FPO: [Non-Fpo])
b9a78744 804df1e6 b9a7897d f7688bf5 badb0d00 nt!CommonDispatchException+0x4d (FPO: [0,20,0])
b9a78774 80566261 00000000 00000023 00000023 nt!KiExceptionExit+0x18a
b9a7897d 70f768de 60b9a78a a08669bc 00e18698 nt!RtlpAtomMapAtomToHandleEntry+0x28 (FPO: [Non-Fpo])
WARNING: Frame IP not in any known module. Following frames may be wrong.
b9a78989 00e18698 00005684 89000000 00000022 0x70f768de
b9a7898d 00000000 89000000 00000022 60000000 0xe18698
start end module name
804d7000 806eb500 nt ntoskrnl.exe Wed Feb 28 04:10:41 2007 (45E54711)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 01:59:05 2004 (41107B29)
b989b000 b98c5180 kmixer kmixer.sys Wed Jun 14 04:47:45 2006 (448FCD31)
b9b21000 b9b61280 HTTP HTTP.sys Thu Mar 16 20:33:09 2006 (441A03C5)
b9eaa000 b9efb480 srv srv.sys Mon Aug 14 06:34:39 2006 (44E051BF)
b9fec000 ba018400 mrxdav mrxdav.sys Wed Aug 04 02:00:49 2004 (41107B91)
ba24b000 ba25f400 wdmaud wdmaud.sys Wed Jun 14 05:00:44 2006 (448FD03C)
ba370000 ba37ed80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
ba6dc000 ba6df280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
bf012000 bf593900 nv4_disp nv4_disp.dll Wed Dec 05 05:17:08 2007 (47567AA4)
bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 08:47:34 2007 (45F013F6)
f5802000 f5819480 dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
f581a000 f583d000 Fastfat Fastfat.SYS Wed Aug 04 02:14:15 2004 (41107EB7)
f58dd000 f58fdf00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
f58fe000 f59c6a60 avg7core avg7core.sys Wed Oct 10 12:23:39 2007 (470CFC8B)
f59c7000 f5a35a00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
f5a52000 f5a54900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
f5a5e000 f5a88a00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
f5a89000 f5aaad00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
f5aab000 f5b0a0e0 vsdatant vsdatant.sys Wed Nov 14 17:43:05 2007 (473B79F9)
f5b0b000 f5b32c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
f5b33000 f5b8ae80 tcpip tcpip.sys Tue Oct 30 13:20:52 2007 (472767F4)
f5b8b000 f5b9d400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
f6ce6000 f6d19200 update update.sys Wed Aug 04 01:58:32 2004 (41107B08)
f6d1a000 f6d4a100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
f6de3000 f6df2900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
f6e13000 f6e23e00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
f6e24000 f6e3a680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
f6e3b000 f6e5d680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f6e5e000 f6e71900 parport parport.sys Wed Aug 04 01:59:04 2004 (41107B28)
f6e72000 f6e94e80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
f6e95000 f6ea8780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f6ea9000 f75c0480 nv4_mini nv4_mini.sys Wed Dec 05 05:20:59 2007 (47567B8B)
f762c000 f7646580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f7647000 f765b000 srescan srescan.sys Wed Oct 17 14:36:24 2007 (47165628)
f765b000 f7687a80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
f7688000 f7714400 Ntfs Ntfs.sys Fri Feb 09 06:10:31 2007 (45CC56A7)
f7715000 f7727f00 WudfPf WudfPf.sys Thu Sep 28 21:55:43 2006 (451C7D1F)
f7728000 f773e780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
f773f000 f7750f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
f7751000 f7770780 fltmgr fltmgr.sys Mon Aug 21 05:14:57 2006 (44E97991)
f7771000 f7788480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
f7789000 f77ae700 dmio dmio.sys Wed Aug 04 02:07:13 2004 (41107D11)
f77af000 f77cd880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
f77ce000 f77dea80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
f77df000 f780cd80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
f782e000 f7836c00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
f783e000 f7848500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f784e000 f785ac80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
f785e000 f7866e00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
f786e000 f787a200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f787e000 f7888500 viaagp viaagp.sys Wed Aug 04 02:07:42 2004 (41107D2E)
f78ae000 f78b9880 L8042pr2 L8042pr2.Sys Wed Dec 17 14:38:10 2003 (3FE0B0A2)
f78be000 f78cd760 LMouFlt2 LMouFlt2.Sys Wed Dec 17 14:38:27 2003 (3FE0B0B3)
f78ce000 f78d8380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
f78de000 f78ea180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
f78ee000 f78fc080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
f78fe000 f790a880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
f790e000 f7918200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f791e000 f7929d00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
f792e000 f7936900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
f796e000 f7977f00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
f797e000 f798c100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
f798e000 f7997480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
f79ae000 f79b6700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
f79be000 f79c6880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
f79fe000 f7a06700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
f7a3e000 f7a4c780 usbaudio usbaudio.sys Wed Aug 04 02:07:52 2004 (41107D38)
f7a4e000 f7a5cb80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
f7a6e000 f7a77200 amdk7 amdk7.sys Wed Aug 04 01:59:19 2004 (41107B37)
f7a7e000 f7a86d80 AN983 AN983.sys Thu Oct 25 02:42:09 2001 (3BD7B441)
f7a8e000 f7a9dd80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
f7a9e000 f7aaae00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
f7aae000 f7ab4200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
f7ab6000 f7aba900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f7abe000 f7ac6000 videX32 videX32.sys Fri Sep 21 05:49:09 2007 (46F39395)
f7ac6000 f7accd00 viaagp1 viaagp1.sys Wed Jul 02 06:08:01 2003 (3F02AF01)
f7b1e000 f7b22500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
f7b8e000 f7b93000 usbuhci usbuhci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f7b96000 f7b9c800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f7b9e000 f7b9f000 fdc fdc.sys unavailable (00000000)
f7ba6000 f7bac000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7bae000 f7bb3a00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7bb6000 f7bba880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
f7bbe000 f7bc2580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
f7bc6000 f7bca080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
f7bd6000 f7bdb000 flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)
f7bde000 f7be3f80 X4HSX32 X4HSX32.Sys Mon Mar 05 11:32:04 2007 (45EC4604)
f7be6000 f7beb200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
f7bee000 f7bf2a80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
f7bf6000 f7bfd880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
f7c16000 f7c1cc80 avg7rsxp avg7rsxp.sys Tue Jan 30 10:08:42 2007 (45BF5F7A)
f7c1e000 f7c25b80 usbccgp usbccgp.sys Wed Aug 04 02:08:45 2004 (41107D6D)
f7c3e000 f7c41000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
f7cc6000 f7cc8280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
f7cea000 f7cedc80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
f7cee000 f7cf0d00 itchfltr itchfltr.sys Fri Nov 15 14:32:42 2002 (3DD54BDA)
f7cf6000 f7cf8580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f7d16000 f7d19c80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f7d2e000 f7d2fb80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
f7d30000 f7d31100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7d32000 f7d33500 viaide viaide.sys Wed Aug 04 01:59:42 2004 (41107B4E)
f7d34000 f7d35700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
f7d4e000 f7d4fa80 ParVdm ParVdm.SYS Fri Aug 17 16:49:49 2001 (3B7D836D)
f7d50000 f7d51360 avgtdi avgtdi.sys Thu Aug 25 05:59:58 2005 (430D969E)
f7d52000 f7d53100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
f7d54000 f7d55280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
f7d5a000 f7d5bf00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
f7d5c000 f7d5d080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7d5e000 f7d5f080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
f7d60000 f7d61080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7d6a000 f7d6b080 avg7rsw avg7rsw.sys Tue Jul 26 08:10:51 2005 (42E6284B)
f7dc0000 f7dc1100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7e3b000 f7e3bc00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
f7f3b000 f7f3bb80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
f7f3c000 f7f3d000 avgclean avgclean.sys Mon Dec 03 07:09:01 2007 (4753F1DD)
f7f6a000 f7f6ad00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
Unloaded modules:
b989b000 b98c6000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9a06000 b9a31000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9a06000 b9a31000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9a06000 b9a31000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9a06000 b9a31000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba1d9000 ba204000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba228000 ba24b000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7e6d000 f7e6e000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba204000 ba228000 portcls.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba660000 ba66d000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba350000 ba35e000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7df2000 f7df4000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7bde000 f7be3000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7cc2000 f7cc5000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt
Any ideas?
-
Run MemTest again.
Run the manufacturers diagnostic on the hard drive.
Run check disk:
start Run... cmd
chkdsk /f
You will be told the volume is in use do you want to run on boot? Say Yes and reboot.