Constant BSOD in windows 8.1 on a month old custom PC. Related to ntoskrnl.exe and ntfs.sys

ndjones

Reputable
Feb 27, 2015
4
0
4,510
I have a month old build. The computer ran great for about 2 or 3 weeks then started receiving many BSOD's. The errors I'm told to look up later are mostly different, but include: Bad_pool_header, NTFS_file_system, Memory_management, PFN_List_Corrupt, and System_service_Exception.


I tried clearing both my SSD and HDD, then re-installing windows 8.1. And the problems persist.

I downloaded WhoCrashed to see what might be causing the problem. This program told me ntoskrnl.exe and ntfs.sys caused my computer to crash.

I have the most recent 6 crashes minidumps uploaded at the following link:
http://


Any help is appreciated. Thanks!
 
I looked at several of the memory dumps, some have these drivers others don't.
I would reset the BIOS to defaults and reconfigure and run memtest86 to confirm your memory hardware is working ok.
Then boot windows and run cmd.exe as an admin then run
sfc.exe /scan now
if it can not fix a error, then run
dism.exe /online /cleanup-image /restorehealth

I would also do a malwarebytes scan.
I would also try to update this driver:
\SystemRoot\system32\DRIVERS\t_mouse.sys Sun Dec 02 22:19:30 2012
iBall Advanced Mouse Input software (how mouse drivers should work changed on windows 8.1)
-----------
why do you have RW-Everything Read & Write Driver (arddrv.sys) installed?
http://rweverything.com/download/
one of the bugchecks was due to an attempt to write to readonly memory.

anyway: remove this driver (ASRock App Charger or update it to a 2013 or better version, this version corrupts memory)
\SystemRoot\system32\DRIVERS\AsrAppCharger.sys Tue May 10 01:28:46 2011

unrelated: but you might want to update your intel smart connect driver, if you use it.
\SystemRoot\System32\drivers\ISCTD64.sys Tue Nov 27 11:52:34 2012
https://downloadcenter.intel.com/search?keyword=Intel+Smart+Connect
 

ndjones

Reputable
Feb 27, 2015
4
0
4,510


I just received another BSOD with the error of Page_fault_in_nonpaged_area

memory dump here:
http://
 
\SystemRoot\system32\DRIVERS\cfosspeed6.sys Wed May 29 09:47:24 2013
now seems to be installed. Are you installing these? You will want to uninstall as many of these programs as you can until you know what is causing your bugchecks.
-------------
Note: Get tdsskiller see if you've got a rootkit http://media.kaspersky.com/utilities/VirusUtilities/EN/...
- I would also disable any chrome extensions. (stack corrupted while running chrome.)
----------
stack is corrupted, looks like a malware attack or memory corruption.
run a malwarebytes scan, then change the memory dump type from minidump to kernel or full memory dump.
then run verifier.exe and set some debug flags to force windows to look for common driver errors that cause memory corruption. http://www.sevenforums.com/crash-lockup-debug-how/65331-using-driver-verifier-identify-issues-drivers.html
reboot, and run until you bugcheck again, then post a link to the memory dump (file will be pretty large)

I don't see RW-Everything Read & Write Driver (arddrv.sys) running on this memory dump. Malware may have installed it to make changes to your machine and now don't need it to run.
I would run the system file checker, start cmd.exe as an admin then run
sfc.exe /scannow
and confirm you don't get any errors.
if you do then run this
dism.exe /online /cleanup-image /restorehealth
reboot and run the sfc.exe command again (sometimes malware will undo the fixed right after you fix them)

note: AsrAppCharger.sys Tue May 10 01:28:46 2011
still running in this memory dump file.
as to the


 

ndjones

Reputable
Feb 27, 2015
4
0
4,510


I did not install any drivers, unless they are somehow associated with tddskiller, or malwarebytes.

I ran both of those, malwarebytes with rootkit search on. And both came up with no threats detected.
I am now getting memory_management errors very frequently, enough to not be able to add minidumps or kernel-dumps to my onedrive.