Question

Q: Frequent Blue Screen errors saying ntfs.sys Bugcheck code 0x24 (Windows 7 64-bit)

I have been getting increasingly frequent BSODs (blue screens of death). The last four have been caused by ntfs.sys, and previously I've had some caused by ntoskrnl.exe. I keep my computer updated using Windows update, and I've run chkdsk and other disk- and memory-scanning tools with no errors.

Also, yesterday I replaced all of my RAM modules with new upgraded modules from Kingston. But, unfortunately, I got a crash again last night at about 3am (left my computer on overnight).

 

I would love to upload my dump files to have someone take a look. I'm sure there are some clues in there, but I'm not sure how to read them. Thank you so much for your help!



* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Did this solve your problem?

Sorry this didn't help.


Hi,

Use Safe Mode as needed - repeatedly tap F8 as you boot.

Check this thread for information using BlueScreenView, MyEventViewer and other methods
to troubleshoot BlueScreens - top 3 replies (+1 other).

http://social.answers.microsoft.com/Forums/en-US/w7repair/thread/c675b7b8-795f-474d-a1c4-6b77b3fcd990

We can analyze the minidumps if you make them available from the SkyDrive or other file
sharing sites.

Zip or upload the contents of C:\Windows\minidump

Use SkyDrive to upload collected files and post screen shot/picture.
http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65

===========================================================

Remove ALL power and reseat the cards, memory, and cables (on both ends when possible)
- actually remove and replace - do not just snug.

The primary cause of this Bug_Check is disk issues however it can be caused by memory problems
and even antivirus/antispyware/security programs.

-----------------------------------

BCCode: 24      0x00000024

Cause

One possible cause of this bug check is disk corruption. Corruption in the NTFS file system or bad blocks (sectors) on the hard disk can induce this error. Corrupted SCSI and IDE drivers can also adversely affect the system's ability to read and write to disk, thus causing the error.

Another possible cause is depletion of nonpaged pool memory. If the nonpaged pool memory is completely depleted, this error can stop the system. However, during the indexing process, if the amount of available nonpaged pool memory is very low, another kernel-mode driver requiring nonpaged pool memory can also trigger this error.

Resolving the Problem

To debug this problem: Use the .cxr (Display Context Record) command with Parameter 3, and then use the kb (Display Stack Trace) command.

To resolve a disk corruption problem: Check Event Viewer for error messages from SCSI and FASTFAT (System Log) or Autochk (Application Log) that might help pinpoint the device or driver that is causing the error. Try disabling any virus scanners, backup programs, or disk defragmenter tools that continually monitor the system. You should also run hardware diagnostics supplied by the system manufacturer. For details on these procedures, see the owner's manual for your computer. RunChkdsk /f /r to detect and resolve any file system structural corruption. You must restart the system before the disk scan begins on a system partition.

To resolve a nonpaged pool memory depletion problem: Either add new physical memory to the computer (thus increasing the quantity of nonpaged pool memory available to the kernel), or reduce the number of files on the Services for Macintosh (SFM) volume.

BCCode: 24      0x00000024  <-- read this link
http://www.faultwire.com/solutions-fatal_error/NTFS-FILE-SYSTEM-0x00000024-*1051.html?order=votes

=============================================================

To check for Disk Issues - Use Safe Mode if needed - repeatedly tap F8 as you boot.

Run DiskCleanup - Start - All Programs - Accessories - System Tools - Disk Cleanup

Start - type in Search box -  COMMAND   find at top of list -  RIGHT CLICK  -  RUN AS ADMIN

sfc /scannow

How to Repair Windows 7 System Files with System File Checker
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Then run checkdisk (chkdsk).

How to Run Disk Check in Windows 7
http://www.sevenforums.com/tutorials/433-disk-check.html

==========================================

Memory tests do not catch all errors such as mismatched memory (possible even for sticks
that appear to be identical) and when faster memory is placed in system behind slower memory.
So it is best to also swap sticks in and out to check for those even if all memory tests fail to show
a problem.

To test RAM check here - let it run 4+ hours or so.  <-- best method
www.memtest.org

For the Vista/Windows 7 Memory Diagnostic Tool

Start - type in Search box ->  Memory - find Memory Diagnostics tool at top of list - Right Click -
RUN AS ADMIN follow the instructions

Windows Vista: How to Scan / Test your RAM or Memory with Windows Vista Memory Diagnostic
Tool
http://www.shivaranjan.com/2007/11/01/windows-vista-how-to-scan-test-your-ram-or-memory-with-windows-vista-memory-diagnostic-tool/

How to Run the Memory Diagnostics Tool in Windows 7
http://www.sevenforums.com/tutorials/715-memory-diagnostics-tool.html

Test Your Computer’s Memory Using Windows Vista Memory Diagnostic Tool
http://www.howtogeek.com/howto/windows-vista/test-your-computers-memory-using-windows-vista-memory-diagnostic-tool/

Hope this helps.

Rob Brown - Microsoft MVP - Windows and Devices for IT 2010 - current
Windows Insider MVP 2016 - current

Did this solve your problem?

Sorry this didn't help.


Hi, SpiritX...

I'm going through your list now, but I've done most of it already. Here's a link to all of my minidump files in a zip file, in case you are able to find something in there that I wasn't able to see.

 

http://dl.dropbox.com/u/17766574/Minidumps.zip

 

Thanks for your help! I'd love to get this fixed and behind me!

 

Tony

Tony

Did this solve your problem?

Sorry this didn't help.


Hi,

Located in Seattle myself.

Results verified by WinDBG, DumpCHK, and BlueScreenView.

The 3 latest Bug_Checks were 24 CAUSE ntfs.sys which is a Windows
component which means something else drove it into Fault.

BugCheck 24, {1904fb, fffff880039088d8, fffff88003908130, fffff880016e8027}
Probably caused by : Ntfs.sys ( Ntfs!NtfsCommonClose+1e7 )
FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsCommonClose+1e7

There is an implication that memory is involved however that is also
not definite.

I have not seen an instance where CA Antivirus/Security causes or
aggravates this issue however some others do so it could be part
of the issue. Probably would be a good idea to check with CA
Support if needed.

Of course RAID and BitLocker are other possibilities.

=======================================================

BCCode: 24      0x00000024

Remove ALL power and reseat the cards, memory, and cables (on both ends when possible)
- actually remove and replace - do not just snug.

The primary cause of this Bug_Check is disk issues however it can be caused by memory problems
and even antivirus/antispyware/security programs.

-----------------------------------

BCCode: 24      0x00000024

Cause

One possible cause of this bug check is disk corruption. Corruption in the NTFS file system or bad blocks (sectors) on the hard disk can induce this error. Corrupted SCSI and IDE drivers can also adversely affect the system's ability to read and write to disk, thus causing the error.

Another possible cause is depletion of nonpaged pool memory. If the nonpaged pool memory is completely depleted, this error can stop the system. However, during the indexing process, if the amount of available nonpaged pool memory is very low, another kernel-mode driver requiring nonpaged pool memory can also trigger this error.

Resolving the Problem

To debug this problem: Use the .cxr (Display Context Record) command with Parameter 3, and then use the kb (Display Stack Trace) command.

To resolve a disk corruption problem: Check Event Viewer for error messages from SCSI and FASTFAT (System Log) or Autochk (Application Log) that might help pinpoint the device or driver that is causing the error. Try disabling any virus scanners, backup programs, or disk defragmenter tools that continually monitor the system. You should also run hardware diagnostics supplied by the system manufacturer. For details on these procedures, see the owner's manual for your computer. RunChkdsk /f /r to detect and resolve any file system structural corruption. You must restart the system before the disk scan begins on a system partition.

To resolve a nonpaged pool memory depletion problem: Either add new physical memory to the computer (thus increasing the quantity of nonpaged pool memory available to the kernel), or reduce the number of files on the Services for Macintosh (SFM) volume.

BCCode: 24      0x00000024  <-- read this link
http://www.faultwire.com/solutions-fatal_error/NTFS-FILE-SYSTEM-0x00000024-*1051.html?order=votes

=============================================================

To check for Disk Issues - Use Safe Mode if needed - repeatedly tap F8 as you boot.

Run DiskCleanup - Start - All Programs - Accessories - System Tools - Disk Cleanup

Start - type in Search box -  COMMAND   find at top of list -  RIGHT CLICK  -  RUN AS ADMIN

sfc /scannow

How to Repair Windows 7 System Files with System File Checker
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Then run checkdisk (chkdsk).

How to Run Disk Check in Windows 7
http://www.sevenforums.com/tutorials/433-disk-check.html

==========================================

Memory tests do not catch all errors such as mismatched memory (possible even for sticks
that appear to be identical) and when faster memory is placed in system behind slower memory.
So it is best to also swap sticks in and out to check for those even if all memory tests fail to show
a problem.

To test RAM check here - let it run 4+ hours or so.  <-- best method
www.memtest.org

For the Vista/Windows 7 Memory Diagnostic Tool

Start - type in Search box ->  Memory - find Memory Diagnostics tool at top of list - Right Click -
RUN AS ADMIN follow the instructions

Windows Vista: How to Scan / Test your RAM or Memory with Windows Vista Memory Diagnostic
Tool
http://www.shivaranjan.com/2007/11/01/windows-vista-how-to-scan-test-your-ram-or-memory-with-windows-vista-memory-diagnostic-tool/

How to Run the Memory Diagnostics Tool in Windows 7
http://www.sevenforums.com/tutorials/715-memory-diagnostics-tool.html

Test Your Computer’s Memory Using Windows Vista Memory Diagnostic Tool
http://www.howtogeek.com/howto/windows-vista/test-your-computers-memory-using-windows-vista-memory-diagnostic-tool/

Hope this helps.

Rob Brown - Microsoft MVP - Windows and Devices for IT 2010 - current
Windows Insider MVP 2016 - current

Did this solve your problem?

Sorry this didn't help.


Hi,

You should also check with GigByte for updated BIOS, low level chipset
drivers, and other on-board drivers (such as the RAID).

Gigabyte Support
http://www.gigabyte.com/support-downloads/technical-support.aspx

Gigabyte Downloads
http://www.gigabyte.com/support-downloads/download-center.aspx

Hope this helps.
Rob Brown - Microsoft MVP - Windows and Devices for IT 2010 - current
Windows Insider MVP 2016 - current

Did this solve your problem?

Sorry this didn't help.


Thanks, Spirit/Rob...

 

Yeah, I'm a former Microsoftee myself... was there through the 90s!

 

So, I printed this out and I'm going through everything one at a time, but your mention of RAID triggered something for me. I have a solid state hard drive, and then for my second drive, I have two drives in a RAID 1 configuration. When I first got this computer, I had periodic problems with the computer freezing up momentarily, and then the RAID mirror breaking. I'd have to rebuild it. Eventually, I reseated the drives and cables, and the problems seems to have gone away... I wonder though if this might be the cause of my problems... Faulty cables? 

 

I just updated my RAID driver to the latest version. Let me know if you think there's anything else I should do.

 

Thanks,

 

Tony

Tony

Did this solve your problem?

Sorry this didn't help.


Hi,

MVP's of course are volunteers and don't actually work for Microsoft.

Cables and other hardware issues can be involved. Be sure to check
the FaultWire link and the MSDN information I posted just above it
in the troubleshooter above.

--------------------------------------------------------------------------------------------

RAID definitely can be involved, in fact I have seen many issues with trying to use SSD in a
RAID Array.

RAID, over-clocking, and other causes may all be at work to cause this. Set the system back to
its hardware defaults and update RAID, lowlevel chipset and other drivers and go from there.

RAID often causes more issues than it solves. Especially for software RAID which is included
on some motherboards.

RAID
http://en.wikipedia.org/wiki/RAID

Today there are 3 "General Types" of RAID

Software, Hybrid (some hardware with software checks), and Hardware.

Personally I think the Software and Hybrid are a waste of time and misleading when claims of
reliability are usually made. In most cases an effective backup plan is better than these. All
too often the RAID software and/or Hybrid model actually cause a failure. Or what is supposed
to protect the system in drive crashes and failures end up being the cause of them. Hardware
RAID is by far the best.

Hardware RAID
http://www.bestpricecomputers.co.uk/glossary/raid-controller.htm

Hardware RAID is a physical hard drive controller that provides the drive interactions needed
to perform a reliable redundant array.

Intel RAID controllers
http://www.intel.com/products/server/raid/index.htm

Adaptec RAID controllers
http://www.adaptec.com/en-US/products/

Many low cost add-in hardware RAID controllers are really a Hybrid where some of the action
is done by the hardware card and the rest (and often most important functions) are performed
by the CPU of the system using software RAID.

------------------------------------------------------------------------------------------------------------

Why RAID is (usually) a Terrible Idea
http://www.pugetsystems.com/articles?&id=29

Hope this helps.

Rob Brown - Microsoft MVP - Windows and Devices for IT 2010 - current
Windows Insider MVP 2016 - current

Did this solve your problem?

Sorry this didn't help.


Hey, Rob...

 

My SSD drive is not RAIDed. I have a "D" drive that is two RAID 1 drives (non-SSD). I believe it's a full hardware RAID, but i need to verify that.

 

I didn't concentrate on memory tests today because I got all new memory the other day and I had a BSOD after I installed the new memory, so I suspect the problem lies somewhere else.

 

So, today I:

* Reseated the drives, video card, sound card, etc. and all cables (pulled them out and put them back in snugly).

* Updated RAID drivers

* Updated BIOS

* Updated Chipset and all drivers available on the Gigabyte site for my motherboard

* Did an sfc /scannow (no problems found)

* Did a chkdsk (no problems found)

 

Also, I no longer use CA anti-virus... I've been using symantec for a couple of weeks and I've received a BSOD since I installed it. (CA anti-virus is completely uninstalled).

 

I don't use Bitlocker.

 

So, at this point I guess I wait to see if I get another BSOD?

 

Thank you!

 

Tony

Tony

Did this solve your problem?

Sorry this didn't help.


Hi,

Be sure to check the memory thoroughly even though you replaced it.
Even slight differences in the speed of identical memory can cause
this issue. Added that there can be other hardware relating to the
memory involved if indeed it is a memory problem.

Out of the frying pan and into the fire. I was looking at an older minidump
when I thought you were still uning CA. Norton/Symantec is one of the
very worst for causing or aggravation these type of issues. Merely
disabling it is not sufficient as it will still load itself into memory so the
only way to test is to uninstall it and run the Removal Tool to be sure no
trouble causing remnants are left behind. Below are recommendations
to use while testing, even better permanently.

Norton Removal Tool
http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20080710133834EN&ln=en_US

------------------------------

Here is what I use and recommend : (These are all Free versions and very effective.)

Avast and Prevx have proven extremely reliable and compatible with everything I have
thrown at them. Microsoft Security Essentials and Prevx have also proven to be very
reliable and compatible. Use MSE and Prevx or Avast and Prevx however not all 3.

Avast Home Free - stop any shields you do not need except leave Standard, Web, and
Network running.

Prevx - Home - Free

Windows Firewall

Windows Defender (not needed if using MSE)

IE - Protected Mode

IE 8 - SmartScreen Filter ON  (IE 7 Phishing Filter)

I also have IE to always start with InPrivate Filter active if IE 8.
(You occasionally have to turn it temporarily off with the little Icon on LEFT of the + bottom
right of IE)

Two versions of Avast are available 6.x and 4.8x

Avast 6.x - Home - Free - Stop the Shields you do not use (except File, Web, Network, &
Behavior) - double click the Orange Icon in Notification Area - Real Time Shields - click the
Shield you want to stop - STOP. To stop the Orange Icon from showing an error indicator -
click the Orange Icon - Upper Right - Settings - click Status Bar - uncheck the Shields you
disabled - click OK
http://www.avast.com/free-antivirus-download

Avast 4.8x - Home - Free - stop any shields you do not need except leave Standard, Web,
and Network running. (Double Click Blue icon - details next to OK. - upper left Shields -
Terminate those you do not use.)
http://www.avast.com/free-antivirus-download#tab4

Or use Microsoft Security Essentials - Free
http://www.microsoft.com/Security_Essentials/

Prevx works well along side Avast or MSE

Prevx - Home - Free small, fast, exceptional CLOUD protection, works with other security
programs. This is a scanner only, VERY EFFECTIVE, if it finds something come back here
or use Google to see how to remove. 
http://www.prevx.com/   <-- information
http://info.prevx.com/downloadcsi.asp  <-- download

PCmag - Prevx - Editor'a Choice
http://www.pcmag.com/article2/0,2817,2346862,00.asp

Also get Malwarebytes - free - use as scanner only. If you ever suspect malware, and that
would be unsual with Avast and Prevx running except for an occasional low level cookie
(no big deal), UPDATE it and then run it as a scanner. I have many scanners and they
never find anything of note since I started using this setup.

http://www.malwarebytes.org/

Hope this helps.

Rob Brown - Microsoft MVP - Windows and Devices for IT 2010 - current
Windows Insider MVP 2016 - current

Did this solve your problem?

Sorry this didn't help.


Hi,

Just double checked the minidumps and there really is no other help
I could find.

Please run Driver Verifier and then upload any new minidumps you
have since 4/15 and any created by driver verifier.

-------------------------------------------------------------------------------------------

Driver Verifier can help find some BSOD issues :

Using Driver Verifier to identify issues with Windows drivers for advanced users
http://support.microsoft.com/kb/244617

How To Troubleshoot Driver Problems in Windows Vista or 7.
http://www.winvistaclub.com/t79.html

Using Driver Verifier
http://msdn.microsoft.com/en-us/library/ff554113(v=VS.85).aspx

How to use Windows Driver Verifier Manager to Troubleshoot & Identify Driver Issueshttp://www.youtube.com/watch?v=_VwIDD9xngM

Driver Verifier
http://www.techsupportforum.com/2110308-post3.html

Using Driver Verifier
http://www.faultwire.com/solutions/using_driver_verifier.php

How to use Windows Driver Verifier Manager to Troubleshoot & Identify Driver Issueshttp://www.youtube.com/watch?v=_VwIDD9xngM

You can disable Driver Verifier
http://support.microsoft.com/kb/244617

Start - type in Search box -> verifier /reset      hit enter to disable


Hope this helps.




Rob Brown - Microsoft MVP - Windows and Devices for IT 2010 - current
Windows Insider MVP 2016 - current

Did this solve your problem?

Sorry this didn't help.


* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
Question Info

Views: 15,558 Last updated: June 16, 2018 Applies to: