none
Blue Screen & Error Message

    Question

  •    I have recently started to receive blue screen and an error message on my system - I must reboot the computer every time when the blue screen appears; but my computer will not last for over 15 minutes - the message 'Delayed Write Failed ... Windows was not able to save all data. All data have been lost' occurs, followed by the blue screen and the error message.

       I am using Windows XP Professional SP3. Here is the error message shewn on the blue sceen:

       Error Message

    First: Write Delayed Failed - Windows was unable to save all data to C:\$ (this can vary) ... All data have been lost.

    The blue screen appears with the following:

    Error message: STOP: 0x00000024 (0x001902FE, 0xEB3CEB6C, 0xEB3CE868, 0xF74E08D6)

    Ntfs.exe - Address F74E08D6 base at F74CF000, DateStamp 480256e5

    Beginning dump of physical memory ...

       My system is in exceedingly urgent want of an operable solution. Can any one find out the cause and the solution?


    Wilhelm F.J.
    Thursday, December 15, 2011 3:37 AM

Answers

  • The Stop 0x00000024 (NTFS_FILE_SYSTEM) indicates a problem occurred in ntfs.sys, the driver file that allows the system to read and write to NTFS drives.
    One possible cause of this bug check is disk corruption. Corruption in the NTFS file system or bad blocks (sectors) on the hard disk can induce this error. Corrupted SCSI and IDE drivers can also adversely affect the system's ability to read and write to disk, thus causing the error.
    Perform a full volume check: open a command prompt window and run the command

    chkdsk /f /r
    

    If necessary, upload the DMP file from the \Windows\Minidump folder to your Windows Live SkyDrive, make it publicly accessible and post the URL here.

    Bye.


    Luigi Bruno - Microsoft Community Contributor 2011 Award
    Thursday, December 15, 2011 2:23 PM

All replies

  • The Stop 0x00000024 (NTFS_FILE_SYSTEM) indicates a problem occurred in ntfs.sys, the driver file that allows the system to read and write to NTFS drives.
    One possible cause of this bug check is disk corruption. Corruption in the NTFS file system or bad blocks (sectors) on the hard disk can induce this error. Corrupted SCSI and IDE drivers can also adversely affect the system's ability to read and write to disk, thus causing the error.
    Perform a full volume check: open a command prompt window and run the command

    chkdsk /f /r
    

    If necessary, upload the DMP file from the \Windows\Minidump folder to your Windows Live SkyDrive, make it publicly accessible and post the URL here.

    Bye.


    Luigi Bruno - Microsoft Community Contributor 2011 Award
    Thursday, December 15, 2011 2:23 PM
  •    Thank you for your reply. 

    I have done chkdsk /r in the Recovery Console numerous times. Nonetheless, the result remains the same: Blue screen and error message. It can be presumed to be caused by a hard disc corruption or by bad secoter(s). How do I repair it?

       How do I send the DMP file to you as an email attachment?


    Wilhelm F.J.
    Friday, December 16, 2011 3:28 AM
  • Upload the DMP file from the \Windows\Minidump folder to your Windows Live SkyDrive, make it publicly accessible and post the URL here.
    Follow the instructions that you find at the following address

    http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65/

    Bye.


    Luigi Bruno - Microsoft Community Contributor 2011 Award
    Friday, December 16, 2011 12:41 PM
  • Bruno,

       I will inform you as soon as I upload it.


    Wilhelm F.J.
    Friday, December 16, 2011 9:58 PM
  • Bruno,

       Here is the link: https://skydrive.live.com/redir.aspx?cid=6f85ef9eef9f99ca&resid=6F85EF9EEF9F99CA!321&parid=root

     

       However, I have completed the chkdsk /r in the Recovery Console.

       This is the result: 75% completed. Windows appears to contain one or more unrecoverable errors.

       Then I rebooted the computer. However, another blue screen with another error message appeared:

       A problem has been detected and windows has been shut down to prevent damage to your computer.

       UNMOUNTABLE_BOOT_VOLUME

       Technical Information:

       ***STOP: 0x000000ED (0x86F48E30, 0xC0000006, 0x00000000, 0x00000000).

       I have tried to enter the system in Safe Mode, but to no avail - the same blue screen and the same error message appear.


    Wilhelm F.J.
    Saturday, December 17, 2011 11:15 PM
  • Bruno,

       Here is the link: https://skydrive.live.com/redir.aspx?cid=6f85ef9eef9f99ca&resid=6F85EF9EEF9F99CA!321&parid=root

     

       However, I have completed the chkdsk /r in the Recovery Console.

       This is the result: 75% completed. Windows appears to contain one or more unrecoverable errors.

       Then I rebooted the computer. However, another blue screen with another error message appeared:

       A problem has been detected and windows has been shut down to prevent damage to your computer.

       UNMOUNTABLE_BOOT_VOLUME

       Technical Information:

       ***STOP: 0x000000ED (0x86F48E30, 0xC0000006, 0x00000000, 0x00000000).

       I have tried to enter the system in Safe Mode, but to no avail - the same blue screen and the same error message appear.


    Wilhelm F.J.
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    NTFS_FILE_SYSTEM (24)
        If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
        parameters are the exception record and context record. Do a .cxr
        on the 3rd parameter and then kb to obtain a more informative stack
        trace.
    Arguments:
    Arg1: 001902fe
    Arg2: ecbefb6c
    Arg3: ecbef868
    Arg4: f74e08d6
    Debugging Details:
    -----------------
    EXCEPTION_RECORD:  ecbefb6c -- (.exr 0xffffffffecbefb6c)
    ExceptionAddress: f74e08d6 (Ntfs!NtfsPerformHotFix+0x00000458)
       ExceptionCode: c0000005 (Access violation)
      ExceptionFlags: 00000000
    NumberParameters: 2
       Parameter[0]: 00000000
       Parameter[1]: 00000034
    Attempt to read from address 00000034
    CONTEXT:  ecbef868 -- (.cxr 0xffffffffecbef868)
    eax=00000000 ebx=00000000 ecx=00000000 edx=0014f000 esi=86dd5008 edi=86ed6008
    eip=f74e08d6 esp=ecbefc34 ebp=ecbefd74 iopl=0         nv up ei pl zr na pe nc
    cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
    Ntfs!NtfsPerformHotFix+0x458:
    f74e08d6 3b4834          cmp     ecx,dword ptr [eax+34h] ds:0023:00000034=????????
    Resetting default scope
    CUSTOMER_CRASH_COUNT:  1
    PROCESS_NAME:  System
    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    EXCEPTION_PARAMETER1:  00000000
    EXCEPTION_PARAMETER2:  00000034
    READ_ADDRESS:  00000034 
    FOLLOWUP_IP: 
    Ntfs!NtfsPerformHotFix+458
    f74e08d6 3b4834          cmp     ecx,dword ptr [eax+34h]
    FAULTING_IP: 
    Ntfs!NtfsPerformHotFix+458
    f74e08d6 3b4834          cmp     ecx,dword ptr [eax+34h]
    BUGCHECK_STR:  0x24
    DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE
    LAST_CONTROL_TRANSFER:  from 804e427b to f74e08d6
    STACK_TEXT:  
    ecbefd74 804e427b 86dd5008 00000000 860ad3d0 Ntfs!NtfsPerformHotFix+0x458
    ecbefdac 80579453 86dd5008 00000000 00000000 nt!ExpWorkerThread+0x100
    ecbefddc 804f88fa 804e41a6 80000000 00000000 nt!PspSystemThreadStartup+0x34
    00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
    SYMBOL_STACK_INDEX:  0
    SYMBOL_NAME:  Ntfs!NtfsPerformHotFix+458
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: Ntfs
    IMAGE_NAME:  Ntfs.sys
    DEBUG_FLR_IMAGE_TIMESTAMP:  48025be5
    STACK_COMMAND:  .cxr 0xffffffffecbef868 ; kb
    FAILURE_BUCKET_ID:  0x24_Ntfs!NtfsPerformHotFix+458
    BUCKET_ID:  0x24_Ntfs!NtfsPerformHotFix+458
    Followup: MachineOwner
    -----------------------------------------------------------------------------------------------------------------------------------------
    ** The Blue caused by ntfs.sys ,  
    Run Chkdsk /f /r to detect and resolve any file system structural corruption.
    Regards,


    MCP ✦ MCTS ✦ MCITP
    Sunday, December 18, 2011 11:45 AM
  • Alternative solution.. you may use hard disk regen tools 1.4 to fix your disk sector..

    You may simply downloaded from

    www.google.com 
    I suspect your file structure level is corrupted.. therefore prepare to lose some files after repair..

     

     


    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    http://www.microsof
    Sunday, December 18, 2011 5:21 PM
  • Su,

       I am not able to find the  hard disk regen tools 1.4 download online.

       Can you send the download link to me?

       I will try Rashid's solution, chkdsk /f /r first; the chkdsk is not able to solve the problem, I will try the software.

       However, the system can not even show the desktop, how am I able to use the software?

       The system displays the UNMOUNTABLE_BOOT_VOLUME every time, even when I try to entr the Safe Mode.


    Wilhelm F.J.
    Monday, December 19, 2011 1:20 AM
  • Rashid,

       Is not chkdsk /f /r the same as chkdsk /r?

       I have tried chkdsk /r numerous times, which, albeit may solve some registry or other small errors, but the result has always been 75% completed - one or more unrecoverable errors.

       Can you give me a better solution?


    Wilhelm F.J.
    Monday, December 19, 2011 1:21 AM
  • Every one, to whom I have asked and to whomsoever this problem it may concerned,

       I had forgotten to add that one of the error messages had been this: <Windows> \hal.dll has been corrupt.

       Windows can not start.


    Wilhelm F.J.
    Monday, December 19, 2011 1:25 AM
  • Rashid,

       How do I use the

    Bug Check 0x24: NTFS_FILE_SYSTEM: http://msdn.microsoft.com/en-us/library/ff557433(v=vs.85).aspx

    .cxr (Display Context Record): http://msdn.microsoft.com/en-us/library/ff562301(v=vs.85).aspx

    and k, kb, kc, kd, kp, kP, kv (Display Stack Backtrace): http://msdn.microsoft.com/en-us/library/ff551943(v=vs.85).aspx

    ?

    Can you tell me clearly what I shall do, please? Can you list the steps clearly?

      


    Wilhelm F.J.
    Monday, December 19, 2011 1:33 AM
  • Hi,

     

    here you go.. you may download it and burn it to a bootable disc

    it is obviously that your hard disk have come to a near death. But worry not hard disk regen tools will assist you. Trust me...

     

    HDAT2 4.53

     

    http://www.hiren.info/pages/bootcd


    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    http://www.microsof
    Monday, December 19, 2011 2:58 AM
  • Su,

       You have said, that if I utilise the HDAT2 4.53 to repair my hard disc, some data will be lost.

       In fact, I have discovered that HDAT2 is an alterative to HDD Regenerator: http://www.dposoft.net.

       Can I recover the data that will be lost after I use the HDAT2?

       Can you provide a better software that will not cause any loss of data after reparation?


    Wilhelm F.J.
    Monday, December 19, 2011 4:32 AM
  • Hi,

     

    With the lost data. After your disk is fixed.. you may use get-data back to retrieve the lost data, usually there might be a chance of data corruption. So you can still try to restore via best effort.

     

    In fact usually sector repair shouldn't make u have lost data.

    only windows check disk will cause lost data.. because windows check disk.. always delete corrupted values on disk


    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    http://www.microsof
    Monday, December 19, 2011 5:42 AM
  • Su,

       I have not used your method.

       Instead, I have tried another chkdsk /r in the Recovery Console yesterday.

       This was the result: 75% completed. One or more unrecoverable errors.

       However, when I rebooted the computer, this screen was appearing every time: Pre-boot eXecution Environment (PXE) v2.1. Press any key to continue.

       And I pressed any key to continue. Yet, the same screen appeared again every time.

       Then, I have tried to use my Windows XP Professional Genuine Boot Disc in an attempt to run the chkdsk /r again in the Recovery Console or to run a Repair Install. Nonetheless, this has been the result every time: Can not detect any hard disc. Please press F3 to exit. When I chose either the Recovery Console (R) or the Repair Install (ENTER).

       I can not even enter the system now, let alone the desktop.

       What shall I do now, Sue? What is the best solution before I use your method - the hard disc repair software? I want to save all my data onto an external hard drive first before the hard disc shall come to an end.


    Wilhelm F.J.
    Monday, December 19, 2011 4:43 PM
  • Hi, Alternative solution is. if you have any other working computers which is currently on the network.. You may proceed to download and burn a copy of the hiren boot disc and proceed with hard disk fixing.. Please stop using chkdsk. because chkdsk is not good for your current hard disk state. Therefore it will also kills your hard disk especially when your hard disk is not even functioning properly.
    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    Microsoft Geeks
    Tuesday, December 20, 2011 5:39 AM
  • Su,

       Thank you for your reply and patience.

       I will try your suggestion.

       Hope it will not result in any data loss. But the boot disc can detect my hard disc? Because even the system displays that it can not detect any hard disc on my computer.

       And the Pre-boot eXecution (PXE) Environment? Strange phenomenon.


    Wilhelm F.J.
    Tuesday, December 20, 2011 4:04 PM
  • No Worries :) Will be glad to assist you further. Good luck
    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    Microsoft Geeks
    • Proposed as answer by keith fung Tuesday, August 28, 2012 3:39 AM
    Tuesday, December 20, 2011 5:04 PM