Alejandro

Had a BSOD related to ntfs.sys while saving a Word document in a drivepool drive. Downloading the beta right now! Edit: similar minidump that the one @akiller posted Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://www.osronline.com for more information Windows 8 Kernel Version 16299 MP (16 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 16299.15.amd64fre.rs3_release.170928-1534 Machine Name: Kernel base = 0xfffff800`d0a1f000 PsLoadedModuleList = 0xfffff800`d0d80fb0 Debug session time: Fri Nov 17 16:14:49.785 2017 (UTC - 5:00) System Uptime: 0 days 21:55:58.649 ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* SYSTEM_SERVICE_EXCEPTION (3b) An exception happened while executing a system service routine. Arguments: Arg1: 00000000c0000005, Exception code that caused the bugcheck Arg2: fffff80292029215, Address of the instruction which caused the bugcheck Arg3: ffffa98713eec4a0, Address of the context record for the exception that caused the bugcheck Arg4: 0000000000000000, zero. Debugging Details: ------------------ TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2 EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s". FAULTING_IP: NTFS!NtfsDecodeFileObject+49 fffff802`92029215 8b4804 mov ecx,dword ptr [rax+4] CONTEXT: ffffa98713eec4a0 -- (.cxr 0xffffa98713eec4a0) rax=0000000000000000 rbx=ffffab8e83f19360 rcx=0000000000000000 rdx=ffffa98713eed118 rsi=ffff8080f4b31150 rdi=ffffab8e828c07f8 rip=fffff80292029215 rsp=ffffa98713eece90 rbp=0000000000000000 r8=ffffa98713eecf48 r9=ffffa98713eecf10 r10=ffffa98713eed0b8 r11=ffffab8e828c07f8 r12=0000000000000005 r13=ffff8080f9f6b400 r14=ffffa98713eed118 r15=ffffab8e83f19360 iopl=0 nv up ei pl nz na pe nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202 NTFS!NtfsDecodeFileObject+0x49: fffff802`92029215 8b4804 mov ecx,dword ptr [rax+4] ds:002b:00000000`00000004=00000000 Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT BUGCHECK_STR: 0x3B PROCESS_NAME: WINWORD.EXE CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff8029212994c to fffff80292029215 STACK_TEXT: ffffa987`13eece90 fffff802`9212994c : ffffab8e`994694e0 ffffab8e`99469360 ffffab8e`99469440 fffff802`908169da : NTFS!NtfsDecodeFileObject+0x49 ffffa987`13eeced0 fffff802`92127091 : 00000000`00000000 00000000`00000000 ffffab8e`84ed0df0 ffffab8e`84e75010 : NTFS!NtfsFindTargetElements+0x48 ffffa987`13eecf40 fffff802`92142cef : ffffab8e`828c0701 ffffab8e`828c07f8 ffff8081`00000000 ffffab8e`00000000 : NTFS!NtfsSetRenameInfo+0x2d5 ffffa987`13eed340 fffff802`92142488 : ffffab8e`828c07f8 ffffab8e`82c2c730 ffffab8e`82c2c700 ffffab8e`8ae58200 : NTFS!NtfsCommonSetInformation+0x76f ffffa987`13eed420 fffff800`d0a578d9 : ffffab8e`81c38190 ffffab8e`82c2c730 ffffab8e`828c07f8 ffffa987`13eed460 : NTFS!NtfsFsdSetInformation+0xd8 ffffa987`13eed4c0 fffff802`92a85473 : ffffab8e`81c38190 ffffab8e`8a73bcb0 00000000`00000000 ffffab8e`8a73bcb0 : nt!IofCallDriver+0x59 ffffa987`13eed500 ffffab8e`81c38190 : ffffab8e`8a73bcb0 00000000`00000000 ffffab8e`8a73bcb0 ffffab8e`00000078 : covefs+0x55473 ffffa987`13eed508 ffffab8e`8a73bcb0 : 00000000`00000000 ffffab8e`8a73bcb0 ffffab8e`00000078 fffff802`92a63c10 : 0xffffab8e`81c38190 ffffa987`13eed510 00000000`00000000 : ffffab8e`8a73bcb0 ffffab8e`00000078 fffff802`92a63c10 00000000`00000000 : 0xffffab8e`8a73bcb0 FOLLOWUP_IP: covefs+55473 fffff802`92a85473 898424e8000000 mov dword ptr [rsp+0E8h],eax SYMBOL_STACK_INDEX: 6 SYMBOL_NAME: covefs+55473 FOLLOWUP_NAME: MachineOwner MODULE_NAME: covefs IMAGE_NAME: covefs.sys DEBUG_FLR_IMAGE_TIMESTAMP: 59bb1a02 STACK_COMMAND: .cxr 0xffffa98713eec4a0 ; kb FAILURE_BUCKET_ID: X64_0x3B_covefs+55473 BUCKET_ID: X64_0x3B_covefs+55473 Followup: MachineOwner ---------