Sony Vaio Blue screen keeps restarting

Can any one help fix this problem ive added a picture of the error codes

 

Greetings, lisaprvs, and welcome to Major Geeks.

Couple of quick background questions:

What operating system and Service Pack # are you running?

What is the specific model # of your machine?

Can you boot into Safe Mode? Have you tried booting to a System Restore point?

 

Hi I'm on vista sp2. My laptop is a sony vaio vgn nr32l. I can boot in safe mode but any restore points are failing.

 

Since you can boot into Safe Mode, for troubleshooting purposes try disabling all startups. Click Start > Run, type 'msconfig' (sans quotes), click OK. The System Configuration utility should open - click the Startups tab, make a note of all enabled entries, then disable all entries and reboot into Normal Mode.

If you have no blue screen, then repeat the process and selectively enable the startups until you find the culprit(s). If, however, you still crash, let us know and there are other steps we can take.

 

Hmm, according to Carrona.org's BSOD listing:

that's a lot to investigate.

It looks like Vista is set to create a full memory dump on BSOD, could you try to set it in Safe Mode or Safe Mode with networking so that it creates a minidump instead? Once you have a minidump, go to C:\Windows\Minidump and copy the dump(s) to your Desktop. From there you can zip it and upload the zip as an attachment, I'll try to see if I can debug it to find the cause.

 

Thanks I've just tried that and it still went to blue screen! There are approx 8 boxes enabled for start up and all are obvious items eg google and sony but one unkown which is numbers! Its.... {596e027c-10ee-f3a7-307f-eff4de74725f} its location is .... C\users\home\appdata\roaming\cior\myun.exe

 

If possible, follow satrow's suggestion about the minidump - he may be able to nail something down.

Myun.exe - do you have a program named MyUninstaller on your machine? If so fine, but if not, I strongly suggest you go through the Malware Forum's Read & Run Me First thread, perform all of the suggested steps, and attach the requested logs to a new thread in that forum.

 

Ok, looks like it could well be malware now; please try to get a minidump created and uploaded so we can attempt to get you running 'normally' before doing the Malware preliminaries, many of them won't work in Safe Mode.

 

not sure if ive done this correctly but ive uploaded it.

 

You did it

EDIT: this looks like an old file, is your Windows time set correctly?

Code:

[B]Debug session time: Sat Mar 12 22:29:48.558 2011 (UTC + 1:00)[/B]
System Uptime: 0 days 2:09:05.364
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904aa, af3b3828, af3b3524, 8288de68}

[B]Probably caused by : Ntfs.sys[/B] ( Ntfs!NtfsReportDirNotify+a8 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 001904aa
Arg2: af3b3828
Arg3: af3b3524
Arg4: 8288de68

Debugging Details:
------------------


EXCEPTION_RECORD:  af3b3828 -- (.exr 0xffffffffaf3b3828)
ExceptionAddress: 8288de68 (nt!FsRtlNotifyFilterReportChange+0x000000c7)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 6f726353
Attempt to read from address 6f726353

CONTEXT:  af3b3524 -- (.cxr 0xffffffffaf3b3524)
eax=6f726353 ebx=b69a3b68 ecx=c47bb70c edx=00000000 esi=869e71e8 edi=867e9d78
eip=8288de68 esp=af3b38f0 ebp=af3b396c iopl=0         nv up ei ng nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010286
nt!FsRtlNotifyFilterReportChange+0xc7:
8288de68 663910          cmp     word ptr [eax],dx        ds:0023:6f726353=????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  STRING_DEREFERENCE

PROCESS_NAME:  iexplore.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  6f726353

READ_ADDRESS: GetPointerFromAddress: unable to read from 8277d868
Unable to read MiSystemVaType memory at 8275d420
 6f726353 

FOLLOWUP_IP: 
Ntfs!NtfsReportDirNotify+a8
8861eea3 8b4508          mov     eax,dword ptr [ebp+8]

FAULTING_IP: 
nt!FsRtlNotifyFilterReportChange+c7
8288de68 663910          cmp     word ptr [eax],dx

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from 8861eea3 to 8288de68

STACK_TEXT:  
af3b396c 8861eea3 869e71e8 86e713b8 c47bb70c nt!FsRtlNotifyFilterReportChange+0xc7
af3b39ec 8860d3d1 00000000 c47bb748 86e710d8 Ntfs!NtfsReportDirNotify+0xa8
af3b3a5c 88673dc6 86b58848 c47bb4b8 c47bb700 Ntfs!NtfsUpdateFileDupInfo+0x1f6
af3b3b2c 8869214c 86b58848 86b74398 85ceed40 Ntfs!NtfsSetAllocationInfo+0x658
af3b3ba8 88612832 86b58848 85ceed40 275f16b2 Ntfs!NtfsCommonSetInformation+0x5f1
af3b3c14 8268a976 86e71020 85ceed40 85ceed40 Ntfs!NtfsFsdSetInformation+0x104
af3b3c2c 880ebba7 869e6e60 85ceed40 00000000 nt!IofCallDriver+0x63
af3b3c50 880ebd64 af3b3c70 869e6e60 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
af3b3c88 8268a976 869e6e60 85ceed40 00000000 fltmgr!FltpDispatch+0xc2
af3b3ca0 8284071c 89dc17e5 000014e0 122ee5f0 nt!IofCallDriver+0x63
af3b3d48 82690c7a 000014e0 122ee5f0 867e9d78 nt!NtSetInformationFile+0x8c6
af3b3d48 777a5ca4 000014e0 122ee5f0 867e9d78 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
122ee5f8 00000000 00000000 00000000 00000000 0x777a5ca4


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  Ntfs!NtfsReportDirNotify+a8

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  49e0192a

STACK_COMMAND:  .cxr 0xffffffffaf3b3524 ; kb

FAILURE_BUCKET_ID:  0x24_Ntfs!NtfsReportDirNotify+a8

BUCKET_ID:  0x24_Ntfs!NtfsReportDirNotify+a8

Followup: MachineOwner
---------

0: kd> lmvm Ntfs
start    end        module name
88604000 88714000   Ntfs       (pdb symbols)          c:\symbols\ntfs.pdb\29C63CD7723940CA848DB15075E2B1AB2\ntfs.pdb
    Loaded symbol image file: Ntfs.sys
    Mapped memory image file: c:\symbols\Ntfs.sys\49E0192A110000\Ntfs.sys
    Image path: \SystemRoot\System32\Drivers\Ntfs.sys
    Image name: Ntfs.sys
    Timestamp:        Sat Apr 11 05:14:34 2009 (49E0192A)
    CheckSum:         0010C4B9
    ImageSize:        00110000
    File version:     6.0.6002.18005
    Product version:  6.0.6002.18005
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     ntfs.sys
    OriginalFilename: ntfs.sys
    ProductVersion:   6.0.6002.18005
    FileVersion:      6.0.6002.18005 (lh_sp2rtm.090410-1830)
    FileDescription:  NT File System Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

 

Yes the time is correct. thanks

 

So the dump was an old one, try rebooting into normal mode Windows to force a new dump, please.


From the minidump you've provided, it looks like the most likely cause for it was/is data corruption; you need to run chkdsk C: /r from a Command prompt or, from within Windows Explorer, right-click the C drive > Properties > Tools > Error checking > Check now and check both boxes and click Start. Windows will immediately popup a box, click the Schedule option, not Cancel. The disk check will occur on the next boot.

This does not fully repair anything, if errors are found and 'fixed' it means that some Windows files might need replacing; this is a job for SFC /scannow from the Command prompt.


I hope all your personal data is backed up away from the laptop drive?

 

How will i back up i have loads of photos that need saving?

 

That really depends on the amount of data in GBs that you have to save. A few GB could be copied over to a USB thumb drive or two. For amounts that are much larger, it would be better to find another PC that you could connect the laptops internal hard drive to and copy your data over to that - and then copy that over to an external drive if you can buy one.

The laptop dates from around 2008, so it should have a SATA drive which is straightforward to internally connect to any recent tower/desktop PC.

 

Hey, my Sony vaio when i start it up comes up with the vaio sign that lights up and a green square behind it, it then goes t starting windows and straight after restarts again, it doesn't allow me to pick safe mode or any mode only the option to pick "launch repair" or "start windows normally" and if I pick normal it will do the same thing, repair has done nothing, I can't restore as it doesn't let me it fails with a code something like 0800xffff
SOMEONE PLEASE HELP!

 

OkAy thanks, done it and if you know of any solutions please read my thread and help.
Thanks.

 

Hi, my Sony Vaio VPCEH25EN which runs on windows 7, And I'm not sure about the service packs. It has Microsoft installed If that's any help, but my problem is when i start my Vaio up the Vaio sign lights up and a green square is behind it, it then goes to the "starting windows" with its logo and straight after restarts again, it doesn't allow me to pick safe mode or any mode only the option to pick "launch repair" or "start windows normally" and if I pick normal it will do the same thing, repair has done nothing, I can't restore as it doesn't let me.
SOMEONE PLEASE HELP!