Systematic crash when unmounting drive in Veracrypt (ntfs.sys, windows 10)

[Cirrius]

Hi,

I have a strange issue with my recent laptop computer (Dell precision 5520) with windows 10-64bit-professional version (updated to April 2018 upgrade).

When I unmount a drive in Verarcrypt or let the system doing it when it shuts down, I systematically have a blue screen with stop code 0x0bad1001 and a mention about Ntfs.sys (this stop code and the system logs do not really give a hint on what is going on).

I have tried to update as much as possible all the hardware drivers, tested different versions of Veracrypt, in vain. It happens either for an internal partition of the internal SSD drive or for an encrypted external usb drive. So it does not look like an hardware issue with the internal drive of the laptop. I have also tried in full administrator session.

I have 2 other older computers, also with the last version of windows 10, on which I never have this issue.

Is there anyone who has experienced the same issue?

Thanks in advance for any help

Best

[Cirrius]

Hi,

Up on this issue. Still having it.

I tested with a USB stick formatted in FAT32, and got the same issue when I unmount it in Veracrypt, except it says on the blue screen that it is fastfat.SYS which failed, instead of ntfs.SYS

Thanks in advance

Best

[Mounir IDRASSI]

Hi Cirrius,

By experience, I know that such crashes in Ntfs.sys and fastfat.sys can be caused by faulty drivers from system tools installed on the machine. VeraCrypt doesn't cause this crash directly but rather another software on the machine that hooks itself into the mounted volumes and which behaves wrongly when these volumes are dismounted.

I would advise you to uninstall security or system related third-party software on the affected machine, one by one, until the crash stops occuring.
Another thing to try is to mount VeraCrypt volumes as removable media (there is a checkbox for this in the mount option dialog) and see if it makes things better. Some faulty software don't like fixed disks to be disconnected and with removable media they tend to be less buggy.

[Cirrius]

Hi Mounir,

Thanks for the advice. I had already suspected the antivirus to be the cause of the issue and tested by deactivating all its components temporarily in its interface. But at that time it did not make any difference.

After you message I chose a more radical solution : uninstalling the antivirus (Kaspersky) and installing another one (Avast, which I have on other computers where Veracrypt is working properly). The issue is now gone :-) I do know which parameter in Kaspersky is conflicting with Veracrypt. There might be a solution by adjusting the good parameter(s) in Kaspersky. But I do not think I want to spend more time finding this solution :-)

Best regards