Jump to content

F4 BSOD- need debugging help


Recommended Posts

Posted

Running Win 7 Pro 64-bit and have encountered some BSODs.

Here is some data about the incident:

PROCESS_OBJECT: fffffa80099e98c0

IMAGE_NAME: csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: csrss

FAULTING_MODULE: 0000000000000000

PROCESS_NAME: csrss.exe

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR: 0xF4_C0000005

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

CURRENT_IRQL: 0

STACK_TEXT:

fffff880`086a50e8 fffff800`034195e2 : 00000000`000000f4 00000000`00000003 fffffa80`099e98c0 fffffa80`099e9ba0 : nt!KeBugCheckEx

fffff880`086a50f0 fffff800`033c699b : ffffffff`ffffffff fffffa80`098b2380 fffffa80`099e98c0 fffffa80`099e98c0 : nt!PspCatchCriticalBreak+0x92

fffff880`086a5130 fffff800`03346448 : ffffffff`ffffffff 00000000`00000001 fffffa80`099e98c0 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x176d6

fffff880`086a5180 fffff800`0308ded3 : fffffa80`099e98c0 fffff800`c0000005 fffffa80`098b2380 00000000`041406a0 : nt!NtTerminateProcess+0xf4

fffff880`086a5200 fffff800`0308a470 : fffff800`030da67f fffff880`086a5b78 fffff880`086a58d0 fffff880`086a5c20 : nt!KiSystemServiceCopyEnd+0x13

fffff880`086a5398 fffff800`030da67f : fffff880`086a5b78 fffff880`086a58d0 fffff880`086a5c20 00000000`04141ee0 : nt!KiServiceLinkage

fffff880`086a53a0 fffff800`0308e2c2 : fffff880`086a5b78 00000000`000713b8 fffff880`086a5c20 00000000`041419b8 : nt! ?? ::FNODOBFM::`string'+0x49874

fffff880`086a5a40 fffff800`0308ce3a : 00000000`00000001 00000000`04140c58 00000000`04147301 00000000`000713b8 : nt!KiExceptionDispatch+0xc2

fffff880`086a5c20 00000000`77be8e3d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a

00000000`04140c60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77be8e3d

STACK_COMMAND: kb

FOLLOWUP_NAME: MachineOwner

FAILURE_BUCKET_ID: X64_0xF4_C0000005_IMAGE_csrss.exe

BUCKET_ID: X64_0xF4_C0000005_IMAGE_csrss.exe

Followup: MachineOwner

I have a kernel dump file, however it is 106 MB zipped and 400 some MB when not zipped.


Posted

The F4 bsod are usually related to hard drive problems (either bad connected or failling). You should try checking your hard drive with the tool provided by your hard drive manufacturer.

You should also try to compress the full with 7zip (compression set to ultra) and then upload it somewhere so it can be properly analyzed.

You should also provide a little more details about when it happens and if you can reproduce the problem and how often it happened....

In between, you might also check the ram with memtest.

Posted (edited)

Ran multiple hard drive and memory test and they all check out fine. I tried to make another compressed file for the kernel dump but it still was way too big for the 500k limit, since the initial size of the file is 400+ mb. As for the hard drive controller, both hard drives are using the ICH10R on an x58 motherboard. Reseated the cables multiple times and swapped the cables as well. The BSOD occur at seemingly random times, usually when just doing light work on PC. System hangs with the windows loading symbol on the mouse right before it starts to dump.

Edited by Chicken89
Posted

When i said "upload the memory dump somewhere" that was on a free files hosting provider like megaupload or mediafire or another .... Of course you can't upload it there.

Posted

I wasn't able to conclude anything from the crash dump except that it seems something prevented csrss accessing to disk. As it doesn't seem to be an hardware failure, it could be a filter or a driver interfering like an AV software. You might try disabling the AV software and see if you can reproduce it. BTW, what is your AV (if you have one) ?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...