Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

CSRSS Minidump


  • Please log in to reply
3 replies to this topic

#1 MagnumVP

MagnumVP

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:06:16 PM

Posted 14 May 2009 - 11:52 AM

Here is the Debug information; The computer will randomly crash to a BSoD. It does it when using Outlook or Word or Acrobat. It even does it when I let is stay on the CTRL-ALT-DELETE screen to log in. If I let it sit there at the login screen for about a minute it will BSoD... sometimes.

Dell Optiplex 280 / Windows XP SP2

------------------


Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Minidump\Mini051409-08.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Thu May 14 09:05:28.076 2009 (GMT-7)
System Uptime: 0 days 0:01:57.750
Loading Kernel Symbols
...............................................................
................................................................
...........................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 868871d0, 86887344, 805d1140}

unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase
Probably caused by : CSRSS.EXE

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 868871d0, Terminating object
Arg3: 86887344, Process image file name
Arg4: 805d1140, Explanatory message (ascii)

Debugging Details:
------------------

unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase

PROCESS_OBJECT: 868871d0

IMAGE_NAME: CSRSS.EXE

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: CSRSS

FAULTING_MODULE: 00000000

PROCESS_NAME: CSRSS.EXE

EXCEPTION_RECORD: f782d9d8 -- (.exr 0xfffffffff782d9d8)
ExceptionAddress: 75b7af41
ExceptionCode: c0000096
ExceptionFlags: 00000000
NumberParameters: 0

EXCEPTION_CODE: (NTSTATUS) 0xc0000096 - {EXCEPTION} Privileged instruction.

CUSTOMER_CRASH_COUNT: 8

ERROR_CODE: (NTSTATUS) 0xc0000096 - {EXCEPTION} Privileged instruction.

BUGCHECK_STR: 0xF4_C0000096

DEFAULT_BUCKET_ID: STATUS_PRIVILEGED_INSTRUCTION

STACK_TEXT:
f782d520 805d02e7 000000f4 00000003 868871d0 nt!KeBugCheckEx+0x1b
f782d544 805d11eb 805d1140 868871d0 86887344 nt!PspCatchCriticalBreak+0x75
f782d574 8054060c 86887418 c0000096 f782d9b0 nt!NtTerminateProcess+0x7d
f782d574 805004c5 86887418 c0000096 f782d9b0 nt!KiFastCallEntry+0xfc
f782d5f4 804fe4f6 ffffffff c0000096 f782d9ec nt!ZwTerminateProcess+0x11
f782d9b0 80501c03 f782d9d8 00000000 f782dd64 nt!KiDispatchException+0x3a0
f782dd34 80543ed7 0052fbc8 0052fbdc 00000000 nt!KiRaiseException+0x175
f782dd50 8054060c 0052fbc8 0052fbdc 00000000 nt!NtRaiseException+0x33
f782dd50 75b7af41 0052fbc8 0052fbdc 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0052febc 00000000 00000000 00000000 00000000 0x75b7af41


STACK_COMMAND: kb

FOLLOWUP_NAME: MachineOwner

FAILURE_BUCKET_ID: 0xF4_C0000096_IMAGE_CSRSS.EXE

BUCKET_ID: 0xF4_C0000096_IMAGE_CSRSS.EXE

Followup: MachineOwner
---------

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,127 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:16 PM

Posted 14 May 2009 - 11:59 AM

FWIW: http://forums.diii.net/showthread.php?t=572208

Are those apps properly updated?

Windows current on critical installs?

Louis

FWIW: Each of the programs you mentioned has drivers...any one of which can cause problems when damaged/corrupt.

Edited by hamluis, 14 May 2009 - 12:00 PM.


#3 MagnumVP

MagnumVP
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:06:16 PM

Posted 14 May 2009 - 12:04 PM

How can I determine which application/driver is cause the problem?

Windows is fully updated with patch as of April 2009. It hasn't been able to stay on long enough to download and install the May security updates from the 12th of this month.

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,127 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:16 PM

Posted 14 May 2009 - 02:28 PM

Trial-and-error.

Since you mentioned 3 known programs that present this problem...I would uninstall each and then reinstall them one-by-one. If any repeats the error, I would have a problem that is deeper than file corruption.

Speaking of which....if these apps are the only situations produing these crashes...then what is preventing installation of critical updates?

Have you bothered to check Evnet Viewer for possible clues?

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/t/40108/how-to-use-event-viewer/

http://www.ehow.com/how_2104293_solve-csrssexe-problem.html

http://www.neuber.com/taskmanager/process/csrss.exe.html

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users