Hello,
The Bugcheck we have is CRITICAL_OBJECT_TERMINATION (0xF4) i.e. a Critical Windows Process is shutdown causes the System to crash with Blue screen. That process is csrss.exe. It's possible it might be a hardware issue.
Lets do some basics first we have to run a hardware diagnostic. Follow this article http://captaindebugger.wordpress.com/hardware-diagnostic/
Uninstall any security software like Norton, McAfee etc. and install Microsoft Security Essentials http://www.microsoft.com/security_essentials/ because there is Page fault possibly cause by a security software. Also run the Removal Tool to cleanup the left over entries. http://uninstallers.blogspot.com/
Bugcheck:
Report back the results.
Hope this helps !
The Bugcheck we have is CRITICAL_OBJECT_TERMINATION (0xF4) i.e. a Critical Windows Process is shutdown causes the System to crash with Blue screen. That process is csrss.exe. It's possible it might be a hardware issue.
Lets do some basics first we have to run a hardware diagnostic. Follow this article http://captaindebugger.wordpress.com/hardware-diagnostic/
Uninstall any security software like Norton, McAfee etc. and install Microsoft Security Essentials http://www.microsoft.com/security_essentials/ because there is Page fault possibly cause by a security software. Also run the Removal Tool to cleanup the left over entries. http://uninstallers.blogspot.com/
Bugcheck:
Code:
kd>
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 8a3c1020, Terminating object
Arg3: 8a3c1194, Process image file name
Arg4: 805c77d0, Explanatory message (ascii)
Debugging Details:
------------------
unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase
PROCESS_OBJECT: 8a3c1020
IMAGE_NAME: csrss.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: csrss
FAULTING_MODULE: 00000000
PROCESS_NAME: csrss.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
BUGCHECK_STR: 0xF4_C0000005
CUSTOMER_CRASH_COUNT: 10
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
STACK_TEXT:
f259fd00 805c6901 000000f4 00000003 8a3c1020 nt!KeBugCheckEx+0x1b
f259fd24 805c787b 805c77d0 8a3c1020 8a3c1194 nt!PspCatchCriticalBreak+0x75
f259fd54 8053ca48 8a3c1268 c0000005 0103ebcc nt!NtTerminateProcess+0x7d
f259fd54 7c90e514 8a3c1268 c0000005 0103ebcc nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0103ebcc 00000000 00000000 00000000 00000000 0x7c90e514
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: 0xF4_C0000005_IMAGE_csrss.exe
BUCKET_ID: 0xF4_C0000005_IMAGE_csrss.exe
!process ffffffff8a3c1020 3
GetPointerFromAddress: unable to read from 80557e34
PROCESS 8a3c1020 SessionId: none Cid: 02ac Peb: 7ffdf000 ParentCid: 026c
DirBase: 12e6a040 ObjectTable: e1a60830 HandleCount: <Data Not Accessible>
Image: csrss.exe
VadRoot 89ed3980 Vads 111 Clone 0 Private 316. Modified 3126. Locked 0.
DeviceMap e1004470
Token e1a8cb98
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
ffdf0000: Unable to get shared data
ElapsedTime 00:00:00.000
UserTime 00:00:00.000
KernelTime 00:00:00.000
QuotaPoolUsage[PagedPool] 61228
QuotaPoolUsage[NonPagedPool] 5272
Working Set Sizes (now,min,max) (872, 50, 345) (3488KB, 200KB, 1380KB)
PeakWorkingSetSize 1348
VirtualSize 23 Mb
PeakVirtualSize 39 Mb
PageFaultCount 4410
MemoryPriority BACKGROUND
BasePriority 13
CommitCharge 391
Report back the results.
Hope this helps !