ragazzi io ho utilizzato grazie a questa discussione windbg a seguito di una schermata blu..ecco il mio errore (file csrss.exe), spero ci sia qualcuno che riesca ad aiutarmi
Codice PHP:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\Windows\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17592.amd64fre.win7sp1_gdr.110408-1631
Machine Name:
Kernel base = 0xfffff800`03215000 PsLoadedModuleList = 0xfffff800`0345a650
Debug session time: Wed Jul 27 15:50:12.762 2011 (UTC + 2:00)
System Uptime: 0 days 1:17:22.902
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 000007ff`fffdc018). Type ".hh dbgerr001" for details
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, fffffa8008d02230, fffffa8008d02510, fffff80003597f40}
Probably caused by : csrss.exe
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8008d02230, Terminating object
Arg3: fffffa8008d02510, Process image file name
Arg4: fffff80003597f40, Explanatory message (ascii)
Debugging Details:
------------------
PROCESS_OBJECT: fffffa8008d02230
IMAGE_NAME: csrss.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: csrss
FAULTING_MODULE: 0000000000000000
PROCESS_NAME: csrss.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - L'istruzione a 0x%08lx ha fatto riferimento alla memoria a 0x%08lx. La memoria non poteva essere %s.
BUGCHECK_STR: 0xF4_C0000005
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 0
STACK_TEXT:
fffff880`02d28b08 fffff800`0361c7d2 : 00000000`000000f4 00000000`00000003 fffffa80`08d02230 fffffa80`08d02510 : nt!KeBugCheckEx
fffff880`02d28b10 fffff800`035cabdb : ffffffff`ffffffff fffffa80`08cfeb60 fffffa80`08d02230 fffffa80`08d02230 : nt!PspCatchCriticalBreak+0x92
fffff880`02d28b50 fffff800`0354d838 : ffffffff`ffffffff 00000000`00000001 fffffa80`08d02230 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x179e6
fffff880`02d28ba0 fffff800`03293f93 : fffffa80`08d02230 fffff880`c0000005 fffffa80`08cfeb60 fffffa80`077eb860 : nt!NtTerminateProcess+0xf4
fffff880`02d28c20 00000000`778c15da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0194e248 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x778c15da
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: X64_0xF4_C0000005_IMAGE_csrss.exe
BUCKET_ID: X64_0xF4_C0000005_IMAGE_csrss.exe
Followup: MachineOwner
---------