View Single Post
Old 27-07-2011, 17:51   #1213
MrPeppez
Junior Member
 
Iscritto dal: Jul 2011
Messaggi: 11
ragazzi io ho utilizzato grazie a questa discussione windbg a seguito di una schermata blu..ecco il mio errore (file csrss.exe), spero ci sia qualcuno che riesca ad aiutarmi

Codice PHP:
Microsoft (RWindows Debugger Version 6.12.0002.633 AMD64
Copyright 
(cMicrosoft CorporationAll rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump FileOnly kernel address space is available

Symbol search path is
SRV*c:\Windows\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is
Windows 7 Kernel Version 7601 (Service Pack 1MP (4 procsFree x64
Product
WinNtsuiteTerminalServer SingleUserTS Personal
Built by
7601.17592.amd64fre.win7sp1_gdr.110408-1631
Machine Name
:
Kernel base 0xfffff800`03215000 PsLoadedModuleList = 0xfffff800`0345a650
Debug session time
Wed Jul 27 15:50:12.762 2011 (UTC 2:00)
System Uptime0 days 1:17:22.902
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols
PEB is paged out 
(Peb.Ldr 000007ff`fffdc018).  Type ".hh dbgerr001" for details
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa8008d02230, fffffa8008d02510, fffff80003597f40}

Probably caused by : csrss.exe

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8008d02230, Terminating object
Arg3: fffffa8008d02510, Process image file name
Arg4: fffff80003597f40, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: fffffa8008d02230

IMAGE_NAME:  csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: csrss

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  csrss.exe

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - L'istruzione a 0x%08lx ha fatto riferimento alla memoria a 0x%08lx. La memoria non poteva essere %s.

BUGCHECK_STR:  0xF4_C0000005

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880
`02d28b08 fffff800`0361c7d2 : 00000000`000000f4 00000000`00000003 fffffa80`08d02230 fffffa80`08d02510 : nt!KeBugCheckEx
fffff880
`02d28b10 fffff800`035cabdb : ffffffff`ffffffff fffffa80`08cfeb60 fffffa80`08d02230 fffffa80`08d02230 : nt!PspCatchCriticalBreak+0x92
fffff880
`02d28b50 fffff800`0354d838 : ffffffff`ffffffff 00000000`00000001 fffffa80`08d02230 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x179e6
fffff880`02d28ba0 fffff800`03293f93 : fffffa80`08d02230 fffff880`c0000005 fffffa80`08cfeb60 fffffa80`077eb860 : nt!NtTerminateProcess+0xf4
fffff880`02d28c20 00000000`778c15da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0194e248 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x778c15da


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0xF4_C0000005_IMAGE_csrss.exe

BUCKET_ID:  X64_0xF4_C0000005_IMAGE_csrss.exe

Followup: MachineOwner
--------- 
MrPeppez è offline   Rispondi citando il messaggio o parte di esso