Problem with Vista- Blue Screen error

Hi

I need help with my new laptop which has been rather unstable. Could someone help me out with this one as i'm at a loss!

Thank you!

The minidump file is uploaded to http://www.mediafire...04e75f6e8ebb871

The error msg is as follows:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.256.6
Locale ID: 18441

Additional information about the problem:
BCCode: f4
BCP1: 00000003
BCP2: 89FD3020
BCP3: 89FD316C
BCP4: 82090400
OS Version: 6_0_6001
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\Mini042509-06.dmp
C:\Users\Sue-Ann\AppData\Local\Temp\WER-86908-0.sysdata.xml
C:\Users\Sue-Ann\AppData\Local\Temp\WERD799.tmp.version.txt

Read our privacy statement:
http://go.microsoft....mp;clcid=0x0409

Edited by Jspr, 25 April 2009 - 12:40 AM.

Here's a link to a brief description of the error message: http://aumha.org/a/stop.php#0xf4
This sort of thing can be caused by malware or by malfunctioning programs - and it happens when a thread critical to Windows' operation (such as csrss.exe) is terminated abruptly.

The stack trace shows nprosec.sys as a component in this crash. As such I'd suspect your Norman security software. Try uninstalling it, then reinstalling a freshly downloaded copy to see if this cures it. If it doesn't, then I'd have to wonder about malware - and here's a link for the malware forums: http://www.geekstogo...emoval-f37.html

Here's the memory dump:

Loading Dump File [C:\Users\FUBAR\Downloads\Mini042509-06.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18226.x86fre.vistasp1_gdr.090302-1506
Kernel base = 0x81e52000 PsLoadedModuleList = 0x81f69c70
Debug session time: Sat Apr 25 01:57:47.446 2009 (GMT-4)
System Uptime: 0 days 0:04:32.165
Loading Kernel Symbols
....................................................................................................
...................................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*																			 *
*						Bugcheck Analysis									*
*																			 *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 89fd3020, 89fd316c, 82090400}

*** WARNING: Unable to verify timestamp for nprosec.sys
*** ERROR: Module load completed but symbols could not be loaded for nprosec.sys
Probably caused by : csrss.exe

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*																			 *
*						Bugcheck Analysis									*
*																			 *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 89fd3020, Terminating object
Arg3: 89fd316c, Process image file name
Arg4: 82090400, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: 89fd3020

IMAGE_NAME:  csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: csrss

FAULTING_MODULE: 00000000 

PROCESS_NAME:  csrss.exe

EXCEPTION_RECORD:  95fa3d10 -- (.exr 0xffffffff95fa3d10)
ExceptionAddress: 76caabba
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000001
   Parameter[1]: 00000000
Attempt to write to address 00000000

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

CUSTOMER_CRASH_COUNT:  6

DEFAULT_BUCKET_ID:  NULL_DEREFERENCE

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

WRITE_ADDRESS: GetPointerFromAddress: unable to read from 81f89868
Unable to read MiSystemVaType memory at 81f69420
 00000000 

FAILED_INSTRUCTION_ADDRESS: 
+76caabba
76caabba ??			  ???

BUGCHECK_STR:  0xF4_C0000005

STACK_TEXT:  
95fa380c 820e7034 000000f4 00000003 89fd3020 nt!KeBugCheckEx+0x1e
95fa3830 82034da8 82090400 89fd316c 89fd3248 nt!PspCatchCriticalBreak+0x73
95fa3860 82035141 89fd3020 9ca369f0 c0000005 nt!PspTerminateAllThreads+0x2c
95fa3894 96b4547f ffffffff c0000005 95fa38c0 nt!NtTerminateProcess+0x1c1
WARNING: Stack unwind information not available. Following frames may be wrong.
95fa38b0 81ea9a1a ffffffff c0000005 95fa3cf4 nprosec+0x447f
95fa38b0 81ea8a71 ffffffff c0000005 95fa3cf4 nt!KiFastCallEntry+0x12a
95fa3930 81e8880d ffffffff c0000005 10916f1e nt!ZwTerminateProcess+0x11
95fa3cf4 81eaa5da 95fa3d10 00000000 95fa3d64 nt!KiDispatchException+0x41b
95fa3d5c 81eaa58e 087efaa8 76caabba badb0d00 nt!CommonDispatchException+0x4a
95fa3d64 76caabba badb0d00 00000000 00000000 nt!Kei386EoiHelper+0x186
95fa3d68 badb0d00 00000000 00000000 00000000 0x76caabba
95fa3d6c 00000000 00000000 00000000 00000000 0xbadb0d00


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  0xF4_C0000005_IMAGE_csrss.exe

BUCKET_ID:  0xF4_C0000005_IMAGE_csrss.exe

Followup: MachineOwner
---------

#1
Jspr

Posted 25 April 2009 - 12:27 AM

Advertisements

#2
usasma

Posted 25 April 2009 - 10:03 AM

#3
Broni

Posted 25 April 2009 - 05:30 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us