Here's a link to a brief description of the error message:
http://aumha.org/a/stop.php#0xf4This sort of thing can be caused by malware or by malfunctioning programs - and it happens when a thread critical to Windows' operation (such as csrss.exe) is terminated abruptly.
The stack trace shows nprosec.sys as a component in this crash. As such I'd suspect your Norman security software. Try uninstalling it, then reinstalling a freshly downloaded copy to see if this cures it. If it doesn't, then I'd have to wonder about malware - and here's a link for the malware forums:
http://www.geekstogo...emoval-f37.htmlHere's the memory dump:
Loading Dump File [C:\Users\FUBAR\Downloads\Mini042509-06.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18226.x86fre.vistasp1_gdr.090302-1506
Kernel base = 0x81e52000 PsLoadedModuleList = 0x81f69c70
Debug session time: Sat Apr 25 01:57:47.446 2009 (GMT-4)
System Uptime: 0 days 0:04:32.165
Loading Kernel Symbols
....................................................................................................
...................................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, 89fd3020, 89fd316c, 82090400}
*** WARNING: Unable to verify timestamp for nprosec.sys
*** ERROR: Module load completed but symbols could not be loaded for nprosec.sys
Probably caused by : csrss.exe
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 89fd3020, Terminating object
Arg3: 89fd316c, Process image file name
Arg4: 82090400, Explanatory message (ascii)
Debugging Details:
------------------
PROCESS_OBJECT: 89fd3020
IMAGE_NAME: csrss.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: csrss
FAULTING_MODULE: 00000000
PROCESS_NAME: csrss.exe
EXCEPTION_RECORD: 95fa3d10 -- (.exr 0xffffffff95fa3d10)
ExceptionAddress: 76caabba
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 00000000
Attempt to write to address 00000000
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
CUSTOMER_CRASH_COUNT: 6
DEFAULT_BUCKET_ID: NULL_DEREFERENCE
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 81f89868
Unable to read MiSystemVaType memory at 81f69420
00000000
FAILED_INSTRUCTION_ADDRESS:
+76caabba
76caabba ?? ???
BUGCHECK_STR: 0xF4_C0000005
STACK_TEXT:
95fa380c 820e7034 000000f4 00000003 89fd3020 nt!KeBugCheckEx+0x1e
95fa3830 82034da8 82090400 89fd316c 89fd3248 nt!PspCatchCriticalBreak+0x73
95fa3860 82035141 89fd3020 9ca369f0 c0000005 nt!PspTerminateAllThreads+0x2c
95fa3894 96b4547f ffffffff c0000005 95fa38c0 nt!NtTerminateProcess+0x1c1
WARNING: Stack unwind information not available. Following frames may be wrong.
95fa38b0 81ea9a1a ffffffff c0000005 95fa3cf4 nprosec+0x447f
95fa38b0 81ea8a71 ffffffff c0000005 95fa3cf4 nt!KiFastCallEntry+0x12a
95fa3930 81e8880d ffffffff c0000005 10916f1e nt!ZwTerminateProcess+0x11
95fa3cf4 81eaa5da 95fa3d10 00000000 95fa3d64 nt!KiDispatchException+0x41b
95fa3d5c 81eaa58e 087efaa8 76caabba badb0d00 nt!CommonDispatchException+0x4a
95fa3d64 76caabba badb0d00 00000000 00000000 nt!Kei386EoiHelper+0x186
95fa3d68 badb0d00 00000000 00000000 00000000 0x76caabba
95fa3d6c 00000000 00000000 00000000 00000000 0xbadb0d00
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: 0xF4_C0000005_IMAGE_csrss.exe
BUCKET_ID: 0xF4_C0000005_IMAGE_csrss.exe
Followup: MachineOwner
---------