Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account

Problem with Vista- Blue Screen error

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 1 posts

I need help with my new laptop which has been rather unstable. Could someone help me out with this one as i'm at a loss!

Thank you!

The minidump file is uploaded to http://www.mediafire...04e75f6e8ebb871

The error msg is as follows:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.
Locale ID: 18441

Additional information about the problem:
BCCode: f4
BCP1: 00000003
BCP2: 89FD3020
BCP3: 89FD316C
BCP4: 82090400
OS Version: 6_0_6001
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:

Read our privacy statement:

Edited by Jspr, 25 April 2009 - 12:40 AM.

  • 0





  • Member
  • PipPipPip
  • 636 posts
  • MVP
Here's a link to a brief description of the error message: http://aumha.org/a/stop.php#0xf4
This sort of thing can be caused by malware or by malfunctioning programs - and it happens when a thread critical to Windows' operation (such as csrss.exe) is terminated abruptly.

The stack trace shows nprosec.sys as a component in this crash. As such I'd suspect your Norman security software. Try uninstalling it, then reinstalling a freshly downloaded copy to see if this cures it. If it doesn't, then I'd have to wonder about malware - and here's a link for the malware forums: http://www.geekstogo...emoval-f37.html

Here's the memory dump:
Loading Dump File [C:\Users\FUBAR\Downloads\Mini042509-06.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18226.x86fre.vistasp1_gdr.090302-1506
Kernel base = 0x81e52000 PsLoadedModuleList = 0x81f69c70
Debug session time: Sat Apr 25 01:57:47.446 2009 (GMT-4)
System Uptime: 0 days 0:04:32.165
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*																			 *
*						Bugcheck Analysis									*
*																			 *

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 89fd3020, 89fd316c, 82090400}

*** WARNING: Unable to verify timestamp for nprosec.sys
*** ERROR: Module load completed but symbols could not be loaded for nprosec.sys
Probably caused by : csrss.exe

Followup: MachineOwner

1: kd> !analyze -v
*																			 *
*						Bugcheck Analysis									*
*																			 *

A process or thread crucial to system operation has unexpectedly exited or been
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arg1: 00000003, Process
Arg2: 89fd3020, Terminating object
Arg3: 89fd316c, Process image file name
Arg4: 82090400, Explanatory message (ascii)

Debugging Details:


IMAGE_NAME:  csrss.exe




PROCESS_NAME:  csrss.exe

EXCEPTION_RECORD:  95fa3d10 -- (.exr 0xffffffff95fa3d10)
ExceptionAddress: 76caabba
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000001
   Parameter[1]: 00000000
Attempt to write to address 00000000

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.




ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

WRITE_ADDRESS: GetPointerFromAddress: unable to read from 81f89868
Unable to read MiSystemVaType memory at 81f69420

76caabba ??			  ???

BUGCHECK_STR:  0xF4_C0000005

95fa380c 820e7034 000000f4 00000003 89fd3020 nt!KeBugCheckEx+0x1e
95fa3830 82034da8 82090400 89fd316c 89fd3248 nt!PspCatchCriticalBreak+0x73
95fa3860 82035141 89fd3020 9ca369f0 c0000005 nt!PspTerminateAllThreads+0x2c
95fa3894 96b4547f ffffffff c0000005 95fa38c0 nt!NtTerminateProcess+0x1c1
WARNING: Stack unwind information not available. Following frames may be wrong.
95fa38b0 81ea9a1a ffffffff c0000005 95fa3cf4 nprosec+0x447f
95fa38b0 81ea8a71 ffffffff c0000005 95fa3cf4 nt!KiFastCallEntry+0x12a
95fa3930 81e8880d ffffffff c0000005 10916f1e nt!ZwTerminateProcess+0x11
95fa3cf4 81eaa5da 95fa3d10 00000000 95fa3d64 nt!KiDispatchException+0x41b
95fa3d5c 81eaa58e 087efaa8 76caabba badb0d00 nt!CommonDispatchException+0x4a
95fa3d64 76caabba badb0d00 00000000 00000000 nt!Kei386EoiHelper+0x186
95fa3d68 badb0d00 00000000 00000000 00000000 0x76caabba
95fa3d6c 00000000 00000000 00000000 00000000 0xbadb0d00


FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  0xF4_C0000005_IMAGE_csrss.exe

BUCKET_ID:  0xF4_C0000005_IMAGE_csrss.exe

Followup: MachineOwner

  • 0



    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts

I need help with my new laptop which has been rather unstable.

More info needed.
Did you have just one .dmp file?
  • 0

Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP