I got the Windows Debugger installed, this is what I got first:
Code:
MODULE_NAME: csrss
FAULTING_MODULE: 0000000000000000
DEBUG_FLR_IMAGE_TIMESTAMP: 0
Probably caused by : csrss.exe
Followup: MachineOwner
---------
10: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa80541ecb30, Terminating object
Arg3: fffffa80541ece10, Process image file name
Arg4: fffff80002de4510, Explanatory message (ascii)
----in between are a bunch of "Your debugger is not using the correct symbols" errors ------
PROCESS_OBJECT: fffffa80541ecb30
IMAGE_NAME: csrss.exe
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xF4
CURRENT_IRQL: 0
STACK_TEXT:
fffff880`02dd0b08 fffff800`02e6c892 : 00000000`000000f4 00000000`00000003 fffffa80`541ecb30 fffffa80`541ece10 : nt+0x7f1c0
fffff880`02dd0b10 00000000`000000f4 : 00000000`00000003 fffffa80`541ecb30 fffffa80`541ece10 fffff800`02de4510 : nt+0x406892
fffff880`02dd0b18 00000000`00000003 : fffffa80`541ecb30 fffffa80`541ece10 fffff800`02de4510 fffff800`02dd7b94 : 0xf4
fffff880`02dd0b20 fffffa80`541ecb30 : fffffa80`541ece10 fffff800`02de4510 fffff800`02dd7b94 fffffa80`541ecb30 : 0x3
fffff880`02dd0b28 fffffa80`541ece10 : fffff800`02de4510 fffff800`02dd7b94 fffffa80`541ecb30 fffff800`02e18e8b : 0xfffffa80`541ecb30
fffff880`02dd0b30 fffff800`02de4510 : fffff800`02dd7b94 fffffa80`541ecb30 fffff800`02e18e8b ffffffff`ffffffff : 0xfffffa80`541ece10
fffff880`02dd0b38 fffff800`02dd7b94 : fffffa80`541ecb30 fffff800`02e18e8b ffffffff`ffffffff fffffa80`54417b50 : nt+0x37e510
fffff880`02dd0b40 fffffa80`541ecb30 : fffff800`02e18e8b ffffffff`ffffffff fffffa80`54417b50 fffffa80`541ecb30 : nt+0x371b94
fffff880`02dd0b48 fffff800`02e18e8b : ffffffff`ffffffff fffffa80`54417b50 fffffa80`541ecb30 fffffa80`5440b060 : 0xfffffa80`541ecb30
fffff880`02dd0b50 ffffffff`ffffffff : fffffa80`54417b50 fffffa80`541ecb30 fffffa80`5440b060 00000000`000001d4 : nt+0x3b2e8b
fffff880`02dd0b58 fffffa80`54417b50 : fffffa80`541ecb30 fffffa80`5440b060 00000000`000001d4 00000000`00000008 : 0xffffffff`ffffffff
fffff880`02dd0b60 fffffa80`541ecb30 : fffffa80`5440b060 00000000`000001d4 00000000`00000008 fffffa80`5440b060 : 0xfffffa80`54417b50
fffff880`02dd0b68 fffffa80`5440b060 : 00000000`000001d4 00000000`00000008 fffffa80`5440b060 00000000`00000000 : 0xfffffa80`541ecb30
fffff880`02dd0b70 00000000`000001d4 : 00000000`00000008 fffffa80`5440b060 00000000`00000000 fffffa80`54417b50 : 0xfffffa80`5440b060
fffff880`02dd0b78 00000000`00000008 : fffffa80`5440b060 00000000`00000000 fffffa80`54417b50 fffff800`02d97f74 : 0x1d4
fffff880`02dd0b80 fffffa80`5440b060 : 00000000`00000000 fffffa80`54417b50 fffff800`02d97f74 ffffffff`ffffffff : 0x8
fffff880`02dd0b88 00000000`00000000 : fffffa80`54417b50 fffff800`02d97f74 ffffffff`ffffffff 00000000`00000001 : 0xfffffa80`5440b060
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
10: kd> lmvm csrss
start end module name
I then found out how to attach to Microsoft's symbol server and got this:
Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\RnG\Desktop\SF_24-10-2012\bsod\102412-14430-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*f:\localsymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (24 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Machine Name:
Kernel base = 0xfffff800`02a66000 PsLoadedModuleList = 0xfffff800`02caa670
Debug session time: Wed Oct 24 02:00:00.782 2012 (UTC - 4:00)
System Uptime: 0 days 23:44:04.781
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, fffffa80541ecb30, fffffa80541ece10, fffff80002de4510}
Probably caused by : _
Followup: MachineOwner
---------
10: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa80541ecb30, Terminating object
Arg3: fffffa80541ece10, Process image file name
Arg4: fffff80002de4510, Explanatory message (ascii)
Debugging Details:
------------------
PROCESS_OBJECT: fffffa80541ecb30
IMAGE_NAME: _
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: _
FAULTING_MODULE: 0000000000000000
PROCESS_NAME: ASCServiceCrea
BUGCHECK_STR: 0xF4_ASCServiceCrea
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002e6c892 to fffff80002ae51c0
STACK_TEXT:
fffff880`02dd0b08 fffff800`02e6c892 : 00000000`000000f4 00000000`00000003 fffffa80`541ecb30 fffffa80`541ece10 : nt!KeBugCheckEx
fffff880`02dd0b10 fffff800`02e18e8b : ffffffff`ffffffff fffffa80`54417b50 fffffa80`541ecb30 fffffa80`5440b060 : nt!PspCatchCriticalBreak+0x92
fffff880`02dd0b50 fffff800`02d97f74 : ffffffff`ffffffff 00000000`00000001 fffffa80`541ecb30 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x176d6
fffff880`02dd0ba0 fffff800`02ae4453 : fffffa80`541ecb30 fffff880`00000000 fffffa80`54417b50 00000000`00000000 : nt!NtTerminateProcess+0xf4
fffff880`02dd0c20 00000000`77be15da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0008e318 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77be15da
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: X64_0xF4_ASCServiceCrea_IMAGE__
BUCKET_ID: X64_0xF4_ASCServiceCrea_IMAGE__
Followup: MachineOwner
---------
The first debug says it was csrss.exe, which as I understand will cause a system failure if it crashes. The second debug apparently doesn't know what caused the error. Any thoughts?