Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Random BSOD 0x000000F4 - csrss.exe referenced in memory dump

17 Sep 2014   #1

Windows 7 Home Premium
Random BSOD 0x000000F4 - csrss.exe referenced in memory dump

Hello all,

Trying to troubleshoot an issue I'm having on my laptop with a random BSOD 0x000000f4. I pulled up windbg and opened up memory.dmp and ran an !analyze -v. Here's what the memory.dmp says about whats going on. Could you please help point me in the right direction?

Things I've checked:
1. csrss.exe is running twice in task manager, but event ID 0 and 1 respectively. ALso verified both are running from c:\windows\system32 so they are both valid. Sometimes multiples can be malware, but not the case here.
2. GPU temperatures, thought it was a GPU overheating issue at first, but the GPU temps were low last night and it BSOD with another error nvdllkm.
3. Lately I've just been letting my laptop idle playing some music from Chrome via pandora. It hadn't done anything other than turn on and bring up chrome to play music, sat there for a few hours, then crashed with the F4 BSOD as opposed to the nvdllkm error.
4. The minidump from earlier today references ntoskrnl.exe as the culprit.

This makes me think it could be either a HDD or a RAM issue.

I pulled up the full memory.dmp from this morning and here's what I got. Please review and let me know what you think I need to do to resolve.

Microsoft (R) Windows Debugger Version 6.3.9600.17237 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred SRV*c:\symbols*
Symbol search path is: SRV*c:\symbols*
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Machine Name:
Kernel base = 0xfffff800`03208000 PsLoadedModuleList = 0xfffff800`0344b890
Debug session time: Wed Sep 17 11:09:43.189 2014 (UTC - 6:00)
System Uptime: 0 days 1:12:03.079
Loading Kernel Symbols
Loading User Symbols
PEB is paged out (Peb.Ldr = 000007ff`fffd5018). Type ".hh dbgerr001" for details
Loading unloaded module list
* *
* Bugcheck Analysis *
* *

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa800a80c060, fffffa800a80c340, fffff80003583270}

Probably caused by : csrss.exe

Followup: MachineOwner

2: kd> !analyze -v
* *
* Bugcheck Analysis *
* *

A process or thread crucial to system operation has unexpectedly exited or been
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arg1: 0000000000000003, Process
Arg2: fffffa800a80c060, Terminating object
Arg3: fffffa800a80c340, Process image file name
Arg4: fffff80003583270, Explanatory message (ascii)

Debugging Details:


PROCESS_OBJECT: fffffa800a80c060

IMAGE_NAME: csrss.exe



FAULTING_MODULE: 0000000000000000

PROCESS_NAME: csrss.exe

EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.




ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre

fffff880`09961e38 fffff800`0360bab2 : 00000000`000000f4 00000000`00000003 fffffa80`0a80c060 fffffa80`0a80c340 : nt!KeBugCheckEx
fffff880`09961e40 fffff800`035b6abb : ffffffff`ffffffff fffffa80`0abf5b50 fffffa80`0a80c060 fffffa80`0a80c060 : nt!PspCatchCriticalBreak+0x92
fffff880`09961e80 fffff800`03535f04 : ffffffff`ffffffff 00000000`00000001 fffffa80`0a80c060 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17486
fffff880`09961ed0 fffff800`0327ce53 : fffffa80`0a80c060 fffff800`c0000006 fffffa80`0abf5b50 00000000`01d40fc0 : nt!NtTerminateProcess+0xf4
fffff880`09961f50 fffff800`03279410 : fffff800`032c882f fffff880`09962a38 fffff880`09962790 fffff880`09962ae0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`099620e8 fffff800`032c882f : fffff880`09962a38 fffff880`09962790 fffff880`09962ae0 00000000`76ef560c : nt!KiServiceLinkage
fffff880`099620f0 fffff800`0327d242 : fffff880`09962a38 00000000`01d80000 fffff880`09962ae0 00000000`76f014e4 : nt! ?? ::FNODOBFM::`string'+0x488e4
fffff880`09962900 fffff800`0327bdba : 00000000`00000000 00000000`76ef560f 00000000`01d62001 00000000`01d80000 : nt!KiExceptionDispatch+0xc2
fffff880`09962ae0 00000000`77028f56 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`01d416e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77028f56





BUCKET_ID: X64_0xF4_IOERR_IMAGE_csrss.exe


FAILURE_ID_HASH_STRING: km:x64_0xf4_ioerr_image_csrss.exe

FAILURE_ID_HASH: {183378f4-a174-8cab-8ad7-e5d860a58439}

Followup: MachineOwner

Appreciate you guys looking into this for me.
My System SpecsSystem Spec
17 Sep 2014   #2

W7 Pro x64 SP1 | W10 Pro IP x64 | W8.1 Pro x64 VM | Linux Mint VM

Welcome to 7F. We need more information to analyze your logs. Follow Blue Screen of Death (BSOD) Posting Instructions, let the tool run until it has completely finished and then upload the new logs.
My System SpecsSystem Spec
17 Sep 2014   #3

Windows 7 Home Premium

Sorry about that, I thought I had already done enough by using windbg to check the full memory.dmp.. Thought the mini dumps weren't as helpful.

Anyways, here is the zip file. Let me know what you think.
My System SpecsSystem Spec

17 Sep 2014   #4

Windows 7 Home Premium

I ran a scan with Sea Tools on my Hdd, 40 bad sectors. Repaired them and I'm back into Windows. Going to see if that was all it was and play with it a bit tonight. I'll run a full scan again tomorrow. Dont dig too hard on those logs, prob just the hdd. I/O error was what pointed me to it.
My System SpecsSystem Spec
18 Sep 2014   #5

Windows 7 Home Premium

FYI - Ran another Long generic pass with the SeaTools and got a pass. Looking like that was the issue, also no bsod yet since repairing the bad sectors.

Thx guys!
My System SpecsSystem Spec

Thread Tools

Similar help and support threads
Thread Forum
Inconsistent BSOD at login, csrss.exe at fault? error 0x000000f4
Hi guys, Always found browsing these forums useful, now it's my turn to join and ask for help! Have a laptop that has the above issue (BSOD doesn't always occur, but at least 50% of the time) - literally as the user logs in. I've run the .dmp files through BlueScreenView and WinDbg which...
BSOD Help and Support
BSOD at seemingly random times, memory dump blaming random drivers
I've been plagued by odd problems since making this custom build about a month ago, but the latest is the increasing frequency of BSODs. They never occur at load (gaming with high end specs), but often occur at shutdown (forcing a restart before I can then actually shut down). I normally boot into...
BSOD Help and Support
Getting random Memory Dump BSOD
Hi all, Im new to this forum and I built my PC around Sept of last year. I have 8 gigs of memory and have not run into issues until last month. I get random memory dump crashes with BSOD and reboot when playing my games. I usually play Microsoft Flight Simulator 2004 (FS9). Sometimes it will...
BSOD Help and Support
BSOD Physcial Memory Dump @ random intervals
Ive recieved this BSOD while doing anything from browsing the web, idling or gaming. Sony Vaio VPCCW21FX x64 original os OEM 2.5 years old I reinstalled OS hoping to cure problems 03/30/2012
BSOD Help and Support
How to debug full memory dump with respect csrss.exe related BSOD
I tried to look but I could not find anything really useful. Maybe someone on that forum could write small tutorial on how to debug full memory dump when the csrss.exe BSOD occurs after computer returns from sleep or ot least point out some good web with such a howto. Standard "!analyze -v"...
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:08.
Twitter Facebook