New
#1
Random BSOD - dmp attached
Getting a random BSOD and I'm not sure I know how to read the dmps properly. It looks like CSRSS is the problem. Could anyone give me more details?
This is a Dell Latitude E6430 with Win7 64bit
Thanks
Getting a random BSOD and I'm not sure I know how to read the dmps properly. It looks like CSRSS is the problem. Could anyone give me more details?
This is a Dell Latitude E6430 with Win7 64bit
Thanks
Hi sheletal,
Welcome to the 7forums.
The 0xf4 crash can be caused by corruption in the system memory or an infection.
Please do the following:
- Open an admin command prompt
- Copy/paste "sfc/scannow" (without quotes) and press enter
- When it finished reboot your system
- Open again an admin command prompt
- Enter sfc/scannow again
If sfc/scannow does NOT say "Windows Resource Protection did not find any integrity violation", please upload the cbs.log file located at {windows partition}\Windows\Logs\CBS\, if the file is too large try a 3rd party uploader like dropbox, onedrive, google drive, mediafire etc.
System File Check(SFC a.k.a. Windows Resource Protection) needs to have your system rebooted in order for sfc to try to fix the problems that it finds.
Please read BSOD Posting Instructions
Thanks for the help.
SFC did not find integrity violations the 2nd time around. Where do I go from here?
Task manager shows CSRSS is running from system/32 and, as I understand it, this indicates it is not an infection. Should I assume at this point that it's a memory corruption?
my apologies, I have attached the rest of the dmp files
wow, i'm an idiot without my coffee....
everything is now attached
Unfortunately, there are lots of files missing.
Please try running the tool again and make sure there are 20 files (excl. counting dump files) in the zip.
Please download and install Malwarebytes free (Uncheck trial version in the installation process)
Please run a threat scan with Malwarebytes, a full scan with your AV, scan your system with Adwcleaner and Kaspersky TTDSKiller.
Thanks again. Some malware was found and removed. I have put the computer back out in the field for testing.