none
Server 2008 R2 Bluescreen Probably caused by : csrss.exe RRS feed

  • Allgemeine Diskussion

  • Hallo zusammen,

    einer unserer zahlreichen 2008 R2 Server hängt seit dem Installieren von Windows-Updates in einem Bootloop.

    Der Crashdump bringt leider keinen stichhaltigen Anhaltspunkt, woran es liegen könnte...

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck F4, {3, fffffa800e980810, fffffa800e980af0, fffff80001995510}
    
    ----- ETW minidump data unavailable-----
    Probably caused by : csrss.exe
    
    Followup: MachineOwner
    ---------
    
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    CRITICAL_OBJECT_TERMINATION (f4)
    A process or thread crucial to system operation has unexpectedly exited or been
    terminated.
    Several processes and threads are necessary for the operation of the
    system; when they are terminated (for any reason), the system can no
    longer function.
    Arguments:
    Arg1: 0000000000000003, Process
    Arg2: fffffa800e980810, Terminating object
    Arg3: fffffa800e980af0, Process image file name
    Arg4: fffff80001995510, Explanatory message (ascii)
    
    Debugging Details:
    ------------------
    
    ----- ETW minidump data unavailable-----
    
    PROCESS_OBJECT: fffffa800e980810
    
    IMAGE_NAME:  csrss.exe
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  0
    
    MODULE_NAME: csrss
    
    FAULTING_MODULE: 0000000000000000 
    
    PROCESS_NAME:  controller.exe
    
    BUGCHECK_STR:  0xF4_controller.exe
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from fffff80001a1d892 to fffff800016961c0
    
    STACK_TEXT:  
    fffff880`0a625b08 fffff800`01a1d892 : 00000000`000000f4 00000000`00000003 fffffa80`0e980810 fffffa80`0e980af0 : nt!KeBugCheckEx
    fffff880`0a625b10 fffff800`019c9e8b : ffffffff`ffffffff fffffa80`0ec72060 fffffa80`0e980810 fffffa80`0ec78b30 : nt!PspCatchCriticalBreak+0x92
    fffff880`0a625b50 fffff800`01948f74 : ffffffff`ffffffff 00000000`00000001 fffffa80`0e980810 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x176d6
    fffff880`0a625ba0 fffff800`01695453 : fffffa80`0e980810 fffff880`0000002f fffffa80`0ec72060 00000000`00000000 : nt!NtTerminateProcess+0xf4
    fffff880`0a625c20 00000000`776c15da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`0012ef28 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776c15da
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_NAME:  MachineOwner
    
    FAILURE_BUCKET_ID:  X64_0xF4_controller.exe_IMAGE_csrss.exe
    
    BUCKET_ID:  X64_0xF4_controller.exe_IMAGE_csrss.exe
    
    Followup: MachineOwner
    ---------
    
    0: kd> !process fffffa800e980810 3
    GetPointerFromAddress: unable to read from fffff800018c5000
    PROCESS fffffa800e980810
        SessionId: none  Cid: 01a8    Peb: 7fffffd9000  ParentCid: 0198
        DirBase: 2e21c0000  ObjectTable: fffff8a00379db40  HandleCount: <Data Not Accessible>
        Image: csrss.exe
        VadRoot fffffa800c1c5230 Vads 58 Clone 0 Private 443. Modified 651. Locked 0.
        DeviceMap fffff8a000008c10
        Token                             fffff8a006884c50
        ReadMemory error: Cannot get nt!KeMaximumIncrement value.
    fffff78000000000: Unable to get shared data
        ElapsedTime                       00:00:00.000
        UserTime                          00:00:00.000
        KernelTime                        00:00:00.000
        QuotaPoolUsage[PagedPool]         94904
        QuotaPoolUsage[NonPagedPool]      8984
        Working Set Sizes (now,min,max)  (1093, 50, 345) (4372KB, 200KB, 1380KB)
        PeakWorkingSetSize                1093
        VirtualSize                       42 Mb
        PeakVirtualSize                   42 Mb
        PageFaultCount                    1242
        MemoryPriority                    BACKGROUND
        BasePriority                      13
        CommitCharge                      561

    Googlen nach "Probably caused by : csrss.exe" bringt zwar unheimlich viele Ergebnisse, Lösungen was man versuchen könnte, sucht man aber vergeblich :-(

    Kann jemand helfen?

    Gruß

    Miranda

    Donnerstag, 15. November 2012 10:57

Alle Antworten