Windows 7 Blue Screen

[twgmx]

Spoiler

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa800819b060, fffffa800819b340, fffff8000357eb70}

----- ETW minidump data unavailable-----
Probably caused by : csrss.exe

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa800819b060, Terminating object
Arg3: fffffa800819b340, Process image file name
Arg4: fffff8000357eb70, Explanatory message (ascii)

Debugging Details:
------------------

----- ETW minidump data unavailable-----

PROCESS_OBJECT: fffffa800819b060

IMAGE_NAME:  csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: csrss

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  csrss.exe

EXCEPTION_CODE: (Win32) 0x8210060 (136380512) - <Unable to get error code text>

BUGCHECK_STR:  0xF4_8210060

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880`029a4e48 fffff800`03608852 : 00000000`000000f4 00000000`00000003 fffffa80`0819b060 fffffa80`0819b340 : nt!KeBugCheckEx
fffff880`029a4e50 fffff800`035c609b : 00000000`00000001 fffffa80`08210060 fffffa80`0819b060 00000000`00b10400 : nt!PspCatchCriticalBreak+0x92
fffff880`029a4e90 fffff800`0352f454 : 00000000`00000001 ffffffff`ffffffff fffffa80`0819b060 001fffff`00000008 : nt! ?? ::NNGAKEGL::`string'+0x27296
fffff880`029a4ee0 fffff800`03273693 : ffffffff`ffffffff fffffa80`08210060 fffffa80`0819b060 00000000`00b10440 : nt!NtTerminateProcess+0x284
fffff880`029a4f50 fffff800`0326fc50 : fffff800`032f46f9 fffff880`029a5a38 fffff880`029a5790 fffff880`029a5ae0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`029a50e8 fffff800`032f46f9 : fffff880`029a5a38 fffff880`029a5790 fffff880`029a5ae0 00000000`77c17efb : nt!KiServiceLinkage
fffff880`029a50f0 fffff800`03273a82 : fffff880`029a5a38 00000000`00000000 fffff880`029a5ae0 00000000`00b11aa8 : nt! ?? ::FNODOBFM::`string'+0x40f54
fffff880`029a5900 fffff800`032725fa : 00000000`00000001 00000000`00b10b58 00000000`00000301 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`029a5ae0 00000000`77c081ed : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`00b10b60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77c081ed

STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0xF4_8210060_IMAGE_csrss.exe

BUCKET_ID:  X64_0xF4_8210060_IMAGE_csrss.exe

Spoiler

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff8800317e598
Arg3: fffff8800317ddf0
Arg4: fffff8800129b1ea

Debugging Details:
------------------

EXCEPTION_RECORD:  fffff8800317e598 -- (.exr 0xfffff8800317e598)
ExceptionAddress: fffff8800129b1ea (Ntfs! ?? ::NNGAKEGL::`string'+0x000000000000cb62)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff8800317ddf0 -- (.cxr 0xfffff8800317ddf0)
rax=fffff8a0106e9bc0 rbx=fffff8800317e858 rcx=0080000000000000
rdx=fffff88002f65180 rsi=0000000000000706 rdi=0000000000000705
rip=fffff8800129b1ea rsp=fffff8800317e7d0 rbp=0000000000000130
 r8=0000000000000001  r9=00000000000000c0 r10=fffff8000321c000
r11=0000000000000019 r12=0000000000000703 r13=0000000000000000
r14=fffff8a0106e9901 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206
Ntfs! ?? ::NNGAKEGL::`string'+0xcb62:
fffff880`0129b1ea 4c896950        mov     qword ptr [rcx+50h],r13 ds:002b:00800000`00000050=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034c8100
GetUlongFromAddress: unable to read from fffff800034c81c8
 ffffffffffffffff 

FOLLOWUP_IP: 
Ntfs! ?? ::NNGAKEGL::`string'+cb62
fffff880`0129b1ea 4c896950        mov     qword ptr [rcx+50h],r13

FAULTING_IP: 
Ntfs! ?? ::NNGAKEGL::`string'+cb62
fffff880`0129b1ea 4c896950        mov     qword ptr [rcx+50h],r13

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from fffff880012b5bb1 to fffff8800129b1ea

STACK_TEXT:  
fffff880`0317e7d0 fffff880`012b5bb1 : 00000000`00000000 00000000`00000000 fffff800`03435200 00000000`00000001 : Ntfs! ?? ::NNGAKEGL::`string'+0xcb62
fffff880`0317e810 fffff880`0122f620 : fffff8a0`106e9ac0 fffff8a0`106e9bc0 fffff800`03435200 fffff8a0`106e95f0 : Ntfs!NtfsRemoveScb+0x61
fffff880`0317e850 fffff880`0122e86f : fffff8a0`106e9a90 fffff800`03435280 fffff880`0317ea01 fffffa80`07b281c0 : Ntfs!NtfsPrepareFcbForRemoval+0x50
fffff880`0317e880 fffff880`012b361c : fffffa80`07b281c0 fffffa80`0bf35180 fffff8a0`106e95c0 fffff8a0`106e9958 : Ntfs!NtfsTeardownFromLcb+0x2af
fffff880`0317e910 fffff880`01235ab2 : fffffa80`07b281c0 fffffa80`07b281c0 fffff8a0`106e95c0 00000000`00000000 : Ntfs!NtfsTeardownStructures+0xcc
fffff880`0317e990 fffff880`012c2f93 : fffffa80`07b281c0 fffff800`03435280 fffff8a0`106e95c0 00000000`00000009 : Ntfs!NtfsDecrementCloseCounts+0xa2
fffff880`0317e9d0 fffff880`012b232b : fffffa80`07b281c0 fffff8a0`106e96f0 fffff8a0`106e95c0 fffffa80`0bf35180 : Ntfs!NtfsCommonClose+0x353
fffff880`0317eaa0 fffff800`03295355 : 00000000`00000000 fffff800`03588300 fffffa80`0705db01 00000000`00000002 : Ntfs!NtfsFspClose+0x15f
fffff880`0317eb70 fffff800`03527236 : 00000000`00000000 fffffa80`0705db50 00000000`00000080 fffffa80`06feb040 : nt!ExpWorkerThread+0x111
fffff880`0317ec00 fffff800`0327d706 : fffff880`02f65180 fffffa80`0705db50 fffff880`02f6ffc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`0317ec40 00000000`00000000 : fffff880`0317f000 fffff880`03179000 fffff880`0317e330 00000000`00000000 : nt!KxStartSystemThread+0x16

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  Ntfs! ?? ::NNGAKEGL::`string'+cb62

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5167f5fc

STACK_COMMAND:  .cxr 0xfffff8800317ddf0 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!_??_::NNGAKEGL::_string_+cb62

BUCKET_ID:  X64_0x24_Ntfs!_??_::NNGAKEGL::_string_+cb62

Followup: MachineOwner
---------
 

 

 

 

I've been getting blue screens and I would appreciate any help narrowing down the cause.

 

Thanks in advance and sorry if I posted this to the incorrect board.