asked on

Error Code 000000f4 (Event ID 1003, Cat 102)

Have an interesting problem coming from a clients laptop. He is getting an error code 000000f4, parameter 1 00000003, parameter 2 86cb4da0, parameter 3 86cb4f14, parameter 4 805f9f88.

This has happened a couple of times now and the problem can not be duplicated by myself. But I do show it in the system log on the PC that it is a critical system error.

Any thoughts? This customer of mine is a tax office and beings that it is close to 4-15 they are super swamped.
THANKS!

cpc2004

Sample output of minidump of Bugcehck code F4. The exception status has the most useful diagnostic information of your problem.

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 8532e950, Terminating object
Arg3: 8532eac4, Process image file name
Arg4: 805c7478, Explanatory message (ascii)

Debugging Details:
------------------
PROCESS_OBJECT: 8532e950
IMAGE_NAME: csrss.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: csrss
FAULTING_MODULE: 00000000
EXCEPTION_RECORD: f782b9d8 -- (.exr fffffffff782b9d8)
ExceptionAddress: 75b73002
ExceptionCode: c000001d (Illegal instruction) <--------- The most useful diagnostic information
ExceptionFlags: 00000000
NumberParameters: 0

EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {
BUGCHECK_STR: 0xF4_C000001D
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: csrss.exe
ERROR_CODE: (NTSTATUS) 0xc000001d - {
LAST_CONTROL_TRANSFER: from 805c65a9 to 804f8925

Zip 5 to 6 minidumps to a zip file and attach it at any webspace. I will study the dump and find out the culprit. If you can't provide the minidumps, run memtest to stress test the ram. Make sure that your windows is not infected with spyware, adware adn chkdsk /r.

http://www.memtest86.com/.

Get public webspace
Use a free service like rapidshare to attach the minidumps and post the url of the mimidumps at this thread.
http://www.rapidshare.de/

mrjking2000

ASKER

I returned the laptop to the customer. It will take me a day or so to get the minidump files off the laptop. I know that two were created...and I'll post them on my web site.

I will let you know when I get them.

Thanks.

mrjking2000

ASKER

sorry for the delay...I still haven't been back over to the customer's office and got the dump files off the laptop. Just been swamped and so far it has been working perfectly...no further complaints.

I do still intend to get the error code.

Thanks!

mrjking2000

ASKER

Okay wow sorry for the very long delay on this one.

I posted the minidump files to http://www.nti-llc.net/log/

Then click on the mini033106-01 and -02.dmp files.

Thanks for the help.

ASKER CERTIFIED SOLUTION

cpc2004

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

cpc2004

EXCEPTION_CODE: (NTSTATUS) 0xc000000e - <-- No such device (Maybe the paging space is corrupted)

Refer the following problem and it is exact match of your problem
http://www.techspot.com/vb/showthread.php?p=191344#post191344

mrjking2000

ASKER

okay thanks for the info, I will have to head over to the client's office and run the chkdsk/r and recreate the pagefile.

I'll post on status update soon, hopefully tomorrow.

--Thanks

mrjking2000

ASKER

That did the trick, laptop has been online for over a week and no issues.

Thanks!