Windows XP SP2

[tatteredpotato]

I haven't used the PC in several days, came into work and it'll BSOD every 2 minutes.

From the memory dump:


Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [S:\Mini081009-04.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\WINDOWS\symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x80553420
Debug session time: Mon Aug 10 10:35:07.484 2009 (GMT-4)
System Uptime: 0 days 0:02:36.084
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
......................................................
Loading User Symbols
Loading unloaded module list
.............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 89ded3a8, 89ded51c, 805c77ca}

unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase
Probably caused by : csrss.exe

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 89ded3a8, Terminating object
Arg3: 89ded51c, Process image file name
Arg4: 805c77ca, Explanatory message (ascii)

Debugging Details:
------------------

unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase

PROCESS_OBJECT: 89ded3a8

IMAGE_NAME: csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: csrss

FAULTING_MODULE: 00000000

PROCESS_NAME: csrss.exe

CUSTOMER_CRASH_COUNT: 4

DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT

BUGCHECK_STR: 0xF4

IRP_ADDRESS: 000000b4

STACK_TEXT:
b68dad00 805c68fb 000000f4 00000003 89ded3a8 nt!IopCompleteRequest+0x19c
b68dad24 805c7875 805c77ca 89ded3a8 89ded51c nt!IopDeleteLegacyKey+0x7d
b68dad54 8053ca48 89ded5f0 c0000005 011cebcc nt!PpBusTypeGuidGetIndex+0x2d
b68dad64 7c90e514 badb0d00 011ceb94 00000000 nt!MiIdentifyPfn+0x304
WARNING: Frame IP not in any known module. Following frames may be wrong.
b68dad68 badb0d00 011ceb94 00000000 00000000 0x7c90e514
b68dad6c 011ceb94 00000000 00000000 00000000 0xbadb0d00
b68dad70 00000000 00000000 00000000 00000000 0x11ceb94


STACK_COMMAND: kb

FOLLOWUP_NAME: MachineOwner

FAILURE_BUCKET_ID: 0xF4_IMAGE_csrss.exe

BUCKET_ID: 0xF4_IMAGE_csrss.exe

Followup: MachineOwner
---------