我们有一个相当紧迫的问题,那就是在提交login屏幕之前,公司老的SBS服务器BSOD的权利。
我通过WinDbg运行迷你转储,并得到以下输出:
CRITICAL_OBJECT_TERMINATION (f4) A process or thread crucial to system operation has unexpectedly exited or been terminated. Several processes and threads are necessary for the operation of the system; when they are terminated (for any reason), the system can no longer function. Arguments: Arg1: 00000003, Process Arg2: fe39ad88, Terminating object Arg3: fe39aeec, Process image file name Arg4: e094c7c4, Explanatory message (ascii) Debugging Details: ------------------ unable to get nt!KiCurrentEtwBufferOffset unable to get nt!KiCurrentEtwBufferBase <Failed to Read Entire ETW Buffer (expected 0, read 0)> PROCESS_OBJECT: fe39ad88 IMAGE_NAME: csrss.exe DEBUG_FLR_IMAGE_TIMESTAMP: 0 MODULE_NAME: csrss FAULTING_MODULE: 00000000 PROCESS_NAME: csrss.exe EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The required data was not placed into memory because of an I/O error status of "0x%08lx". BUGCHECK_STR: 0xF4_IOERR CUSTOMER_CRASH_COUNT: 5 DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP CURRENT_IRQL: 0 STACK_TEXT: f4a0b4e8 e094b927 000000f4 00000003 fe39ad88 nt!KeBugCheckEx+0x1b f4a0b50c e094c86c e094c7c4 fe39ad88 fe39aeec nt!PspCatchCriticalBreak+0x75 f4a0b53c feb35fa6 ffffffff c0000006 f4a0b58c nt!NtTerminateProcess+0x7a WARNING: Frame IP not in any known module. Following frames may be wrong. 00000000 f000e81a f000e2c3 f000e81a f000e81a 0xfeb35fa6 00000000 00000000 f000e2c3 f000e81a f000e81a 0xf000e81a STACK_COMMAND: kb FOLLOWUP_NAME: MachineOwner FAILURE_BUCKET_ID: 0xF4_IOERR_IMAGE_csrss.exe BUCKET_ID: 0xF4_IOERR_IMAGE_csrss.exe Followup: MachineOwner ---------
从转储似乎是在司机的问题,但我不能只是得到什么驱动程序负责这一点。
我会感激任何暗示可能是罪魁祸首,或如何寻找一个。
谢谢!
致电Microsoft PSS并获得专业帮助。 移动到备份硬件,除非明显的“重要”是人们现在意识到的东西。 我会说这个问题是一些基于光盘的问题。 图像IO错误指示在关键时刻从光盘读取的东西是不好的。 这将意味着 – 使用备份重build机器。
它看起来是csrss.ese这是造成这个问题。 Csrss.exe是客户端/服务器运行时子系统,并且(作为debugging状态)对系统至关重要。 您是否尝试过以安全模式启动Windows或使用最后一次正确的configuration启动它?