• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1594
  • Last Modified:

Server crash - BSOD

Hi all,
I have a machine which is having BSOD while doing MS SQL backup to a network storage.
I did a debug with following result, could you please help me in reading the debug and finding the root cause of this issue?

The machine bluescreens once a week, any of your comments or help will be greatly appreciated!

0: kd> .reload;!analyze -v;r;kv;lmnt;.logclose
Loading Kernel Symbols
....................................................................................................
Loading User Symbols
Loading unloaded module list
...
ERROR: FindPlugIns 8007007b
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 86122970, The address that the exception occurred at
Arg3: 00000000, Parameter 0 of the exception
Arg4: 00000283, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukce na adrese 0x%08lx odkazovala na adresu pam

FAULTING_IP:
+ffffffff86122970
86122970 813e30323030     cmp     dword ptr [esi],0x30303230

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  00000283

READ_ADDRESS:  00000283

DEFAULT_BUCKET_ID:  INTEL_CPU_MICROCODE_ZERO

BUGCHECK_STR:  0x1E

EXCEPTION_RECORD:  863126e8 -- (.exr ffffffff863126e8)
ExceptionAddress: 86122970
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000008
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 00000283
Attempt to read from address 00000283

LAST_CONTROL_TRANSFER:  from 80468ea5 to 804308ea

STACK_TEXT:  
863126cc 80468ea5 863126e8 00000000 8631273c nt!KiDispatchException+0x30e
86312734 80468e56 8632c2ee 86181cbc 00000000 nt!CommonDispatchException+0x4d
8631273c 86181cbc 00000000 00000000 86181c88 nt!KiUnexpectedInterruptTail+0x207
WARNING: Frame IP not in any known module. Following frames may be wrong.
8632c2ee 00000000 00000000 00000000 00000000 0x86181cbc


STACK_COMMAND:  kb

FOLLOWUP_IP:
nt!KiDispatchException+30e
804308ea 53               push    ebx

FAULTING_SOURCE_CODE:  


SYMBOL_STACK_INDEX:  0

FOLLOWUP_NAME:  MachineOwner

SYMBOL_NAME:  nt!KiDispatchException+30e

MODULE_NAME:  nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4344ec59

FAILURE_BUCKET_ID:  0x1E_nt!KiDispatchException+30e

BUCKET_ID:  0x1E_nt!KiDispatchException+30e

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000001e ecx=86312340 edx=00010002 esi=8631273c edi=863126e8
eip=804308ea esp=86312310 ebp=863126cc iopl=0         nv up ei ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286
nt!KiDispatchException+0x30e:
804308ea 53               push    ebx
ChildEBP RetAddr  Args to Child              
863126cc 80468ea5 863126e8 00000000 8631273c nt!KiDispatchException+0x30e (FPO: [Non-Fpo])
86312734 80468e56 8632c2ee 86181cbc 00000000 nt!CommonDispatchException+0x4d (FPO: [0,20,0])
8631273c 86181cbc 00000000 00000000 86181c88 nt!KiUnexpectedInterruptTail+0x207
WARNING: Frame IP not in any known module. Following frames may be wrong.
8632c2ee 00000000 00000000 00000000 00000000 0x86181cbc
start    end        module name
80062000 80076f80   hal      halmacpi.dll Fri Dec 03 04:29:15 2004 (41AFDD8B)
80400000 805a29c0   nt       ntkrnlmp.exe Thu Oct 06 11:20:25 2005 (4344EC59)
a0000000 a0190000   win32k   win32k.sys   unavailable (FFFFFFFE)
a0190000 a01b1000   atidrab  atidrab.dll  unavailable (FFFFFFFE)
be093000 be0a8f20   RDPWD    RDPWD.SYS    Fri Jun 17 08:41:40 2005 (42B270A4)
be90f000 be91ea20   ipsec    ipsec.sys    Wed Apr 30 01:04:59 2003 (3EAF051B)
be9b3000 be9b5f20   spud     spud.sys     Sat Nov 20 00:36:27 1999 (3835DEFB)
bea9f000 beac1ac0   Fastfat  Fastfat.SYS  Tue Jul 19 12:44:42 2005 (42DCD99A)
bed42000 bed7c440   srv      srv.sys      Tue May 03 10:10:42 2005 (42773202)
bee45000 beebee20   amon     amon.sys     Wed Jan 18 07:59:45 2006 (43CDE761)
bef37000 bef56140   afd      afd.sys      Mon Apr 11 23:31:21 2005 (425AECA9)
bf04f000 bf057a60   termdd   termdd.sys   Fri Mar 21 22:43:08 2003 (3E7B876C)
bf05f000 bf067240   Fips     Fips.SYS     Tue May 09 17:28:29 2000 (39182E9D)
bf8bf000 bf928a40   mrxsmb   mrxsmb.sys   Sat Apr 02 03:23:32 2005 (424DF414)
bf93b000 bf967ac0   rdbss    rdbss.sys    Mon Apr 11 23:31:22 2005 (425AECAA)
bf968000 bf992d00   netbt    netbt.sys    Sat Apr 02 03:23:24 2005 (424DF40C)
bf993000 bf9e11a0   tcpip    tcpip.sys    Thu May 12 12:24:58 2005 (42832EFA)
bfa02000 bfa05c80   dump_cpqcissm dump_cpqcissm.sys Mon May 19 18:19:35 2003 (3EC90417)
bfa6a000 bfa79600   Cdfs     Cdfs.SYS     Sat Apr 02 03:23:36 2005 (424DF418)
bfaec000 bfaf3100   tifsfilt tifsfilt.sys Wed Jun 15 08:15:26 2005 (42AFC77E)
bfafc000 bfb03d00   wanarp   wanarp.sys   Fri Aug 16 14:25:01 2002 (3D5CEF1D)
bfbf6000 bfc203a0   update   update.sys   Wed Apr 16 06:22:01 2003 (3E9CDA69)
bfc21000 bfc3cb40   ks       ks.sys       Wed Apr 16 06:02:11 2003 (3E9CD5C3)
bfc4f000 bfc72060   rdpdr    rdpdr.sys    Fri Mar 21 22:43:14 2003 (3E7B8772)
bfc73000 bfc89ba0   ndiswan  ndiswan.sys  Wed Apr 30 01:05:01 2003 (3EAF051D)
bfc8a000 bfc9fe80   cpqteam  cpqteam.sys  Wed Mar 05 02:07:53 2003 (3E654DE9)
bfca0000 bfcb8f40   q57w2k   q57w2k.sys   Mon Feb 17 11:26:13 2003 (3E50B8C5)
bfccd000 bfcd0580   vga      vga.sys      Sat Sep 25 20:37:40 1999 (37ED1674)
bfcd1000 bfcd46c0   dump_diskdump dump_diskdump.sys Tue Feb 25 20:18:04 2003 (3E5BC16C)
bfcdd000 bfce0540   hidusb   hidusb.sys   Tue Oct 05 01:03:30 1999 (37F93242)
bfce1000 bfd22800   cpqasm2  cpqasm2.sys  Tue May 27 21:05:58 2003 (3ED3B716)
bfd23000 bfd346c0   atimpab  atimpab.sys  Thu Nov 11 00:34:06 1999 (382A00EE)
bfdb5000 bfdb8e60   TDI      TDI.SYS      Wed Jan 15 20:56:26 2003 (3E25BCEA)
bfdc1000 bfdc32e0   ndistapi ndistapi.sys Wed Jan 15 20:54:15 2003 (3E25BC67)
bfdd1000 bfdd4640   serenum  serenum.sys  Wed Jan 15 20:47:01 2003 (3E25BAB5)
bfe0d000 bfe20b20   CPQPHP   CPQPHP.SYS   Tue Jan 07 00:44:27 2003 (3E1A14DB)
bfe21000 bfe36be0   Mup      Mup.sys      Fri Dec 03 04:37:23 2004 (41AFDF73)
bfe37000 bfe4bfa0   snapman  snapman.sys  Thu May 26 09:35:38 2005 (42957C4A)
bfe4c000 bfe80580   timntr   timntr.sys   Wed Jun 15 08:15:23 2005 (42AFC77B)
bfe81000 bfeaaaa0   NDIS     NDIS.sys     Wed Apr 30 01:05:01 2003 (3EAF051D)
bfeab000 bff28480   Ntfs     Ntfs.sys     Tue May 10 11:20:29 2005 (42807CDD)
bff29000 bff3a7c0   KSecDD   KSecDD.sys   Sun Sep 21 02:32:19 2003 (3F6CF193)
bff3b000 bff4d1c0   Dfs      Dfs.sys      Wed Feb 12 03:19:06 2003 (3E49AF1A)
bff4e000 bff70000   fltmgr   fltmgr.sys   unavailable (FFFFFFFE)
bff70000 bff82180   SCSIPORT SCSIPORT.SYS Thu Jul 14 14:24:06 2005 (42D65966)
bff83000 bff98180   atapi    atapi.sys    Tue Apr 01 20:08:25 2003 (3E89D599)
bff99000 bffba9c0   dmio     dmio.sys     Wed Jan 15 20:47:04 2003 (3E25BAB8)
bffbb000 bffd75a0   ftdisk   ftdisk.sys   Fri Dec 03 04:29:58 2004 (41AFDDB6)
bffd8000 bffffc20   ACPI     ACPI.sys     Wed Jan 15 20:44:22 2003 (3E25BA16)
f6400000 f640e6a0   pci      pci.sys      Wed Jan 15 20:44:07 2003 (3E25BA07)
f6410000 f641b680   isapnp   isapnp.sys   Wed Jan 15 20:43:47 2003 (3E25B9F3)
f6420000 f6428700   CLASSPNP CLASSPNP.SYS Wed Jan 15 20:42:51 2003 (3E25B9BB)
f6430000 f643c4c0   VIDEOPRT VIDEOPRT.SYS Wed Jan 15 20:47:20 2003 (3E25BAC8)
f64f0000 f64fb680   i8042prt i8042prt.sys Wed Apr 16 06:00:59 2003 (3E9CD57B)
f6500000 f650f400   serial   serial.sys   Wed Apr 16 06:19:39 2003 (3E9CD9DB)
f6510000 f651e4c0   CPQCISSE CPQCISSE.sys Tue May 27 20:59:36 2003 (3ED3B598)
f6520000 f652ca80   rasl2tp  rasl2tp.sys  Wed Apr 30 01:05:06 2003 (3EAF0522)
f6530000 f653bc40   raspptp  raspptp.sys  Thu May 15 01:47:00 2003 (3EC2D574)
f6550000 f6559be0   usbhub   usbhub.sys   Wed Mar 19 00:30:41 2003 (3E77AC21)
f6580000 f6589ce0   NDProxy  NDProxy.SYS  Fri Oct 01 01:25:35 1999 (37F3F16F)
f6590000 f6598fa0   Npfs     Npfs.SYS     Sun Oct 10 01:58:07 1999 (37FFD68F)
f65a0000 f65a8680   msgpc    msgpc.sys    Wed Jan 15 20:54:25 2003 (3E25BC71)
f65b0000 f65b81a0   netbios  netbios.sys  Tue Oct 12 21:34:19 1999 (38038D3B)
f6680000 f6685520   PCIIDEX  PCIIDEX.SYS  Tue Feb 25 19:31:08 2003 (3E5BB66C)
f6688000 f668f4c0   MountMgr MountMgr.sys Tue Aug 16 10:40:55 2005 (4301A697)
f6690000 f6697720   disk     disk.sys     Wed Jan 15 20:43:05 2003 (3E25B9C9)
f6698000 f669dec0   kbdclass kbdclass.sys Thu Feb 20 17:37:30 2003 (3E55044A)
f66a0000 f66a4400   ptilink  ptilink.sys  Wed Jan 15 20:47:15 2003 (3E25BAC3)
f66a8000 f66ad400   mouclass mouclass.sys Thu Feb 20 17:37:45 2003 (3E550459)
f66b0000 f66b5900   HIDPARSE HIDPARSE.SYS Tue Apr 08 19:34:46 2003 (3E930836)
f66b8000 f66bc0e0   raspti   raspti.sys   Fri Oct 08 22:45:10 1999 (37FE57D6)
f66c8000 f66cf000   fdc      fdc.sys      unavailable (FFFFFFFE)
f66d0000 f66d48e0   HidBatt  HidBatt.sys  Wed Jan 15 20:44:31 2003 (3E25BA1F)
f66d8000 f66dec40   cdrom    cdrom.sys    Wed Jan 15 20:43:04 2003 (3E25B9C8)
f66e0000 f66e48c0   TDTCP    TDTCP.SYS    Fri Mar 21 22:43:08 2003 (3E7B876C)
f66e8000 f66edfc0   openhci  openhci.sys  Sat Mar 01 01:28:59 2003 (3E5FFECB)
f6700000 f6704fc0   USBD     USBD.SYS     Wed Jan 22 18:05:33 2003 (3E2ECF5D)
f6710000 f6715240   Msfs     Msfs.SYS     Wed Oct 27 01:21:32 1999 (3816377C)
f6750000 f6754a60   flpydisk flpydisk.sys Wed Jan 15 20:42:52 2003 (3E25B9BC)
f6770000 f6776a20   EFS      EFS.SYS      Wed Jan 15 20:46:55 2003 (3E25BAAF)
f6780000 f6785fa0   HIDCLASS HIDCLASS.SYS Wed Jan 15 20:45:26 2003 (3E25BA56)
f6788000 f678cae0   CpqCiDrv CpqCiDrv.sys Thu Apr 10 17:15:31 2003 (3E958A93)
f6810000 f6812a20   BOOTVID  BOOTVID.dll  Thu Nov 04 02:24:33 1999 (3820E051)
f6814000 f6816320   compbatt compbatt.sys Wed Jan 15 20:44:30 2003 (3E25BA1E)
f6818000 f681ad00   PartMgr  PartMgr.sys  Wed Jan 15 20:43:07 2003 (3E25B9CB)
f681c000 f681fc80   cpqcissm cpqcissm.sys Mon May 19 18:19:35 2003 (3EC90417)
f6900000 f6901b00   BATTC    BATTC.SYS    Wed Jan 15 20:44:26 2003 (3E25BA1A)
f6902000 f6903d20   Diskperf Diskperf.sys Wed Feb 12 22:34:38 2003 (3E4ABDEE)
f6904000 f6906000   dmload   dmload.sys   unavailable (FFFFFFFE)
f6920000 f6921300   ramirr   ramirr.sys   Wed Nov 27 02:26:26 2002 (3DE41F42)
f6928000 f6929ca0   Fs_Rec   Fs_Rec.SYS   Wed Jan 15 20:53:30 2003 (3E25BC3A)
f6930000 f6931e40   rasacd   rasacd.sys   Sat Sep 25 20:41:23 1999 (37ED1753)
f694a000 f694c000   RAInfo   RAInfo.sys   Wed Nov 27 02:26:33 2002 (3DE41F49)
f69c8000 f69c8f80   WMILIB   WMILIB.SYS   Sat Sep 25 20:36:47 1999 (37ED163F)
f69c9000 f69c9b00   pciide   pciide.sys   Wed Jan 15 20:43:03 2003 (3E25B9C7)
f69f5000 f69f5a40   audstub  audstub.sys  Sat Sep 25 20:35:33 1999 (37ED15F5)
f69ff000 f69ffd80   swenum   swenum.sys   Sat Sep 25 20:36:31 1999 (37ED162F)
f6a1d000 f6a1e000   Null     Null.SYS     unavailable (FFFFFFFE)
f6a1f000 f6a1fee0   Beep     Beep.SYS     Thu Oct 21 00:18:59 1999 (380E3FD3)
f6a22000 f6a22f80   mnmdd    mnmdd.SYS    Sat Sep 25 20:37:40 1999 (37ED1674)
f6a3a000 f6a3a980   sysmgmt  sysmgmt.sys  Wed Jan 29 20:14:33 2003 (3E382819)

Unloaded modules:
f65c0000 f65c9000   redbook.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f66f0000 f66f5000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
bfcd5000 bfcd8000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
0
Petr
Asked:
Petr
1 Solution
 
cpc2004Commented:
From the stack trace,  nt!KiUnexpectedInterruptTail is triggered due to hardware error. Probably the culprit is faulty ram. Run memtest to stress test the ram.

STACK_TEXT:  
863126cc 80468ea5 863126e8 00000000 8631273c nt!KiDispatchException+0x30e
86312734 80468e56 8632c2ee 86181cbc 00000000 nt!CommonDispatchException+0x4d
8631273c 86181cbc 00000000 00000000 86181c88 nt!KiUnexpectedInterruptTail+0x207 <--- Hardware problem

One minidump is insufficient to diagnostic hardware error. Provide more debug reports here.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now