Windows Server 2008 keeps crashing

Posted on 2013-06-19
Medium Priority
Last Modified: 2013-06-26
I have an IBM System x3200 M3 (7237AC1) server with Windows Server 2008 R2 64-bit w/SP1 installed that crashes once a day.  Below is problem detail.  I have also attached the dump file.  I updated all the drivers on the server and the server has all the latest Windows updates. I did a memory test and it passed and the RAID manager shows all drives optimal.  If anyone can analyze the crash dump and help me fix the problem I would greatly appreciate it.  Thanks.

Problem signature:
  Problem Event Name:      BlueScreen
  OS Version:      6.1.7601.
  Locale ID:      1033

Additional information about the problem:
  BCCode:      1000007e
  BCP1:      FFFFFFFFC0000005
  BCP2:      FFFFF88000E0C861
  BCP3:      FFFFF8800258C938
  BCP4:      FFFFF8800258C190
  OS Version:      6_1_7601
  Service Pack:      1_0
  Product:      272_3

Files that help describe the problem:

Read our privacy statement online:

If the online privacy statement is not available, please read our privacy statement offline:
Question by:pbadra
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3

Accepted Solution

Ned Ramsay earned 2000 total points
ID: 39261043
Looking through this the faulting driver is umpusbvista.sys which is a Texas Instruments device driver. Do you have anything provided by texas instruments installed on this machine?


*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88000e0c861, The address that the exception occurred at
Arg3: fffff8800258c938, Exception Record Address
Arg4: fffff8800258c190, Context Record Address

Debugging Details:

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

fffff880`00e0c861 498b9db8000000  mov     rbx,qword ptr [r13+0B8h]

EXCEPTION_RECORD:  fffff8800258c938 -- (.exr 0xfffff8800258c938)
ExceptionAddress: fffff88000e0c861 (Wdf01000!FxRequest::CompleteInternal+0x0000000000000021)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 00000000000000b8
Attempt to read from address 00000000000000b8

CONTEXT:  fffff8800258c190 -- (.cxr 0xfffff8800258c190)
rax=0000000000000000 rbx=fffffa800ad11820 rcx=fffffa800ad11820
rdx=00000000c000000d rsi=0000000000000000 rdi=0000000000000000
rip=fffff88000e0c861 rsp=fffff8800258cb70 rbp=0000057ff52ee7d8
 r8=00000000c000000d  r9=0000000000000002 r10=000000000000000f
r11=fffffa80086e6098 r12=0000057ff79b2fd8 r13=0000000000000000
r14=00000000c000000d r15=fffffa80082b4450
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
fffff880`00e0c861 498b9db8000000  mov     rbx,qword ptr [r13+0B8h] ds:002b:00000000`000000b8=????????????????
Resetting default scope




ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  00000000000000b8

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800026ca100
GetUlongFromAddress: unable to read from fffff800026ca1c0
 00000000000000b8 Nonpaged pool

fffff880`02e6bd7e ??              ???


LAST_CONTROL_TRANSFER:  from fffff88000e6516b to fffff88000e0c861

fffff880`0258cb70 fffff880`00e6516b : 00000000`c0000010 fffff880`02e6be75 fffffa80`0ad11820 fffffa80`0ad11820 : Wdf01000!FxRequest::CompleteInternal+0x21
fffff880`0258cc00 fffff880`02e6bd7e : fffffa80`0ad11820 fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 : Wdf01000!imp_WdfRequestCompleteWithPriorityBoost+0x163
fffff880`0258cc60 fffffa80`0ad11820 : fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 : umpusbvista+0x1d7e
fffff880`0258cc68 fffffa80`0864d2d0 : 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6c4ec : 0xfffffa80`0ad11820
fffff880`0258cc70 00000000`00000003 : 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6c4ec fffffa80`0864dc40 : 0xfffffa80`0864d2d0
fffff880`0258cc78 0000057f`f79b2fd8 : fffffa80`0864d2d0 fffff880`02e6c4ec fffffa80`0864dc40 fffffa80`0864d2d0 : 0x3
fffff880`0258cc80 fffffa80`0864d2d0 : fffff880`02e6c4ec fffffa80`0864dc40 fffffa80`0864d2d0 00000000`00000003 : 0x57f`f79b2fd8
fffff880`0258cc88 fffff880`02e6c4ec : fffffa80`0864dc40 fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 : 0xfffffa80`0864d2d0
fffff880`0258cc90 fffffa80`0864dc40 : fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 : umpusbvista+0x24ec
fffff880`0258cc98 fffffa80`0864d2d0 : 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6e9e3 : 0xfffffa80`0864dc40
fffff880`0258cca0 00000000`00000003 : 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6e9e3 0000057f`f79b2fd8 : 0xfffffa80`0864d2d0
fffff880`0258cca8 0000057f`f79b2fd8 : fffffa80`0864d2d0 fffff880`02e6e9e3 0000057f`f79b2fd8 0000057f`f52ee7d8 : 0x3
fffff880`0258ccb0 fffffa80`0864d2d0 : fffff880`02e6e9e3 0000057f`f79b2fd8 0000057f`f52ee7d8 fffffa80`0864d2d0 : 0x57f`f79b2fd8
fffff880`0258ccb8 fffff880`02e6e9e3 : 0000057f`f79b2fd8 0000057f`f52ee7d8 fffffa80`0864d2d0 fffffa80`0864d2d0 : 0xfffffa80`0864d2d0
fffff880`0258ccc0 0000057f`f79b2fd8 : 0000057f`f52ee7d8 fffffa80`0864d2d0 fffffa80`0864d2d0 fffff800`0260de80 : umpusbvista+0x49e3
fffff880`0258ccc8 0000057f`f52ee7d8 : fffffa80`0864d2d0 fffffa80`0864d2d0 fffff800`0260de80 fffff880`06369650 : 0x57f`f79b2fd8
fffff880`0258ccd0 fffffa80`0864d2d0 : fffffa80`0864d2d0 fffff800`0260de80 fffff880`06369650 00000000`0000000a : 0x57f`f52ee7d8
fffff880`0258ccd8 fffffa80`0864d2d0 : fffff800`0260de80 fffff880`06369650 00000000`0000000a 00000000`00000000 : 0xfffffa80`0864d2d0
fffff880`0258cce0 fffff800`0260de80 : fffff880`06369650 00000000`0000000a 00000000`00000000 00000000`00000000 : 0xfffffa80`0864d2d0
fffff880`0258cce8 fffff880`06369650 : 00000000`0000000a 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInitialPCR+0x180
fffff880`0258ccf0 00000000`0000000a : 00000000`00000000 00000000`00000000 00000000`00000000 fffff880`02e6e8b0 : 0xfffff880`06369650
fffff880`0258ccf8 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff880`02e6e8b0 0000057f`f79b2fd8 : 0xa


SYMBOL_NAME:  umpusbvista+1d7e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: umpusbvista

IMAGE_NAME:  umpusbvista.sys


STACK_COMMAND:  .cxr 0xfffff8800258c190 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_umpusbvista+1d7e

BUCKET_ID:  X64_0x7E_umpusbvista+1d7e

Followup: MachineOwner

Open in new window


Author Comment

ID: 39261095
I don't see a TI driver installed.  I looked up umpusbvista.sys and it says:  Umpusbvista.sys with description USB to Serial driver for TUSB3410 devices is a driver file from company Texas Instruments Inc belonging to product USB 2 Serial Driver.  There is a MultiTech Systems MT9234ZBA-USB modem connected to the server.  I did a search for Umpusbvista.sys on the server and it looks like thats one of the drivers used by that modem...I'll have to check that once I get back on the server.  Thank you.

Expert Comment

by:Ned Ramsay
ID: 39261099
No problem. Good luck. Let me know if i can help with anything else.
Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.


Author Comment

ID: 39261318
Sure enough, the MultiTech Systems MT9234ZBA-USB modem uses the Umpusbvista.sys driver and apparently its the correct driver.  I downloaded from the vendor site and resinstalled the driver anyway to see what happens.   I will wait and see if the server crashes or not.  Thanks again Ned for your help.  I'll let you know what happens.


Expert Comment

by:Ned Ramsay
ID: 39261355
No problem. Glad I could help

Author Comment

ID: 39263539
Well...the server crashed this morning.  I contacted the company that installed the server and modem and they are aware of issues with that driver on servers that have Norton AV installed.  I have Trend Mico Worry-Free  SMB Security installed on the server.  They recommended disabling the TM services temporarily.  Thats what I did and we'll see what happens.  They also recommended going with a serial modem vice a usb modem.

Author Comment

ID: 39279989
Disabling Trend Micro didn't make a difference.  The server continued to crash.  I ended up uninstalling the USB modem and installing an external serial modem.

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Moving your enterprise fax infrastructure from in-house fax machines and servers to the cloud makes sense — from both an efficiency and productivity standpoint. But does migrating to a cloud fax solution mean you will no longer be able to send or re…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question