Windows Server 2008 keeps crashing

Posted on 2013-06-19
Last Modified: 2013-06-26
I have an IBM System x3200 M3 (7237AC1) server with Windows Server 2008 R2 64-bit w/SP1 installed that crashes once a day.  Below is problem detail.  I have also attached the dump file.  I updated all the drivers on the server and the server has all the latest Windows updates. I did a memory test and it passed and the RAID manager shows all drives optimal.  If anyone can analyze the crash dump and help me fix the problem I would greatly appreciate it.  Thanks.

Problem signature:
  Problem Event Name:      BlueScreen
  OS Version:      6.1.7601.
  Locale ID:      1033

Additional information about the problem:
  BCCode:      1000007e
  BCP1:      FFFFFFFFC0000005
  BCP2:      FFFFF88000E0C861
  BCP3:      FFFFF8800258C938
  BCP4:      FFFFF8800258C190
  OS Version:      6_1_7601
  Service Pack:      1_0
  Product:      272_3

Files that help describe the problem:

Read our privacy statement online:

If the online privacy statement is not available, please read our privacy statement offline:
Question by:pbadra
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3

Accepted Solution

Ned Ramsay earned 500 total points
ID: 39261043
Looking through this the faulting driver is umpusbvista.sys which is a Texas Instruments device driver. Do you have anything provided by texas instruments installed on this machine?


*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88000e0c861, The address that the exception occurred at
Arg3: fffff8800258c938, Exception Record Address
Arg4: fffff8800258c190, Context Record Address

Debugging Details:

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

fffff880`00e0c861 498b9db8000000  mov     rbx,qword ptr [r13+0B8h]

EXCEPTION_RECORD:  fffff8800258c938 -- (.exr 0xfffff8800258c938)
ExceptionAddress: fffff88000e0c861 (Wdf01000!FxRequest::CompleteInternal+0x0000000000000021)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 00000000000000b8
Attempt to read from address 00000000000000b8

CONTEXT:  fffff8800258c190 -- (.cxr 0xfffff8800258c190)
rax=0000000000000000 rbx=fffffa800ad11820 rcx=fffffa800ad11820
rdx=00000000c000000d rsi=0000000000000000 rdi=0000000000000000
rip=fffff88000e0c861 rsp=fffff8800258cb70 rbp=0000057ff52ee7d8
 r8=00000000c000000d  r9=0000000000000002 r10=000000000000000f
r11=fffffa80086e6098 r12=0000057ff79b2fd8 r13=0000000000000000
r14=00000000c000000d r15=fffffa80082b4450
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
fffff880`00e0c861 498b9db8000000  mov     rbx,qword ptr [r13+0B8h] ds:002b:00000000`000000b8=????????????????
Resetting default scope




ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  00000000000000b8

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800026ca100
GetUlongFromAddress: unable to read from fffff800026ca1c0
 00000000000000b8 Nonpaged pool

fffff880`02e6bd7e ??              ???


LAST_CONTROL_TRANSFER:  from fffff88000e6516b to fffff88000e0c861

fffff880`0258cb70 fffff880`00e6516b : 00000000`c0000010 fffff880`02e6be75 fffffa80`0ad11820 fffffa80`0ad11820 : Wdf01000!FxRequest::CompleteInternal+0x21
fffff880`0258cc00 fffff880`02e6bd7e : fffffa80`0ad11820 fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 : Wdf01000!imp_WdfRequestCompleteWithPriorityBoost+0x163
fffff880`0258cc60 fffffa80`0ad11820 : fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 : umpusbvista+0x1d7e
fffff880`0258cc68 fffffa80`0864d2d0 : 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6c4ec : 0xfffffa80`0ad11820
fffff880`0258cc70 00000000`00000003 : 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6c4ec fffffa80`0864dc40 : 0xfffffa80`0864d2d0
fffff880`0258cc78 0000057f`f79b2fd8 : fffffa80`0864d2d0 fffff880`02e6c4ec fffffa80`0864dc40 fffffa80`0864d2d0 : 0x3
fffff880`0258cc80 fffffa80`0864d2d0 : fffff880`02e6c4ec fffffa80`0864dc40 fffffa80`0864d2d0 00000000`00000003 : 0x57f`f79b2fd8
fffff880`0258cc88 fffff880`02e6c4ec : fffffa80`0864dc40 fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 : 0xfffffa80`0864d2d0
fffff880`0258cc90 fffffa80`0864dc40 : fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 : umpusbvista+0x24ec
fffff880`0258cc98 fffffa80`0864d2d0 : 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6e9e3 : 0xfffffa80`0864dc40
fffff880`0258cca0 00000000`00000003 : 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6e9e3 0000057f`f79b2fd8 : 0xfffffa80`0864d2d0
fffff880`0258cca8 0000057f`f79b2fd8 : fffffa80`0864d2d0 fffff880`02e6e9e3 0000057f`f79b2fd8 0000057f`f52ee7d8 : 0x3
fffff880`0258ccb0 fffffa80`0864d2d0 : fffff880`02e6e9e3 0000057f`f79b2fd8 0000057f`f52ee7d8 fffffa80`0864d2d0 : 0x57f`f79b2fd8
fffff880`0258ccb8 fffff880`02e6e9e3 : 0000057f`f79b2fd8 0000057f`f52ee7d8 fffffa80`0864d2d0 fffffa80`0864d2d0 : 0xfffffa80`0864d2d0
fffff880`0258ccc0 0000057f`f79b2fd8 : 0000057f`f52ee7d8 fffffa80`0864d2d0 fffffa80`0864d2d0 fffff800`0260de80 : umpusbvista+0x49e3
fffff880`0258ccc8 0000057f`f52ee7d8 : fffffa80`0864d2d0 fffffa80`0864d2d0 fffff800`0260de80 fffff880`06369650 : 0x57f`f79b2fd8
fffff880`0258ccd0 fffffa80`0864d2d0 : fffffa80`0864d2d0 fffff800`0260de80 fffff880`06369650 00000000`0000000a : 0x57f`f52ee7d8
fffff880`0258ccd8 fffffa80`0864d2d0 : fffff800`0260de80 fffff880`06369650 00000000`0000000a 00000000`00000000 : 0xfffffa80`0864d2d0
fffff880`0258cce0 fffff800`0260de80 : fffff880`06369650 00000000`0000000a 00000000`00000000 00000000`00000000 : 0xfffffa80`0864d2d0
fffff880`0258cce8 fffff880`06369650 : 00000000`0000000a 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInitialPCR+0x180
fffff880`0258ccf0 00000000`0000000a : 00000000`00000000 00000000`00000000 00000000`00000000 fffff880`02e6e8b0 : 0xfffff880`06369650
fffff880`0258ccf8 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff880`02e6e8b0 0000057f`f79b2fd8 : 0xa


SYMBOL_NAME:  umpusbvista+1d7e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: umpusbvista

IMAGE_NAME:  umpusbvista.sys


STACK_COMMAND:  .cxr 0xfffff8800258c190 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_umpusbvista+1d7e

BUCKET_ID:  X64_0x7E_umpusbvista+1d7e

Followup: MachineOwner

Open in new window


Author Comment

ID: 39261095
I don't see a TI driver installed.  I looked up umpusbvista.sys and it says:  Umpusbvista.sys with description USB to Serial driver for TUSB3410 devices is a driver file from company Texas Instruments Inc belonging to product USB 2 Serial Driver.  There is a MultiTech Systems MT9234ZBA-USB modem connected to the server.  I did a search for Umpusbvista.sys on the server and it looks like thats one of the drivers used by that modem...I'll have to check that once I get back on the server.  Thank you.

Expert Comment

by:Ned Ramsay
ID: 39261099
No problem. Good luck. Let me know if i can help with anything else.
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 39261318
Sure enough, the MultiTech Systems MT9234ZBA-USB modem uses the Umpusbvista.sys driver and apparently its the correct driver.  I downloaded from the vendor site and resinstalled the driver anyway to see what happens.   I will wait and see if the server crashes or not.  Thanks again Ned for your help.  I'll let you know what happens.


Expert Comment

by:Ned Ramsay
ID: 39261355
No problem. Glad I could help

Author Comment

ID: 39263539
Well...the server crashed this morning.  I contacted the company that installed the server and modem and they are aware of issues with that driver on servers that have Norton AV installed.  I have Trend Mico Worry-Free  SMB Security installed on the server.  They recommended disabling the TM services temporarily.  Thats what I did and we'll see what happens.  They also recommended going with a serial modem vice a usb modem.

Author Comment

ID: 39279989
Disabling Trend Micro didn't make a difference.  The server continued to crash.  I ended up uninstalling the USB modem and installing an external serial modem.

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Moving your enterprise fax infrastructure from in-house fax machines and servers to the cloud makes sense — from both an efficiency and productivity standpoint. But does migrating to a cloud fax solution mean you will no longer be able to send or re…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question