Solved

Windows Server 2008 keeps crashing

Posted on 2013-06-19
7
689 Views
Last Modified: 2013-06-26
I have an IBM System x3200 M3 (7237AC1) server with Windows Server 2008 R2 64-bit w/SP1 installed that crashes once a day.  Below is problem detail.  I have also attached the dump file.  I updated all the drivers on the server and the server has all the latest Windows updates. I did a memory test and it passed and the RAID manager shows all drives optimal.  If anyone can analyze the crash dump and help me fix the problem I would greatly appreciate it.  Thanks.

Problem signature:
  Problem Event Name:      BlueScreen
  OS Version:      6.1.7601.2.1.0.272.33
  Locale ID:      1033

Additional information about the problem:
  BCCode:      1000007e
  BCP1:      FFFFFFFFC0000005
  BCP2:      FFFFF88000E0C861
  BCP3:      FFFFF8800258C938
  BCP4:      FFFFF8800258C190
  OS Version:      6_1_7601
  Service Pack:      1_0
  Product:      272_3

Files that help describe the problem:
  C:\Windows\Minidump\061913-22573-01.dmp
  C:\Users\Administrator\AppData\Local\Temp\2\WER-39590791-0.sysdata.xml

Read our privacy statement online:
  http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
  C:\Windows\system32\en-US\erofflps.txt
061913-22573-01.dmp
0
Comment
Question by:pbadra
  • 4
  • 3
7 Comments
 
LVL 7

Accepted Solution

by:
Ned Ramsay earned 500 total points
ID: 39261043
Looking through this the faulting driver is umpusbvista.sys which is a Texas Instruments device driver. Do you have anything provided by texas instruments installed on this machine?

Ned


*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88000e0c861, The address that the exception occurred at
Arg3: fffff8800258c938, Exception Record Address
Arg4: fffff8800258c190, Context Record Address

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP: 
Wdf01000!FxRequest::CompleteInternal+21
fffff880`00e0c861 498b9db8000000  mov     rbx,qword ptr [r13+0B8h]

EXCEPTION_RECORD:  fffff8800258c938 -- (.exr 0xfffff8800258c938)
ExceptionAddress: fffff88000e0c861 (Wdf01000!FxRequest::CompleteInternal+0x0000000000000021)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 00000000000000b8
Attempt to read from address 00000000000000b8

CONTEXT:  fffff8800258c190 -- (.cxr 0xfffff8800258c190)
rax=0000000000000000 rbx=fffffa800ad11820 rcx=fffffa800ad11820
rdx=00000000c000000d rsi=0000000000000000 rdi=0000000000000000
rip=fffff88000e0c861 rsp=fffff8800258cb70 rbp=0000057ff52ee7d8
 r8=00000000c000000d  r9=0000000000000002 r10=000000000000000f
r11=fffffa80086e6098 r12=0000057ff79b2fd8 r13=0000000000000000
r14=00000000c000000d r15=fffffa80082b4450
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
Wdf01000!FxRequest::CompleteInternal+0x21:
fffff880`00e0c861 498b9db8000000  mov     rbx,qword ptr [r13+0B8h] ds:002b:00000000`000000b8=????????????????
Resetting default scope

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  00000000000000b8

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800026ca100
GetUlongFromAddress: unable to read from fffff800026ca1c0
 00000000000000b8 Nonpaged pool

FOLLOWUP_IP: 
umpusbvista+1d7e
fffff880`02e6bd7e ??              ???

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from fffff88000e6516b to fffff88000e0c861

STACK_TEXT:  
fffff880`0258cb70 fffff880`00e6516b : 00000000`c0000010 fffff880`02e6be75 fffffa80`0ad11820 fffffa80`0ad11820 : Wdf01000!FxRequest::CompleteInternal+0x21
fffff880`0258cc00 fffff880`02e6bd7e : fffffa80`0ad11820 fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 : Wdf01000!imp_WdfRequestCompleteWithPriorityBoost+0x163
fffff880`0258cc60 fffffa80`0ad11820 : fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 : umpusbvista+0x1d7e
fffff880`0258cc68 fffffa80`0864d2d0 : 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6c4ec : 0xfffffa80`0ad11820
fffff880`0258cc70 00000000`00000003 : 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6c4ec fffffa80`0864dc40 : 0xfffffa80`0864d2d0
fffff880`0258cc78 0000057f`f79b2fd8 : fffffa80`0864d2d0 fffff880`02e6c4ec fffffa80`0864dc40 fffffa80`0864d2d0 : 0x3
fffff880`0258cc80 fffffa80`0864d2d0 : fffff880`02e6c4ec fffffa80`0864dc40 fffffa80`0864d2d0 00000000`00000003 : 0x57f`f79b2fd8
fffff880`0258cc88 fffff880`02e6c4ec : fffffa80`0864dc40 fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 : 0xfffffa80`0864d2d0
fffff880`0258cc90 fffffa80`0864dc40 : fffffa80`0864d2d0 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 : umpusbvista+0x24ec
fffff880`0258cc98 fffffa80`0864d2d0 : 00000000`00000003 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6e9e3 : 0xfffffa80`0864dc40
fffff880`0258cca0 00000000`00000003 : 0000057f`f79b2fd8 fffffa80`0864d2d0 fffff880`02e6e9e3 0000057f`f79b2fd8 : 0xfffffa80`0864d2d0
fffff880`0258cca8 0000057f`f79b2fd8 : fffffa80`0864d2d0 fffff880`02e6e9e3 0000057f`f79b2fd8 0000057f`f52ee7d8 : 0x3
fffff880`0258ccb0 fffffa80`0864d2d0 : fffff880`02e6e9e3 0000057f`f79b2fd8 0000057f`f52ee7d8 fffffa80`0864d2d0 : 0x57f`f79b2fd8
fffff880`0258ccb8 fffff880`02e6e9e3 : 0000057f`f79b2fd8 0000057f`f52ee7d8 fffffa80`0864d2d0 fffffa80`0864d2d0 : 0xfffffa80`0864d2d0
fffff880`0258ccc0 0000057f`f79b2fd8 : 0000057f`f52ee7d8 fffffa80`0864d2d0 fffffa80`0864d2d0 fffff800`0260de80 : umpusbvista+0x49e3
fffff880`0258ccc8 0000057f`f52ee7d8 : fffffa80`0864d2d0 fffffa80`0864d2d0 fffff800`0260de80 fffff880`06369650 : 0x57f`f79b2fd8
fffff880`0258ccd0 fffffa80`0864d2d0 : fffffa80`0864d2d0 fffff800`0260de80 fffff880`06369650 00000000`0000000a : 0x57f`f52ee7d8
fffff880`0258ccd8 fffffa80`0864d2d0 : fffff800`0260de80 fffff880`06369650 00000000`0000000a 00000000`00000000 : 0xfffffa80`0864d2d0
fffff880`0258cce0 fffff800`0260de80 : fffff880`06369650 00000000`0000000a 00000000`00000000 00000000`00000000 : 0xfffffa80`0864d2d0
fffff880`0258cce8 fffff880`06369650 : 00000000`0000000a 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInitialPCR+0x180
fffff880`0258ccf0 00000000`0000000a : 00000000`00000000 00000000`00000000 00000000`00000000 fffff880`02e6e8b0 : 0xfffff880`06369650
fffff880`0258ccf8 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff880`02e6e8b0 0000057f`f79b2fd8 : 0xa


SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  umpusbvista+1d7e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: umpusbvista

IMAGE_NAME:  umpusbvista.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  48e28789

STACK_COMMAND:  .cxr 0xfffff8800258c190 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_umpusbvista+1d7e

BUCKET_ID:  X64_0x7E_umpusbvista+1d7e

Followup: MachineOwner

Open in new window

0
 

Author Comment

by:pbadra
ID: 39261095
I don't see a TI driver installed.  I looked up umpusbvista.sys and it says:  Umpusbvista.sys with description USB to Serial driver for TUSB3410 devices is a driver file from company Texas Instruments Inc belonging to product USB 2 Serial Driver.  There is a MultiTech Systems MT9234ZBA-USB modem connected to the server.  I did a search for Umpusbvista.sys on the server and it looks like thats one of the drivers used by that modem...I'll have to check that once I get back on the server.  Thank you.
0
 
LVL 7

Expert Comment

by:Ned Ramsay
ID: 39261099
No problem. Good luck. Let me know if i can help with anything else.
0
Free Gift Card with Acronis Backup Purchase!

Backup any data in any location: local and remote systems, physical and virtual servers, private and public clouds, Macs and PCs, tablets and mobile devices, & more! For limited time only, buy any Acronis backup products and get a FREE Amazon/Best Buy gift card worth up to $200!

 

Author Comment

by:pbadra
ID: 39261318
Sure enough, the MultiTech Systems MT9234ZBA-USB modem uses the Umpusbvista.sys driver and apparently its the correct driver.  I downloaded from the vendor site and resinstalled the driver anyway to see what happens.   I will wait and see if the server crashes or not.  Thanks again Ned for your help.  I'll let you know what happens.

Pat
0
 
LVL 7

Expert Comment

by:Ned Ramsay
ID: 39261355
No problem. Glad I could help
0
 

Author Comment

by:pbadra
ID: 39263539
Well...the server crashed this morning.  I contacted the company that installed the server and modem and they are aware of issues with that driver on servers that have Norton AV installed.  I have Trend Mico Worry-Free  SMB Security installed on the server.  They recommended disabling the TM services temporarily.  Thats what I did and we'll see what happens.  They also recommended going with a serial modem vice a usb modem.
0
 

Author Comment

by:pbadra
ID: 39279989
Disabling Trend Micro didn't make a difference.  The server continued to crash.  I ended up uninstalling the USB modem and installing an external serial modem.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

The 6120xp switches seem to have a bug when you create a fiber port channel when you have a UCS fabric interconnects talking to them.  If you follow the Cisco guide for the UCS, the FC Port channel will never come up and it will say that there are n…
INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration, of the HP EVA 4400 SAN Storage. The name , IP and the WWN ID’s used here are not the real ones. ABOUT THE STORAGE For most of you reading this, you …
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now