Solved

Server 2012 R2 BugCheck Event ID 1001

Posted on 2014-04-18
16
8,656 Views
Last Modified: 2014-04-23
New base load of Server 2012 R2 has run fine for months. On two seperate days the server rebooted all day long then quite at the end of that day. Event 1001, BugCheck then MEMORY.DMP. Issue occured only on 2 days and not even once in between. It is a vmware server.

Amber S. Krause
0
Comment
Question by:Wauna_IT
  • 5
  • 4
  • 3
  • +2
16 Comments
 
LVL 34

Expert Comment

by:Seth Simmons
Comment Utility
what is the stop code in the event log?
0
 
LVL 117

Expert Comment

by:Andrew Hancock (VMware vExpert / EE MVE)
Comment Utility
What's changed on the VM?

Are you running a supported version of ESXi for Windows 2012 R2 ?
0
 
LVL 25

Expert Comment

by:Tony Giangreco
Comment Utility
Can you upload the dump file?
0
 
LVL 8

Expert Comment

by:Ratnesh Mishra
Comment Utility
Compress and upload the memory.dmp file to give you proper reason for the bugcheck.
Event id 1001 is generalized event for bugcheck if you can provide us the details of event. That will give a reference ,what had happened.
0
 

Author Comment

by:Wauna_IT
Comment Utility
Here is the BugCheck message with stop code: The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000109 (0xa3a01f58935f9760, 0xb3b72bdee5df99eb, 0x00000001c0000103, 0x0000000000000007). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 041114-16218-01.

Nothing had changed on the VM and I am running 20 production servers in the vm environment with no issues on the same days. I am running ESXi 5.1.

I am attaching the MEMORY.DMP file.

Thank you - Amber S. Krause
0
 
LVL 34

Expert Comment

by:Seth Simmons
Comment Utility
do you have vmware tools installed?

a stop 0x109 is CRITICAL_STRUCTURE_CORRUPTION
the fourth parameter is 0x7 which is a critical MSR modification

it could be caused by a driver or hardware corruption - specifically memory
i did find a vmware article referring to this issue though it's for older versions of esx with P4 cpu and may not apply here

http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=1008749&sliceId=1&docTypeID=DT_KB_1_1&dialogID=74787167&stateId=0

what software is installed?  something could have tried to modify the kernel

this should provide more technical insight on the stop code

Debugging Stop 0x109 - Kernel Patch Protection
http://bsodtutorials.blogspot.com/2013/10/debugging-stop-0x109-kernel-patch.html

Processor MSRs
http://uninformed.org/index.cgi?v=3&a=3&p=10

if you are able to post the memory dump it might be helpful
0
 

Author Comment

by:Wauna_IT
Comment Utility
I do have vmware tools installed.

I am posting the mini dump to see if it is sufficient for your needs. Let me know if it isn't and I will figure out how to compress the MEMORY.DMP

Amber Krause
041114-24187-01.dmp
0
 
LVL 8

Accepted Solution

by:
Ratnesh Mishra earned 500 total points
Comment Utility
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:Wauna_IT
Comment Utility
I have passed this recommendation onto my vm support team:

http://support.microsoft.com/kb/2902739

Thank you - Amber Krause
0
 
LVL 8

Expert Comment

by:Ratnesh Mishra
Comment Utility
Great , would certainly be waiting for the feedback .
0
 
LVL 34

Expert Comment

by:Seth Simmons
Comment Utility
the article says it's fixed in 5.0 update 3 though she has 5.1 so it would be interesting what the support team comes back with
0
 

Author Comment

by:Wauna_IT
Comment Utility
Other suggestions are welcome. Thanks Amber Krause
0
 
LVL 25

Expert Comment

by:Tony Giangreco
Comment Utility
I would check for any updates that are available for the following:

System Bios
Raid Firmware
Raid drivers
BMC firmware (if it's a Dell server)
Chipset drivers
Audio & Video drivers
Hard drive firmware
OMSA upgrade (if it's a Dell server)
0
 
LVL 25

Expert Comment

by:Tony Giangreco
Comment Utility
Have you resolved this issue? Have our suggestions helped?
0
 

Author Comment

by:Wauna_IT
Comment Utility
Your suggestions have pointed me in an appropriate direction. I am relying on my vm team from here. You can close my case. Thanks for the follow up.
0
 
LVL 34

Expert Comment

by:Seth Simmons
Comment Utility
if you are looking at an alternate source for support then you can either delete this question or wait for a solution from your support group and select one of the comments here if in fact it did point to the solution
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

It Is not possible to enable LLDP in vSwitch(at least is not supported by VMware), so in this article we will enable this, and also go trough how to enabled CDP and how to get this information in vSwitches and also in vDS.
This is an issue that we can get adding / removing permissions in the vCSA 6.0. We can also have issues searching for users / groups in the AD (using your identify sources). This is how one of the ways to handle this issues and fix it.
Teach the user how to edit .vmx files to add advanced configuration options Open vSphere Web Client: Edit Settings for a VM: Choose VM Options -> Advanced: Add Configuration Parameters:
Teach the user how to install log collectors and how to configure ESXi 5.5 for remote logging Open console session and mount vCenter Server installer: Install vSphere Core Dump Collector: Install vSphere Syslog Collector: Open vSphere Client: Config…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now