Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Server 2012 R2 BugCheck Event ID 1001

Posted on 2014-04-18
16
Medium Priority
?
11,926 Views
Last Modified: 2014-04-23
New base load of Server 2012 R2 has run fine for months. On two seperate days the server rebooted all day long then quite at the end of that day. Event 1001, BugCheck then MEMORY.DMP. Issue occured only on 2 days and not even once in between. It is a vmware server.

Amber S. Krause
0
Comment
Question by:Wauna_IT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 3
  • +2
16 Comments
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 40009145
what is the stop code in the event log?
0
 
LVL 124
ID: 40009164
What's changed on the VM?

Are you running a supported version of ESXi for Windows 2012 R2 ?
0
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40009195
Can you upload the dump file?
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 
LVL 8

Expert Comment

by:Ratnesh Mishra
ID: 40009418
Compress and upload the memory.dmp file to give you proper reason for the bugcheck.
Event id 1001 is generalized event for bugcheck if you can provide us the details of event. That will give a reference ,what had happened.
0
 

Author Comment

by:Wauna_IT
ID: 40009455
Here is the BugCheck message with stop code: The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000109 (0xa3a01f58935f9760, 0xb3b72bdee5df99eb, 0x00000001c0000103, 0x0000000000000007). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 041114-16218-01.

Nothing had changed on the VM and I am running 20 production servers in the vm environment with no issues on the same days. I am running ESXi 5.1.

I am attaching the MEMORY.DMP file.

Thank you - Amber S. Krause
0
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 40009500
do you have vmware tools installed?

a stop 0x109 is CRITICAL_STRUCTURE_CORRUPTION
the fourth parameter is 0x7 which is a critical MSR modification

it could be caused by a driver or hardware corruption - specifically memory
i did find a vmware article referring to this issue though it's for older versions of esx with P4 cpu and may not apply here

http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=1008749&sliceId=1&docTypeID=DT_KB_1_1&dialogID=74787167&stateId=0

what software is installed?  something could have tried to modify the kernel

this should provide more technical insight on the stop code

Debugging Stop 0x109 - Kernel Patch Protection
http://bsodtutorials.blogspot.com/2013/10/debugging-stop-0x109-kernel-patch.html

Processor MSRs
http://uninformed.org/index.cgi?v=3&a=3&p=10

if you are able to post the memory dump it might be helpful
0
 

Author Comment

by:Wauna_IT
ID: 40009525
I do have vmware tools installed.

I am posting the mini dump to see if it is sufficient for your needs. Let me know if it isn't and I will figure out how to compress the MEMORY.DMP

Amber Krause
041114-24187-01.dmp
0
 
LVL 8

Accepted Solution

by:
Ratnesh Mishra earned 1500 total points
ID: 40009529
0
 

Author Comment

by:Wauna_IT
ID: 40009625
I have passed this recommendation onto my vm support team:

http://support.microsoft.com/kb/2902739

Thank you - Amber Krause
0
 
LVL 8

Expert Comment

by:Ratnesh Mishra
ID: 40009672
Great , would certainly be waiting for the feedback .
0
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 40009757
the article says it's fixed in 5.0 update 3 though she has 5.1 so it would be interesting what the support team comes back with
0
 

Author Comment

by:Wauna_IT
ID: 40009771
Other suggestions are welcome. Thanks Amber Krause
0
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40011552
I would check for any updates that are available for the following:

System Bios
Raid Firmware
Raid drivers
BMC firmware (if it's a Dell server)
Chipset drivers
Audio & Video drivers
Hard drive firmware
OMSA upgrade (if it's a Dell server)
0
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40016394
Have you resolved this issue? Have our suggestions helped?
0
 

Author Comment

by:Wauna_IT
ID: 40018487
Your suggestions have pointed me in an appropriate direction. I am relying on my vm team from here. You can close my case. Thanks for the follow up.
0
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 40018572
if you are looking at an alternate source for support then you can either delete this question or wait for a solution from your support group and select one of the comments here if in fact it did point to the solution
0

Featured Post

Tech or Treat!

Submit an article about your scariest tech experience—and the solution—and you’ll be automatically entered to win one of 4 fantastic tech gadgets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Backups and Disaster RecoveryIn this post, we’ll look at strategies for backups and disaster recovery.
August and September have been big months for VMware—from VMworld last month to our new Course of the Month in VMware Professional - Data Center Virtualization. We reached out to Andrew Hancock, resident VMware vExpert, to have a more in-depth discu…
Teach the user how to configure vSphere clusters to support the VMware FT feature Open vSphere Web Client: Verify vSphere HA is enabled: Verify netowrking for vMotion and FT Logging is in place or create it: Turn On FT for a virtual machine: Verify …
This video shows you how easy it is to boot from ISO images for virtual machines with the ISO images stored on a local datastore on the ESXi host.

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question