Solved

Server 2012 R2 BugCheck Event ID 1001

Posted on 2014-04-18
16
9,760 Views
Last Modified: 2014-04-23
New base load of Server 2012 R2 has run fine for months. On two seperate days the server rebooted all day long then quite at the end of that day. Event 1001, BugCheck then MEMORY.DMP. Issue occured only on 2 days and not even once in between. It is a vmware server.

Amber S. Krause
0
Comment
Question by:Wauna_IT
  • 5
  • 4
  • 3
  • +2
16 Comments
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40009145
what is the stop code in the event log?
0
 
LVL 119
ID: 40009164
What's changed on the VM?

Are you running a supported version of ESXi for Windows 2012 R2 ?
0
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40009195
Can you upload the dump file?
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 8

Expert Comment

by:Ratnesh Mishra
ID: 40009418
Compress and upload the memory.dmp file to give you proper reason for the bugcheck.
Event id 1001 is generalized event for bugcheck if you can provide us the details of event. That will give a reference ,what had happened.
0
 

Author Comment

by:Wauna_IT
ID: 40009455
Here is the BugCheck message with stop code: The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000109 (0xa3a01f58935f9760, 0xb3b72bdee5df99eb, 0x00000001c0000103, 0x0000000000000007). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 041114-16218-01.

Nothing had changed on the VM and I am running 20 production servers in the vm environment with no issues on the same days. I am running ESXi 5.1.

I am attaching the MEMORY.DMP file.

Thank you - Amber S. Krause
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40009500
do you have vmware tools installed?

a stop 0x109 is CRITICAL_STRUCTURE_CORRUPTION
the fourth parameter is 0x7 which is a critical MSR modification

it could be caused by a driver or hardware corruption - specifically memory
i did find a vmware article referring to this issue though it's for older versions of esx with P4 cpu and may not apply here

http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=1008749&sliceId=1&docTypeID=DT_KB_1_1&dialogID=74787167&stateId=0

what software is installed?  something could have tried to modify the kernel

this should provide more technical insight on the stop code

Debugging Stop 0x109 - Kernel Patch Protection
http://bsodtutorials.blogspot.com/2013/10/debugging-stop-0x109-kernel-patch.html

Processor MSRs
http://uninformed.org/index.cgi?v=3&a=3&p=10

if you are able to post the memory dump it might be helpful
0
 

Author Comment

by:Wauna_IT
ID: 40009525
I do have vmware tools installed.

I am posting the mini dump to see if it is sufficient for your needs. Let me know if it isn't and I will figure out how to compress the MEMORY.DMP

Amber Krause
041114-24187-01.dmp
0
 
LVL 8

Accepted Solution

by:
Ratnesh Mishra earned 500 total points
ID: 40009529
0
 

Author Comment

by:Wauna_IT
ID: 40009625
I have passed this recommendation onto my vm support team:

http://support.microsoft.com/kb/2902739

Thank you - Amber Krause
0
 
LVL 8

Expert Comment

by:Ratnesh Mishra
ID: 40009672
Great , would certainly be waiting for the feedback .
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40009757
the article says it's fixed in 5.0 update 3 though she has 5.1 so it would be interesting what the support team comes back with
0
 

Author Comment

by:Wauna_IT
ID: 40009771
Other suggestions are welcome. Thanks Amber Krause
0
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40011552
I would check for any updates that are available for the following:

System Bios
Raid Firmware
Raid drivers
BMC firmware (if it's a Dell server)
Chipset drivers
Audio & Video drivers
Hard drive firmware
OMSA upgrade (if it's a Dell server)
0
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40016394
Have you resolved this issue? Have our suggestions helped?
0
 

Author Comment

by:Wauna_IT
ID: 40018487
Your suggestions have pointed me in an appropriate direction. I am relying on my vm team from here. You can close my case. Thanks for the follow up.
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40018572
if you are looking at an alternate source for support then you can either delete this question or wait for a solution from your support group and select one of the comments here if in fact it did point to the solution
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
host cache 3 52
Setting up  FC, iSCSI on vSphere 6.0 for storage 1 45
Unable to remove vmdk file from local storage.. 5 48
Dell Storage ./. VMware 3 70
Last article we focus in how to VMware: How to create and use VMs TAGs – Part 1 so before follow this article and perform the next tasks, you should read the first article how to create the TAG before using them in Veeam Backup Jobs.
HOW TO: Upload an ISO image to a VMware datastore for use with VMware vSphere Hypervisor 6.5 (ESXi 6.5) using the vSphere Host Client, and checking its MD5 checksum signature is correct.  It's a good idea to compare checksums, because many installat…
Advanced tutorial on how to run the esxtop command to capture a batch file in csv format in order to export the file and use it for performance analysis. He demonstrates how to download the file using a vSphere web client (or vSphere client) and exp…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question