Link to home
Start Free TrialLog in
Avatar of Eduardo Alvarado
Eduardo AlvaradoFlag for Costa Rica

asked on

how can I tell if my windows 2008 R2 is corrupted?

Hi all,
How can I tell if my win 2008 R2 is corrupted, I mean is there anything specific in the logs that I can take a look at? Where can I find indications of Os corruption??

We have Opentext application on it running on SQL server database.
Today when the server got rebooted the SQL server services were not starting up
We had faced this couple of times before but after repairing SQL installation everything would be fine but today it was not allowing us to repair SQL as it was giving multiple errors.


Thanks in advance.
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

There's a lot of things that can go wrong.  If you really want you can run SFC /SCANNOW (SFC = System File Checker), but odds are you're fine.  I'd suggest reviewing the event logs.  As to what you should be looking for, Anything that is not informational.  Meaning, Warnings, Errors, Critical class stuff.
Was this a patch Tuesday reboot?
check Windows Event viewer log (system, apps)
to see any related errors
Make sure you have latest patches and for win2008r2 a very important Sp1

How to diagnose Windows 7 and Windows Server 2008 R2 performance issue
https://support.microsoft.com/en-us/help/2669922/how-to-diagnose-windows-7-and-windows-server-2008-r2-performance-issue

also it can be sql server issue (make sure you have latest SP -- not sure your sql version) -- not sure why you tried to "repair sql" without full investigation
that may not be sql nor windows- maybe sql login account was locked (just need to unlock)


If sql service does not start (check start up account - set to local system (with all sql windows permission) , check your Server some security policies, restrictions, AD GPO ..
Post any errors that you got when tried to start sql service
also check sql logs ..
what is the error that MS SQL server gives as the reason of the restart attempt.
Suspect the user if not localsystem lacks rights to run as service by GPO restriction.

look at the rights of the data folder where master, msdb, model dbs are stored to make sure the user with whose credentials ms sql attempts to start has rights there..

Any anti-virus app, make sure the sql data folder is exempt from the scan as it is a binary file and anti-virus can not scan within, but could delay the attempt to start as often it tries to scan on access..
Avatar of Eduardo Alvarado

ASKER

The only sql errors that I see in the application log are like thisUser generated image
on system log the only related error is:
Faulting application name: sqlservr.exe, version: 2009.100.2769.0, time stamp: 0x4e053e60
Faulting module name: sqlservr.exe, version: 2009.100.2769.0, time stamp: 0x4e053e60
Exception code: 0xc0000005
Fault offset: 0x0000000000a03d68
Faulting process id: 0xbe4
Faulting application start time: 0x01d322e476e43992
Faulting application path: L:\MS-SQL\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
Faulting module path: L:\MS-SQL\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
Report Id: b4932600-8ed7-11e7-9e90-c71ef552fefd


no clue how this could be linked to a corrupted OS
if your sql server  install was successful ( or "fix")

I'd recommend to start with installing  sql 2008r2 Service Pack 3 ( you are on sql sp1 CU2)
2017-09-01 05:23:59.96 Server      Microsoft SQL Server 2008 R2 (SP1) - 10.50.2769.0 (X64)
      Jun 24 2011 13:09:43
      Copyright (c) Microsoft Corporation
      Enterprise Edition (64-bit) on Windows NT 6.1 <X64> (Build 7601: Service Pack 1) (Hypervisor)

2017-09-01 05:23:59.97 Server      (c) Microsoft Corporation.
2017-09-01 05:23:59.97 Server      All rights reserved.
2017-09-01 05:23:59.97 Server      Server process ID is 7680.
2017-09-01 05:23:59.97 Server      System Manufacturer: 'Xen', System Model: 'HVM domU'.
2017-09-01 05:23:59.97 Server      Authentication mode is MIXED.
2017-09-01 05:23:59.97 Server      Logging SQL Server messages in file 'L:\MS-SQL\MSSQL10_50.MSSQLSERVER\MSSQL\Log\ERRORLOG'.
2017-09-01 05:23:59.97 Server      This instance of SQL Server last reported using a process ID of 7472 at 9/1/2017 5:22:29 AM (local) 9/1/2017 9:22:29 AM (UTC). This is an informational message only; no user action is required.
2017-09-01 05:23:59.97 Server      Registry startup parameters:
       -d L:\MS-SQL\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\master.mdf
       -e L:\MS-SQL\MSSQL10_50.MSSQLSERVER\MSSQL\Log\ERRORLOG
       -l L:\MS-SQL\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\mastlog.ldf
2017-09-01 05:23:59.97 Server      Command Line Startup Parameters:
       -m SqlSetup
       -T 4022
       -T 4010
       -T 1905
2017-09-01 05:23:59.97 Server      SQL Server is starting at normal priority base (=7). This is an informational message only. No user action is required.
2017-09-01 05:23:59.99 Server      Detected 1 CPUs. This is an informational message; no user action is required.
2017-09-01 05:24:00.04 Server      Using locked pages for buffer pool.
2017-09-01 05:24:00.18 Server      Perfmon counters for resource governor pools and groups failed to initialize and are disabled.
2017-09-01 05:24:00.20 Server      Using dynamic lock allocation.  Initial allocation of 2500 Lock blocks and 5000 Lock Owner blocks per node.  This is an informational message only.  No user action is required.
2017-09-01 05:24:00.34 Server      Error: 17311, Severity: 16, State: 1.
2017-09-01 05:24:00.34 Server      SQL Server is terminating because of fatal exception c0000005. This error may be caused by an unhandled Win32 or C++ exception, or by an access violation encountered during exception handling. Check the SQL error log for any related stack dumps or messages. This exception forces SQL Server to shutdown. To recover from this error, restart the server (unless SQLAgent is configured to auto restart).
2017-09-01 05:24:00.34 Server      Using 'dbghelp.dll' version '4.0.5'
2017-09-01 05:24:00.34 Server      **Dump thread - spid = 0, EC = 0x0000000000000000
2017-09-01 05:24:00.34 Server      ***Stack Dump being sent to L:\MS-SQL\MSSQL10_50.MSSQLSERVER\MSSQL\LOG\SQLDump0084.txt
2017-09-01 05:24:00.34 Server      * *******************************************************************************
2017-09-01 05:24:00.34 Server      *
2017-09-01 05:24:00.34 Server      * BEGIN STACK DUMP:
2017-09-01 05:24:00.34 Server      *   09/01/17 05:24:00 spid 6868
2017-09-01 05:24:00.34 Server      *
2017-09-01 05:24:00.34 Server      * ex_handle_except encountered exception C0000005 - Server terminating
2017-09-01 05:24:00.34 Server      *
2017-09-01 05:24:00.34 Server      *
2017-09-01 05:24:00.34 Server      *  MODULE                          BASE      END       SIZE
2017-09-01 05:24:00.34 Server      * sqlservr                       00000000005B0000  0000000004190FFF  03be1000
2017-09-01 05:24:00.34 Server      * ntdll                          0000000077C10000  0000000077DB9FFF  001aa000
2017-09-01 05:24:00.34 Server      * kernel32                       00000000779F0000  0000000077B0EFFF  0011f000
2017-09-01 05:24:00.34 Server      * KERNELBASE                     000007FEFDD70000  000007FEFDDD9FFF  0006a000
2017-09-01 05:24:00.34 Server      * ADVAPI32                       000007FEFE330000  000007FEFE40AFFF  000db000
2017-09-01 05:24:00.34 Server      * msvcrt                         000007FEFF890000  000007FEFF92EFFF  0009f000
2017-09-01 05:24:00.34 Server      * sechost                        000007FEFE750000  000007FEFE76EFFF  0001f000
2017-09-01 05:24:00.34 Server      * RPCRT4                         000007FEFDF70000  000007FEFE09CFFF  0012d000
2017-09-01 05:24:00.34 Server      * MSVCR80                        0000000073CE0000  0000000073DA8FFF  000c9000
2017-09-01 05:24:00.34 Server      * MSVCP80                        0000000068230000  0000000068338FFF  00109000
2017-09-01 05:24:00.34 Server      * sqlos                          000000006CF00000  000000006CF06FFF  00007000
2017-09-01 05:24:00.34 Server      * Secur32                        000007FEFD800000  000007FEFD80AFFF  0000b000
2017-09-01 05:24:00.34 Server      * SSPICLI                        000007FEFD830000  000007FEFD854FFF  00025000
2017-09-01 05:24:00.34 Server      * pdh                            000007FEFA450000  000007FEFA49DFFF  0004e000
2017-09-01 05:24:00.34 Server      * SHLWAPI                        000007FEFDE20000  000007FEFDE90FFF  00071000
2017-09-01 05:24:00.34 Server      * GDI32                          000007FEFE490000  000007FEFE4F6FFF  00067000
2017-09-01 05:24:00.34 Server      * USER32                         0000000077B10000  0000000077C09FFF  000fa000
2017-09-01 05:24:00.34 Server      * LPK                            000007FEFE5E0000  000007FEFE5EDFFF  0000e000
2017-09-01 05:24:00.34 Server      * USP10                          000007FEFDEA0000  000007FEFDF6AFFF  000cb000
2017-09-01 05:24:00.34 Server      * USERENV                        000007FEFDCA0000  000007FEFDCBDFFF  0001e000
2017-09-01 05:24:00.34 Server      * profapi                        000007FEFDA60000  000007FEFDA6EFFF  0000f000
2017-09-01 05:24:00.34 Server      * WINMM                          000007FEF8A30000  000007FEF8A6AFFF  0003b000
2017-09-01 05:24:00.34 Server      * IPHLPAPI                       000007FEFB870000  000007FEFB896FFF  00027000
2017-09-01 05:24:00.34 Server      * NSI                            000007FEFE740000  000007FEFE747FFF  00008000
2017-09-01 05:24:00.34 Server      * WINNSI                         000007FEFB840000  000007FEFB84AFFF  0000b000
2017-09-01 05:24:00.34 Server      * opends60                       000000006BC70000  000000006BC77FFF  00008000
2017-09-01 05:24:00.34 Server      * NETAPI32                       000007FEFBA20000  000007FEFBA35FFF  00016000
2017-09-01 05:24:00.34 Server      * netutils                       000007FEFCE80000  000007FEFCE8BFFF  0000c000
2017-09-01 05:24:00.34 Server      * srvcli                         000007FEFD750000  000007FEFD772FFF  00023000
2017-09-01 05:24:00.34 Server      * wkscli                         000007FEFBA00000  000007FEFBA14FFF  00015000
2017-09-01 05:24:00.34 Server      * LOGONCLI                       000007FEFD040000  000007FEFD06FFFF  00030000
2017-09-01 05:24:00.34 Server      * SAMCLI                         000007FEFAD20000  000007FEFAD33FFF  00014000
2017-09-01 05:24:00.34 Server      * BatchParser                    000000006B380000  000000006B3ACFFF  0002d000
2017-09-01 05:24:00.34 Server      * IMM32                          000007FEFE610000  000007FEFE63DFFF  0002e000
2017-09-01 05:24:00.34 Server      * MSCTF                          000007FEFE9F0000  000007FEFEAF8FFF  00109000
2017-09-01 05:24:00.34 Server      * psapi                          0000000077DE0000  0000000077DE6FFF  00007000
2017-09-01 05:24:00.34 Server      * instapi10                      0000000073DC0000  0000000073DCCFFF  0000d000
2017-09-01 05:24:00.34 Server      * cscapi                         000007FEF8B40000  000007FEF8B4EFFF  0000f000
2017-09-01 05:24:00.34 Server      * sqlevn70                       000000005B0A0000  000000005B2A2FFF  00203000
2017-09-01 05:24:00.34 Server      * CRYPTSP                        000007FEFD250000  000007FEFD267FFF  00018000
2017-09-01 05:24:00.34 Server      * rsaenh                         000007FEFCF50000  000007FEFCF96FFF  00047000
2017-09-01 05:24:00.34 Server      * CRYPTBASE                      000007FEFD8C0000  000007FEFD8CEFFF  0000f000
2017-09-01 05:24:00.34 Server      * BROWCLI                        000007FEF5DC0000  000007FEF5DD1FFF  00012000
2017-09-01 05:24:00.34 Server      * AUTHZ                          000007FEFD420000  000007FEFD44EFFF  0002f000
2017-09-01 05:24:00.34 Server      * MSCOREE                        000007FEF7200000  000007FEF726EFFF  0006f000
2017-09-01 05:24:00.34 Server      * mscoreei                       000007FEF7150000  000007FEF71ECFFF  0009d000
2017-09-01 05:24:00.34 Server      * dbghelp                        0000000054CA0000  0000000054DFDFFF  0015e000
2017-09-01 05:24:00.34 Server      *
2017-09-01 05:24:00.35 Server      *     P1Home: 0044004CBE0001BF:  
2017-09-01 05:24:00.35 Server      *     P2Home: 00300070006D0075:  
2017-09-01 05:24:00.35 Server      *     P3Home: 00000034BE0001BF:  
2017-09-01 05:24:00.35 Server      *     P4Home: 0000000000000000:  
2017-09-01 05:24:00.35 Server      *     P5Home: 0000000000760074:  2024448948282444  440000D3350D8D4C  8B4C0C568B7F408D  DE3EE8CE8B490075  C933104789480010  008134840FC13B48  
2017-09-01 05:24:00.35 Server      *     P6Home: 000000000041AD08:  004D005C003A004C  00510053002D0053  0053004D005C004C  0031004C00510053  00300035005F0030  00530053004D002E  
2017-09-01 05:24:00.35 Server      * ContextFlags: 000000000010004F:  
2017-09-01 05:24:00.35 Server      *      MxCsr: 0000000000001FA0:  
2017-09-01 05:24:00.35 Server      *      SegCs: 0000000000000033:  
2017-09-01 05:24:00.35 Server      *      SegDs: 000000000000002B:  
2017-09-01 05:24:00.35 Server      *      SegEs: 000000000000002B:  
2017-09-01 05:24:00.35 Server      *      SegFs: 0000000000000053:  
2017-09-01 05:24:00.35 Server      *      SegGs: 000000000000002B:  
2017-09-01 05:24:00.35 Server      *      SegSs: 000000000000002B:  
2017-09-01 05:24:00.35 Server      *     EFlags: 0000000000000202:  
2017-09-01 05:24:00.35 Server      *        Rax: 0000000072AAAC1A:  
2017-09-01 05:24:00.35 Server      *        Rcx: 000000000572AC20:  0044004CBE0001BF  00300070006D0075  00000034BE0001BF  0000000000000000  0000000000760074  000000000041AD08  
2017-09-01 05:24:00.35 Server      *        Rdx: 0000000000000000:  
2017-09-01 05:24:00.35 Server      *        Rbx: 0000000000000000:  
2017-09-01 05:24:00.35 Server      *        Rsp: 000000000572B230:  0000000000000000  0000000000000000  000000000572B460  000007FFFFFD8000  00000000000042AC  0000000000000000  
2017-09-01 05:24:00.35 Server      *        Rbp: 000000000572F7A0:  0000000000000000  0000000000000000  0000000000000000  0000000000000000  0000000077A8BAB0  0000000077A8BAB0  
2017-09-01 05:24:00.35 Server      *        Rsi: 0000000000000000:  
2017-09-01 05:24:00.35 Server      *        Rdi: 000000000572B460:  000000000041AD00  00000000003EF0A8  000000000572DB00  000007FEFE3AA940  000000000000000C  00000000003E6878  
2017-09-01 05:24:00.35 Server      *         R8: 0000000000000000:  
2017-09-01 05:24:00.35 Server      *         R9: 0000000000000000:  
2017-09-01 05:24:00.35 Server      *        R10: 0000000000000000:  
2017-09-01 05:24:00.35 Server      *        R11: 000000000572BA40:  0044004CBE0001BF  00300070006D0075  00000034BE0001BF  0000000000000000  0000000000760074  000000000041AD08  
2017-09-01 05:24:00.35 Server      *        R12: 0000000000000001:  
2017-09-01 05:24:00.35 Server      *        R13: 0000000000000000:  
2017-09-01 05:24:00.35 Server      *        R14: 000000000572C910:  0068005F00780065  006C0064006E0061  00780065005F0065  0074007000650063  0063006E00650020  0074006E0075006F  
2017-09-01 05:24:00.35 Server      *        R15: 000000000000003F:  
2017-09-01 05:24:00.35 Server      *        Rip: 000007FEFDD8A06D:  C3000000C8C48148  9090909090909090  6528EC8348909090  0000003025048B48  488B48D233C18B4C  A815FF30498B4860  
2017-09-01 05:24:00.35 Server      * *******************************************************************************
2017-09-01 05:24:00.35 Server      * -------------------------------------------------------------------------------
2017-09-01 05:24:00.35 Server      * Short Stack Dump
2017-09-01 05:24:00.35 Server      000007FEFDD8A06D Module(KERNELBASE+000000000001A06D)
2017-09-01 05:24:00.35 Server      000000000267BF3D Module(sqlservr+00000000020CBF3D)
2017-09-01 05:24:00.35 Server      0000000002680476 Module(sqlservr+00000000020D0476)
2017-09-01 05:24:00.35 Server      000000000267FFD9 Module(sqlservr+00000000020CFFD9)
2017-09-01 05:24:00.35 Server      0000000002AC01A6 Module(sqlservr+00000000025101A6)
2017-09-01 05:24:00.36 Server      0000000077A8BC10 Module(kernel32+000000000009BC10)
2017-09-01 05:24:00.36 Server      0000000077C90108 Module(ntdll+0000000000080108)
2017-09-01 05:24:00.36 Server      0000000077C27958 Module(ntdll+0000000000017958)
2017-09-01 05:24:00.36 Server      0000000077C3812D Module(ntdll+000000000002812D)
2017-09-01 05:24:00.36 Server      0000000077C2855F Module(ntdll+000000000001855F)
2017-09-01 05:24:00.36 Server      0000000077C5BCB8 Module(ntdll+000000000004BCB8)
2017-09-01 05:24:00.36 Server      000000000219B923 Module(sqlservr+0000000001BEB923)
2017-09-01 05:24:00.36 Server      Stack Signature for the dump is 0x000000016139F586
if you can -- install sql 2008r2 latest service pack 3
before installing the SP3 I ran a chkdsk on the sql installation drive and got this:

User generated image
Good to run chkdsk - you still need to install SP3.  You should now run chkdsk /f to fix the issues.
ASKER CERTIFIED SOLUTION
Avatar of EugeneZ
EugeneZ
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
is there any risk of data loss with chkdsk /f ? This is a DB disk :(
depends.. as I said have good backups
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
We have rebuilded the server, no issues since that, thanks guys :)