Jump to content

Recommended Posts

Guest Doug332
Posted

Hi,

 

I am continuously (and randomly) getting Blue Screen with my server. Started a couple of days ago. I havent installed any new software (asides from initiating TeamViewer 11 - which was installed before but now logged in as unattended access).

 

Using Windbg I have the following (from the latest dump):

 

 

Microsoft ® Windows Debugger Version 6.12.0002.633 AMD64

Copyright © Microsoft Corporation. All rights reserved.

 

 

Loading Dump File [C:\Windows\Minidump\102119-41296-01.dmp]

Mini Kernel Dump File: Only registers and stack trace are available

 

Symbol search path is: SRV*c:\symbols*Symbol information

Executable search path is:

Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64

Product: Server, suite: TerminalServer DataCenter SingleUserTS

Built by: 7601.24384.amd64fre.win7sp1_ldr_escrow.190220-1800

Machine Name:

Kernel base = 0xfffff800`0164c000 PsLoadedModuleList = 0xfffff800`01885c90

Debug session time: Mon Oct 21 00:49:11.315 2019 (UTC + 2:00)

System Uptime: 0 days 1:47:34.857

Loading Kernel Symbols

...............................................................

................................................................

......

Loading User Symbols

Loading unloaded module list

.......

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

 

Use !analyze -v to get detailed debugging information.

 

BugCheck 3B, {c0000005, fffff800016733ef, fffff880083aaed0, 0}

 

Probably caused by : ntkrnlmp.exe ( nt!ExpCheckForIoPriorityBoost+a7 )

 

Followup: MachineOwner

---------

 

5: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

 

SYSTEM_SERVICE_EXCEPTION (3b)

An exception happened while executing a system service routine.

Arguments:

Arg1: 00000000c0000005, Exception code that caused the bugcheck

Arg2: fffff800016733ef, Address of the instruction which caused the bugcheck

Arg3: fffff880083aaed0, Address of the context record for the exception that caused the bugcheck

Arg4: 0000000000000000, zero.

 

Debugging Details:

------------------

 

 

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

 

FAULTING_IP:

nt!ExpCheckForIoPriorityBoost+a7

fffff800`016733ef 448b6608 mov r12d,dword ptr [rsi+8]

 

CONTEXT: fffff880083aaed0 -- (.cxr 0xfffff880083aaed0)

rax=fffff880083ab8d8 rbx=fffffa8c0f943898 rcx=fffffa8c0f943898

rdx=0000000000000002 rsi=fffe1b2000001000 rdi=0000000000000000

rip=fffff800016733ef rsp=fffff880083ab8a0 rbp=0000000000000001

r8=0000000000000000 r9=0000000000000000 r10=fffffa8c0f049450

r11=fffffa8c0f0189f0 r12=0000000000000000 r13=fffff88002000180

r14=0000000000000002 r15=0000000000010224

iopl=0 nv up di ng nz na po nc

cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010086

nt!ExpCheckForIoPriorityBoost+0xa7:

fffff800`016733ef 448b6608 mov r12d,dword ptr [rsi+8] ds:002b:fffe1b20`00001008=????????

Resetting default scope

 

CUSTOMER_CRASH_COUNT: 1

 

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

 

BUGCHECK_STR: 0x3B

 

PROCESS_NAME: svchost.exe

 

CURRENT_IRQL: 0

 

LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff800016733ef

 

STACK_TEXT:

fffff880`083ab8a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpCheckForIoPriorityBoost+0xa7

 

 

FOLLOWUP_IP:

nt!ExpCheckForIoPriorityBoost+a7

fffff800`016733ef 448b6608 mov r12d,dword ptr [rsi+8]

 

SYMBOL_STACK_INDEX: 0

 

SYMBOL_NAME: nt!ExpCheckForIoPriorityBoost+a7

 

FOLLOWUP_NAME: MachineOwner

 

MODULE_NAME: nt

 

IMAGE_NAME: ntkrnlmp.exe

 

DEBUG_FLR_IMAGE_TIMESTAMP: 5c6e1cbd

 

STACK_COMMAND: .cxr 0xfffff880083aaed0 ; kb

 

FAILURE_BUCKET_ID: X64_0x3B_nt!ExpCheckForIoPriorityBoost+a7

 

BUCKET_ID: X64_0x3B_nt!ExpCheckForIoPriorityBoost+a7

 

Followup: MachineOwner

---------

 

Any ideas?

 

More...

  • Replies 0
  • Created
  • Last Reply

Popular Days

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...