ex_handle_except encountered exception C0000005 - Server terminating

Proposed ex_handle_except encountered exception C0000005 - Server terminating

  • Sunday, October 14, 2012 2:35 PM
     
     

    We have been having an intermittent problem whereby SQL Server stops working. I have narrowed it down to the following but have yet to resolve. I have looked at other similar issues but no solutions seem to work for my instance. Any help would be greatly appreciated!

    Server OS:

    Windows Server 2008 Standard

    SQL Version:

    SQL Server 2008 SP3

    Windows Error:

    "SQL Server is terminating because of fatal exception c0000005. This error may be caused by an unhandled Win32 or C++ exception, or by an access violation encountered during exception handling. Check the SQL error log for any related stack dumps or messages. This exception forces SQL Server to shutdown. To recover from this error, restart the server (unless SQLAgent is configured to auto restart)."

    Stack Trace:

    action is required.
    2012-10-14 00:00:24.14 spid19s     This instance of SQL Server has been using a process ID of 5068 since 10/11/2012 5:27:15 PM (local) 10/11/2012 4:27:15 PM (UTC). This is an informational message only; no user action is required.
    2012-10-14 00:44:22.30 Server      Error: 17311, Severity: 16, State: 1.
    2012-10-14 00:44:22.30 Server      SQL Server is terminating because of fatal exception c0000005. This error may be caused by an unhandled Win32 or C++ exception, or by an access violation encountered during exception handling. Check the SQL error log for any related stack dumps or messages. This exception forces SQL Server to shutdown. To recover from this error, restart the server (unless SQLAgent is configured to auto restart).
    2012-10-14 00:44:22.43 Server      Using 'dbghelp.dll' version '4.0.5'
    2012-10-14 00:44:22.49 Server      **Dump thread - spid = 0, EC = 0x0000000000000000
    2012-10-14 00:44:22.51 Server      ***Stack Dump being sent to C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\LOG\SQLDump0045.txt
    2012-10-14 00:44:22.51 Server      * *******************************************************************************
    2012-10-14 00:44:22.51 Server      *
    2012-10-14 00:44:22.51 Server      * BEGIN STACK DUMP:
    2012-10-14 00:44:22.51 Server      *   10/14/12 00:44:22 spid 4700
    2012-10-14 00:44:22.51 Server      *
    2012-10-14 00:44:22.51 Server      * ex_handle_except encountered exception C0000005 - Server terminating
    2012-10-14 00:44:22.51 Server      *
    2012-10-14 00:44:22.51 Server      *
    2012-10-14 00:44:22.51 Server      *  MODULE                          BASE      END       SIZE
    2012-10-14 00:44:22.51 Server      * sqlservr                       0000000000F80000  0000000004842FFF  038c3000
    2012-10-14 00:44:22.51 Server      * ntdll                          00000000774B0000  0000000077635FFF  00186000
    2012-10-14 00:44:22.51 Server      * kernel32                       00000000772B0000  00000000773DCFFF  0012d000
    2012-10-14 00:44:22.51 Server      * MSVCR80                        0000000074560000  0000000074628FFF  000c9000
    2012-10-14 00:44:22.51 Server      * msvcrt                         000007FEFF120000  000007FEFF1BBFFF  0009c000
    2012-10-14 00:44:22.51 Server      * MSVCP80                        0000000074410000  0000000074518FFF  00109000
    2012-10-14 00:44:22.51 Server      * ADVAPI32                       000007FEFF240000  000007FEFF347FFF  00108000
    2012-10-14 00:44:22.51 Server      * RPCRT4                         000007FEFDBD0000  000007FEFDD12FFF  00143000
    2012-10-14 00:44:22.51 Server      * sqlos                          0000000073EE0000  0000000073EE6FFF  00007000
    2012-10-14 00:44:22.51 Server      * Secur32                        000007FEFD840000  000007FEFD85BFFF  0001c000
    2012-10-14 00:44:22.51 Server      * pdh                            000007FEFABD0000  000007FEFAC1FFFF  00050000
    2012-10-14 00:44:22.51 Server      * SHLWAPI                        000007FEFF1C0000  000007FEFF232FFF  00073000
    2012-10-14 00:44:22.51 Server      * GDI32                          000007FEFF470000  000007FEFF4D3FFF  00064000
    2012-10-14 00:44:22.51 Server      * USER32                         00000000773E0000  00000000774ACFFF  000cd000
    2012-10-14 00:44:22.51 Server      * USERENV                        000007FEFD860000  000007FEFD885FFF  00026000
    2012-10-14 00:44:22.51 Server      * WINMM                          000007FEFB9B0000  000007FEFB9E8FFF  00039000
    2012-10-14 00:44:22.51 Server      * ole32                          000007FEFDD20000  000007FEFDEF7FFF  001d8000
    2012-10-14 00:44:22.51 Server      * OLEAUT32                       000007FEFF040000  000007FEFF112FFF  000d3000
    2012-10-14 00:44:22.51 Server      * OLEACC                         000007FEFB950000  000007FEFB9A4FFF  00055000
    2012-10-14 00:44:22.51 Server      * opends60                       0000000072420000  0000000072427FFF  00008000
    2012-10-14 00:44:22.51 Server      * NETAPI32                       000007FEFD360000  000007FEFD402FFF  000a3000
    2012-10-14 00:44:22.51 Server      * PSAPI                          0000000077650000  0000000077658FFF  00009000
    2012-10-14 00:44:22.51 Server      * BatchParser                    0000000071DC0000  0000000071DEBFFF  0002c000
    2012-10-14 00:44:22.51 Server      * IMM32                          000007FEFF010000  000007FEFF03CFFF  0002d000
    2012-10-14 00:44:22.51 Server      * MSCTF                          000007FEFE1F0000  000007FEFE2F1FFF  00102000
    2012-10-14 00:44:22.51 Server      * LPK                            000007FEFEF60000  000007FEFEF6CFFF  0000d000
    2012-10-14 00:44:22.51 Server      * USP10                          000007FEFF530000  000007FEFF5C9FFF  0009a000
    2012-10-14 00:44:22.51 Server      * SOPHOS~2                       00000000742B0000  00000000742E7FFF  00038000
    2012-10-14 00:44:22.51 Server      * comctl32                       000007FEFC0D0000  000007FEFC2C8FFF  001f9000
    2012-10-14 00:44:22.51 Server      * instapi10                      0000000074100000  000000007410CFFF  0000d000
    2012-10-14 00:44:22.51 Server      * cscapi                         000007FEFAC70000  000007FEFAC7CFFF  0000d000
    2012-10-14 00:44:22.51 Server      * sqlevn70                       0000000068FE0000  00000000691DFFFF  00200000
    2012-10-14 00:44:22.51 Server      * rsaenh                         000007FEFCC10000  000007FEFCC57FFF  00048000
    2012-10-14 00:44:22.51 Server      * AUTHZ                          000007FEFD7D0000  000007FEFD7F5FFF  00026000
    2012-10-14 00:44:22.51 Server      * MSCOREE                        000007FEFAB40000  000007FEFABAEFFF  0006f000
    2012-10-14 00:44:22.51 Server      * CRYPT32                        000007FEFD0E0000  000007FEFD217FFF  00138000
    2012-10-14 00:44:22.51 Server      * MSASN1                         000007FEFD2A0000  000007FEFD2B8FFF  00019000
    2012-10-14 00:44:22.51 Server      * credssp                        000007FEFCE40000  000007FEFCE48FFF  00009000
    2012-10-14 00:44:22.51 Server      * schannel                       000007FEFCAF0000  000007FEFCB48FFF  00059000
    2012-10-14 00:44:22.51 Server      * msv1_0                         000007FEFCE80000  000007FEFCEC4FFF  00045000
    2012-10-14 00:44:22.51 Server      * cryptdll                       000007FEFD340000  000007FEFD353FFF  00014000
    2012-10-14 00:44:22.51 Server      * WS2_32                         000007FEFF4E0000  000007FEFF523FFF  00044000
    2012-10-14 00:44:22.51 Server      * NSI                            000007FEFEF70000  000007FEFEF76FFF  00007000
    2012-10-14 00:44:22.51 Server      * kerberos                       000007FEFCD90000  000007FEFCE35FFF  000a6000
    2012-10-14 00:44:22.51 Server      * security                       00000000740E0000  00000000740E3FFF  00004000
    2012-10-14 00:44:22.51 Server      * SHELL32                        000007FEFE300000  000007FEFEF52FFF  00c53000
    2012-10-14 00:44:22.51 Server      * ftimport                       0000000060000000  0000000060024FFF  00025000
    2012-10-14 00:44:22.51 Server      * MSFTE                          0000000049980000  0000000049D30FFF  003b1000
    2012-10-14 00:44:22.51 Server      * VERSION                        000007FEFC9E0000  000007FEFC9EAFFF  0000b000
    2012-10-14 00:44:22.51 Server      * dbghelp                        0000000070040000  000000007019DFFF  0015e000
    2012-10-14 00:44:22.51 Server      * WINTRUST                       000007FEFB560000  000007FEFB598FFF  00039000
    2012-10-14 00:44:22.51 Server      * imagehlp                       000007FEFF5D0000  000007FEFF5E7FFF  00018000
    2012-10-14 00:44:22.51 Server      * ncrypt                         000007FEFCF30000  000007FEFCF71FFF  00042000
    2012-10-14 00:44:22.51 Server      * dssenh                         000007FEFA960000  000007FEFA993FFF  00034000
    2012-10-14 00:44:22.51 Server      * swi_ifslsp_64                  00000000755C0000  00000000755E1FFF  00022000
    2012-10-14 00:44:22.51 Server      * mswsock                        000007FEFCD40000  000007FEFCD8EFFF  0004f000
    2012-10-14 00:44:22.51 Server      * wship6                         000007FEFCED0000  000007FEFCED6FFF  00007000
    2012-10-14 00:44:22.51 Server      * wshtcpip                       000007FEFC8C0000  000007FEFC8C6FFF  00007000
    2012-10-14 00:44:22.51 Server      * wshqos                         000007FEFAAB0000  000007FEFAAB8FFF  00009000
    2012-10-14 00:44:22.51 Server      * NTMARTA                        000007FEFCA20000  000007FEFCA4BFFF  0002c000
    2012-10-14 00:44:22.51 Server      * WLDAP32                        000007FEFDB70000  000007FEFDBC4FFF  00055000
    2012-10-14 00:44:22.51 Server      * SAMLIB                         000007FEFD2C0000  000007FEFD2DBFFF  0001c000
    2012-10-14 00:44:22.51 Server      * ntdsapi                        000007FEFD270000  000007FEFD295FFF  00026000
    2012-10-14 00:44:22.51 Server      * DNSAPI                         000007FEFD300000  000007FEFD339FFF  0003a000
    2012-10-14 00:44:22.51 Server      * NLAapi                         000007FEFC550000  000007FEFC562FFF  00013000
    2012-10-14 00:44:22.51 Server      * IPHLPAPI                       000007FEFD010000  000007FEFD032FFF  00023000
    2012-10-14 00:44:22.51 Server      * dhcpcsvc                       000007FEFCFC0000  000007FEFD004FFF  00045000
    2012-10-14 00:44:22.51 Server      * WINNSI                         000007FEFD240000  000007FEFD249FFF  0000a000
    2012-10-14 00:44:22.51 Server      * dhcpcsvc6                      000007FEFCF90000  000007FEFCFBAFFF  0002b000
    2012-10-14 00:44:22.51 Server      * napinsp                        000007FEFB4E0000  000007FEFB4F2FFF  00013000
    2012-10-14 00:44:22.51 Server      * winrnr                         000007FEFB550000  000007FEFB55AFFF  0000b000
    2012-10-14 00:44:22.51 Server      * rasadhlp                       000007FEFB5E0000  000007FEFB5E7FFF  00008000
    2012-10-14 00:44:22.51 Server      * bcrypt                         000007FEFCEE0000  000007FEFCF2FFFF  00050000
    2012-10-14 00:44:22.51 Server      * CLBCatQ                        000007FEFE150000  000007FEFE1E8FFF  00099000
    2012-10-14 00:44:22.51 Server      * sqlncli10                      0000000068A70000  0000000068D79FFF  0030a000
    2012-10-14 00:44:22.51 Server      * COMCTL32                       000007FEFB3C0000  000007FEFB45FFFF  000a0000
    2012-10-14 00:44:22.51 Server      * COMDLG32                       000007FEFEF80000  000007FEFF00BFFF  0008c000
    2012-10-14 00:44:22.51 Server      * SQLNCLIR10                     000000006D080000  000000006D0B6FFF  00037000
    2012-10-14 00:44:22.51 Server      * xpsqlbot                       0000000070CA0000  0000000070CA7FFF  00008000
    2012-10-14 00:44:22.51 Server      * xpstar                         0000000066190000  0000000066217FFF  00088000
    2012-10-14 00:44:22.51 Server      * SQLSCM                         0000000072340000  000000007234BFFF  0000c000
    2012-10-14 00:44:22.51 Server      * ODBC32                         000007FEF8A00000  000007FEF8A71FFF  00072000
    2012-10-14 00:44:22.51 Server      * ATL80                          0000000073010000  000000007302FFFF  00020000
    2012-10-14 00:44:22.51 Server      * odbcint                        0000000073F60000  0000000073F97FFF  00038000
    2012-10-14 00:44:22.51 Server      * xpstar                         0000000066250000  0000000066274FFF  00025000
    2012-10-14 00:44:22.51 Server      * xplog70                        0000000070030000  000000007003FFFF  00010000
    2012-10-14 00:44:22.51 Server      * xplog70                        000000006F6C0000  000000006F6C1FFF  00002000
    2012-10-14 00:44:22.51 Server      * odsole70                       0000000074B50000  0000000074B66FFF  00017000
    2012-10-14 00:44:22.51 Server      * wls0wndh                       000007FEFA360000  000007FEFA366FFF  00007000
    2012-10-14 00:44:22.51 Server      * SXS                            000007FEFD720000  000007FEFD7AEFFF  0008f000
    2012-10-14 00:44:22.51 Server      * apphelp                        000007FEFD6E0000  000007FEFD714FFF  00035000
    2012-10-14 00:44:22.51 Server      * oledb32                        000007FEF4BA0000  000007FEF4C61FFF  000c2000
    2012-10-14 00:44:22.51 Server      * MSDART                         000007FEFBFA0000  000007FEFBFC3FFF  00024000
    2012-10-14 00:44:22.51 Server      * WININET                        000007FEFF350000  000007FEFF46FFFF  00120000
    2012-10-14 00:44:22.51 Server      * Normaliz                       0000000077660000  0000000077663FFF  00004000
    2012-10-14 00:44:22.51 Server      * urlmon                         000007FEFD9F0000  000007FEFDB66FFF  00177000
    2012-10-14 00:44:22.51 Server      * iertutil                       000007FEFDF00000  000007FEFE142FFF  00243000
    2012-10-14 00:44:22.51 Server      * OLEDB32R                       000007FEFBA50000  000007FEFBA68FFF  00019000
    2012-10-14 00:44:22.51 Server      * msadce                         000007FEF4B10000  000007FEF4B9FFFF  00090000
    2012-10-14 00:44:22.51 Server      * msadcer                        0000000075490000  0000000075491FFF  00002000
    2012-10-14 00:44:22.51 Server      * mscorwks                       000007FEF9420000  000007FEF9DC2FFF  009a3000
    2012-10-14 00:44:22.51 Server      * mscorlib.ni                    000007FEF7660000  000007FEF853AFFF  00edb000
    2012-10-14 00:44:22.51 Server      * mscorsec                       00000642FFAF0000  00000642FFB08FFF  00019000
    2012-10-14 00:44:22.51 Server      * GPAPI                          000007FEFCA90000  000007FEFCAA7FFF  00018000
    2012-10-14 00:44:22.51 Server      * slc                            000007FEFD0B0000  000007FEFD0D8FFF  00029000
    2012-10-14 00:44:22.51 Server      * cryptnet                       000007FEFAC80000  000007FEFACA3FFF  00024000
    2012-10-14 00:44:22.51 Server      * SensApi                        000007FEFAEF0000  000007FEFAEF6FFF  00007000
    2012-10-14 00:44:22.51 Server      * SqlAccess                      0000000074240000  00000000742A6FFF  00067000
    2012-10-14 00:44:22.51 Server      * mscorjit                       000007FEF9FB0000  000007FEFA133FFF  00184000
    2012-10-14 00:44:22.51 Server      * System.Data                    000000001B6D0000  000000001B9B9FFF  002ea000
    2012-10-14 00:44:22.51 Server      * System.ni                      000007FEF6C40000  000007FEF765FFFF  00a20000
    2012-10-14 00:44:22.51 Server      * System.Transactions            000000001E230000  000000001E278FFF  00049000
    2012-10-14 00:44:22.51 Server      * System.Security.ni             000007FEF4930000  000007FEF4A15FFF  000e6000
    2012-10-14 00:44:22.51 Server      * instapi                        0000000048060000  000000004806CFFF  0000d000
    2012-10-14 00:44:22.51 Server      * dbghelp                        0000000071890000  00000000719EDFFF  0015e000
    2012-10-14 00:44:22.51 Server      *
    2012-10-14 00:44:22.53 Server      *     P1Home: 0000000000A800A6:  D8640273C6A3DC09  D8640237C6CDDC0A  D864020ECC49DC0B  D8641A35C3D3DC0C  D8641248CF54DC0D  D8640271C6E5DC0E  
    2012-10-14 00:44:22.53 Server      *     P2Home: 000000001357F2F8:  0050005C003A0043  00720067006F0072  00460020006D0061  00730065006C0069  00630069004D005C  006F0073006F0072  
    2012-10-14 00:44:22.53 Server      *     P3Home: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *     P4Home: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *     P5Home: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *     P6Home: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      * ContextFlags: 000000000010000F:  
    2012-10-14 00:44:22.53 Server      *      MxCsr: 0000000000001FA0:  
    2012-10-14 00:44:22.53 Server      *      SegCs: 0000000000000033:  
    2012-10-14 00:44:22.53 Server      *      SegDs: 000000000000002B:  
    2012-10-14 00:44:22.53 Server      *      SegEs: 000000000000002B:  
    2012-10-14 00:44:22.53 Server      *      SegFs: 0000000000000053:  
    2012-10-14 00:44:22.53 Server      *      SegGs: 000000000000002B:  
    2012-10-14 00:44:22.53 Server      *      SegSs: 000000000000002B:  
    2012-10-14 00:44:22.53 Server      *     EFlags: 0000000000000202:  
    2012-10-14 00:44:22.53 Server      *        Rax: 00000000772C76C0:  83000000C8EC8148  FFFFEF058D4801E2  4DC93320244C89FF  893024448948C985  28244C8948242454  4C8900000BF9850F  
    2012-10-14 00:44:22.53 Server      *        Rcx: 0000000013D6CBA0:  0000000000A800A6  000000001357F2F8  0000000000000000  0000000000000000  0000000000000000  0000000000000000  
    2012-10-14 00:44:22.53 Server      *        Rdx: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *        Rbx: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *        Rsp: 0000000013D6D090:  0000000000000000  00000000774B0000  0000000013D6CA80  0000000000000080  00000000000042AC  0000000000000000  
    2012-10-14 00:44:22.53 Server      *        Rbp: 0000000013D6FB50:  0000000000000000  0000000000000000  0000000000000000  0000000000000000  000000007736C870  000000007736C870  
    2012-10-14 00:44:22.53 Server      *        Rsi: 0000000013D6D340:  000000001357F2F0  00000001098603F8  00000000803F0000  0000000103D89A00  0000000000000000  0002679146652517  
    2012-10-14 00:44:22.53 Server      *        Rdi: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *         R8: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *         R9: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *        R10: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *        R11: 0000000013D6D880:  0000000000A800A6  000000001357F2F8  0000000000000000  0000000000000000  0000000000000000  0000000000000000  
    2012-10-14 00:44:22.53 Server      *        R12: 000000000000003F:  
    2012-10-14 00:44:22.53 Server      *        R13: 0000000000000000:  
    2012-10-14 00:44:22.53 Server      *        R14: 0000000013D6E750:  0068005F00780065  006C0064006E0061  00780065005F0065  0074007000650063  0063006E00650020  0074006E0075006F  
    2012-10-14 00:44:22.53 Server      *        R15: 0000000000000001:  
    2012-10-14 00:44:22.53 Server      *        Rip: 00000000772C76FD:  C3000000C8C48148  9090909090909090  4848EC8348909090  480000008024848B  7824448B38244489  24448B4830244489  
    2012-10-14 00:44:22.53 Server      * *******************************************************************************
    2012-10-14 00:44:22.53 Server      * -----------------------

All Replies

  • Sunday, October 14, 2012 6:31 PM
     
      Has Code

    Can u paste the result-

    SELECT SERVERPROPERTY('productversion'), SERVERPROPERTY ('productlevel'), SERVERPROPERTY ('edition')

    seems it might be an bug...


    Rama Udaya.K ramaudaya.blogspot.com ---------------------------------------- Please remember to mark the replies as answers if they help and un-mark them if they provide no help.

  • Sunday, October 14, 2012 10:44 PM
     
     
    10.0.5512.0 SP3 Standard Edition (64-bit)
    • Edited by --Scott-- Sunday, October 14, 2012 10:45 PM
    •  
  • Monday, October 15, 2012 3:59 AM
    Moderator
     
     

    Hello Scott,

    First few steps to analyze any AV or exception dumps is same. It is difficult to tell the cause of exception from dump.txt file.

    You have to paste the stack of thread which hit the exception.

    Follow the steps 1 to 6 from This link (Sample AV).

    On 6th step you will get the stack (when you type kL). Paste the stack in your next reply, I can give you the fix if it is known issue or you may have to contact PSS support.


    Thank you,

    Karthick P.K |My Facebook Group |My Site| Blog Space |Twitter

    www.Mssqlwiki.com

    Please click the Mark as answer button and vote as helpful if this reply solves your problem


  • Monday, October 15, 2012 5:13 AM
    Moderator
     
     
    If I look at the event time, its close to midnight server time.
    Do you have any scheduled job which runs at around that time? Since AV is causing SQL server to crash, it might be an external component. You can follow Karthick's advice and share more details (stack)

    Balmukund Lakhani | Please mark solved if I've answered your question, vote for it as helpful to help other user's find a solution quicker
    --------------------------------------------------------------------------------
    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------------------------------------------------------------------
    My Blog | Team Blog | @Twitter

  • Monday, October 15, 2012 4:23 PM
     
     

    Hello Scott,

    First few steps to analyze any AV or exception dumps is same. It is difficult to tell the cause of exception from dump.txt file.

    You have to paste the stack of thread which hit the exception.

    Follow the steps 1 to 6 from This link (Sample AV).

    On 6th step you will get the stack (when you type kL). Paste the stack in your next reply, I can give you the fix if it is known issue or you may have to contact PSS support.


    Thank you,

    Karthick P.K |My Facebook Group |My Site| Blog Space |Twitter

    www.Mssqlwiki.com

    Please click the Mark as answer button and vote as helpful if this reply solves your problem


    I get the following after step 5:

     .reload /f
    .Unable to load image C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\sqlservr.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sqlservr.exe
    ........Unable to load image C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\sqlos.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sqlos.dll
    ..........................*** ERROR: Symbol file could not be found.  Defaulted to export symbols for instapi10.dll -
    ..Unable to load image C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\Resources\1033\sqlevn70.rll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sqlevn70.rll
    *** ERROR: Module load completed but symbols could not be loaded for sqlevn70.rll
    ...Unable to load image C:\Windows\System32\mscoree.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for mscoree.dll
    ........Unable to load image C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\msfte.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for msfte.dll
    *** ERROR: Module load completed but symbols could not be loaded for msfte.dll
    ................
    ........Unable to load image C:\Windows\System32\sqlncli10.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sqlncli10.dll
    ...Unable to load image C:\Windows\System32\1033\SQLNCLIR10.RLL, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for SQLNCLIR10.RLL
    *** ERROR: Module load completed but symbols could not be loaded for SQLNCLIR10.RLL
    ..Unable to load image C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\XPStar.DLL, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for XPStar.DLL
    ....Unable to load image C:\Windows\System32\odbcint.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for odbcint.dll
    *** ERROR: Module load completed but symbols could not be loaded for odbcint.dll
    .*** ERROR: Module load completed but symbols could not be loaded for XPStar.RLL
    ..*** ERROR: Module load completed but symbols could not be loaded for xplog70.rll


    Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
    Run !sym noisy before .reload to track down problems loading symbols.

    ............*** ERROR: Module load completed but symbols could not be loaded for msadcer.dll
    ..Unable to load image C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\dde18c01fdfce340f79a35e3729ac36b\mscorlib.ni.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for mscorlib.ni.dll
    ...Unable to load image C:\Windows\System32\SLC.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for SLC.dll
    *** ERROR: Module load completed but symbols could not be loaded for SLC.dll
    ....Unable to load image C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\SqlAccess.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for SqlAccess.dll
    .Unable to load image C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for mscorjit.dll
    ..Unable to load image C:\Windows\assembly\NativeImages_v2.0.50727_64\System\84bf763fae8640b3c38fce4ef4aea050\System.ni.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for System.ni.dll
    ..Unable to load image C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Security\05df43ffd50d3f7b414fd0a514c69170\System.Security.ni.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for System.Security.ni.dll
    .

  • Monday, October 15, 2012 4:24 PM
     
     
    If I look at the event time, its close to midnight server time.
    Do you have any scheduled job which runs at around that time? Since AV is causing SQL server to crash, it might be an external component. You can follow Karthick's advice and share more details (stack)

    Balmukund Lakhani | Please mark solved if I've answered your question, vote for it as helpful to help other user's find a solution quicker
    --------------------------------------------------------------------------------
    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------------------------------------------------------------------
    My Blog | Team Blog | @Twitter


    No i have already checked out the scan times and this error lies out with that window. Also it occured last night at 0430 am which is different :(
  • Monday, October 15, 2012 4:34 PM
    Moderator
     
     

    That should be fine. Did you get out put for step 6?

    Also type "lmvm sqlservr"  and send output


     

    Thank you,

    Karthick P.K |My Facebook Group |My Site| Blog Space |Twitter

    www.Mssqlwiki.com

    Please click the Mark as answer button and vote as helpful if this reply solves your problem

  • Monday, October 15, 2012 4:40 PM
     
     

    That should be fine. Did you get out put for step 6?

    Also type "lmvm sqlservr"  and send output


     

    Thank you,

    Karthick P.K |My Facebook Group |My Site| Blog Space |Twitter

    www.Mssqlwiki.com

    Please click the Mark as answer button and vote as helpful if this reply solves your problem

    Step 6 Produces:

    0:000> .ecxr
    rax=00000000778d76c0 rbx=00000000034a1a18 rcx=000000001245cb20
    rdx=0000000000000000 rsi=0000000003082c1c rdi=0000000000000440
    rip=00000000778d76fd rsp=000000001245d010 rbp=000000001245fce0
     r8=0000000000000000  r9=0000000000000000 r10=00000000c000007c
    r11=000000000094c550 r12=0000000000000bc0 r13=0000000000000440
    r14=000000001245e8e0 r15=0000000000a03278
    iopl=0         nv up ei pl nz na po nc
    cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000206
    kernel32!RaiseException+0x39:
    00000000`778d76fd 4881c4c8000000  add     rsp,0C8h
    0:000> kL
      *** Stack trace for last set context - .thread/.cxr resets it
    Child-SP          RetAddr           Call Site
    00000000`1245d010 00000000`0103c78c kernel32!RaiseException+0x39
    00000000`1245d0e0 00000000`01a10530 sqlservr!CDmpDump::Dump+0x7c
    00000000`1245d130 00000000`01aca18e sqlservr!SQLDumperLibraryInvoke+0x1a0
    00000000`1245d160 00000000`01c13690 sqlservr!CImageHelper::DoMiniDump+0x3ce
    00000000`1245d340 00000000`01c139f9 sqlservr!stackTrace+0x710
    00000000`1245e870 00000000`019fdb6c sqlservr!stackTraceCallBack+0x49
    00000000`1245e8b0 00000000`7797c9cf sqlservr!ex_handle_except+0xfc
    00000000`1245eb00 00000000`77b38120 kernel32!UnhandledExceptionFilter+0x15f
    00000000`1245ebe0 00000000`77af95a4 ntdll!RtlUserThreadStart+0x95
    00000000`1245ec10 00000000`77af5b4d ntdll!_C_specific_handler+0x8c
    00000000`1245ec80 00000000`77af9947 ntdll!RtlpExecuteHandlerForException+0xd
    00000000`1245ecb0 00000000`77b06c78 ntdll!RtlDispatchException+0x20c
    00000000`1245f350 000007fe`ff501ac0 ntdll!KiUserExceptionDispatch+0x2e
    00000000`1245f8f0 000007fe`ff50120d wininet!InternetFreeThreadInfo+0x1c
    00000000`1245f920 000007fe`ff501132 wininet!DllMain+0x50
    00000000`1245f990 00000000`77ad81b7 wininet!CRT_INIT+0x2a5
    00000000`1245faf0 00000000`77ad82c8 ntdll!LdrShutdownThread+0x14b
    00000000`1245fbe0 00000000`758337b7 ntdll!RtlExitUserThread+0x38
    00000000`1245fc20 00000000`758337de msvcr80!endthreadex+0x27
    00000000`1245fc50 00000000`75833894 msvcr80!endthreadex+0x4e

  • Monday, October 15, 2012 4:40 PM
     
     

    lmvm server also produces:

    0:000> lmvm sqlservr
    start             end                 module name
    00000000`00280000 00000000`03ac4000   sqlservr T (pdb symbols)          c:\msftpdbs\sqlservr.pdb\1A48B7C4D60D41E1A9F1BF1ADE8DCC742\sqlservr.pdb
        Loaded symbol image file: sqlservr.exe
        Image path: C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
        Image name: sqlservr.exe
        Timestamp:        Thu Jul 10 07:02:17 2008 (4875A5E9)
        CheckSum:         0372739F
        ImageSize:        03844000
        File version:     2007.100.1600.22
        Product version:  10.0.1600.22
        File flags:       0 (Mask 3F)
        File OS:          40000 NT Base
        File type:        1.0 App
        File date:        00000000.00000000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

  • Monday, October 15, 2012 5:14 PM
    Moderator
     
     
    can you please use kL 1000 instead of kL and paste the output. Actually your stack is bigger than what i expected

     

    Thank you,

    Karthick P.K |My Facebook Group |My Site| Blog Space |Twitter

    www.Mssqlwiki.com

    Please click the Mark as answer button and vote as helpful if this reply solves your problem

  • Monday, October 15, 2012 5:28 PM
     
     

    Hi That provides:

    Child-SP          RetAddr           Call Site
    00000000`1245d010 00000000`0103c78c kernel32!RaiseException+0x39
    00000000`1245d0e0 00000000`01a10530 sqlservr!CDmpDump::Dump+0x7c
    00000000`1245d130 00000000`01aca18e sqlservr!SQLDumperLibraryInvoke+0x1a0
    00000000`1245d160 00000000`01c13690 sqlservr!CImageHelper::DoMiniDump+0x3ce
    00000000`1245d340 00000000`01c139f9 sqlservr!stackTrace+0x710
    00000000`1245e870 00000000`019fdb6c sqlservr!stackTraceCallBack+0x49
    00000000`1245e8b0 00000000`7797c9cf sqlservr!ex_handle_except+0xfc
    00000000`1245eb00 00000000`77b38120 kernel32!UnhandledExceptionFilter+0x15f
    00000000`1245ebe0 00000000`77af95a4 ntdll!RtlUserThreadStart+0x95
    00000000`1245ec10 00000000`77af5b4d ntdll!_C_specific_handler+0x8c
    00000000`1245ec80 00000000`77af9947 ntdll!RtlpExecuteHandlerForException+0xd
    00000000`1245ecb0 00000000`77b06c78 ntdll!RtlDispatchException+0x20c
    00000000`1245f350 000007fe`ff501ac0 ntdll!KiUserExceptionDispatch+0x2e
    00000000`1245f8f0 000007fe`ff50120d wininet!InternetFreeThreadInfo+0x1c
    00000000`1245f920 000007fe`ff501132 wininet!DllMain+0x50
    00000000`1245f990 00000000`77ad81b7 wininet!CRT_INIT+0x2a5
    00000000`1245faf0 00000000`77ad82c8 ntdll!LdrShutdownThread+0x14b
    00000000`1245fbe0 00000000`758337b7 ntdll!RtlExitUserThread+0x38
    00000000`1245fc20 00000000`758337de msvcr80!endthreadex+0x27
    00000000`1245fc50 00000000`75833894 msvcr80!endthreadex+0x4e
    00000000`1245fc80 00000000`778dbe3d msvcr80!endthreadex+0x104
    00000000`1245fcb0 00000000`77ae6a51 kernel32!BaseThreadInitThunk+0xd
    00000000`1245fce0 00000000`00000000 ntdll!RtlUserThreadStart+0x1d

    Many thanks for your ongoing help

  • Monday, October 15, 2012 5:41 PM
    Moderator
     
     

    There are other causes, but these kinds of issues are almost always caused by internal issues in SQL Server.

    I would start by installing the latest Cumulative Update and see if the issue is already resolved.   MS is not good about documenting every fix in a CU.  So it may be fixed even if it is not listed in the public docs.

    Please see:

    http://support.microsoft.com/kb/2629969

  • Monday, October 15, 2012 5:42 PM
    Moderator
     
     

    wininet.dll is causing SQLServer to fail.

    Basically, the Microsoft VC runtime is trying to shutdown  current thread and so the thread called ntdll.dll loader for shutting down thread related allocation resource and freeing  up the allocated Wininet ThreadInfo object. But unfortunately it look's like ThreadInfo object is pointing to an invalid memory address and then crash happened.

    The root cause is: The wininet.dll cannot be running in any service type environment like SQL. This is by design  in wininet.dll.
    http://support.microsoft.com/kb/238425

    INFO: WinInet Not Supported for Use in Services

    Donot load winnet.dll in SQL Server process and the problem in SQL Server will go away. 


    Thank you,

    Karthick P.K |My Facebook Group |Follow My Site| Blog Space |Twitter

    www.Mssqlwiki.com

    Please click the Mark as answer button and vote as helpful if this reply solves your problem



  • Monday, October 15, 2012 6:09 PM
     
     
    Hi Karthick, By remove the dll, do you mean disable the WinInet service or actually delete the dll from the file system? Many thanks! Scott
  • Monday, October 15, 2012 7:59 PM
    Moderator
     
     
    I mean do not load in SQL Server process.  Check if you are loading any ComDLL using sp_OACreate, WinInet might be running from COMDLL.  Also check if you are using CDOSYS to send mail by any chance.

     

    Thank you,

    Karthick P.K |My Facebook Group |My Site| Blog Space |Twitter

    www.Mssqlwiki.com

    Please click the Mark as answer button and vote as helpful if this reply solves your problem

  • Tuesday, October 16, 2012 11:26 AM
    Moderator
     
     Proposed

    There are other causes, but these kinds of issues are almost always caused by internal issues in SQL Server.

    I would start by installing the latest Cumulative Update and see if the issue is already resolved.   MS is not good about documenting every fix in a CU.  So it may be fixed even if it is not listed in the public docs.

    Please see:

    http://support.microsoft.com/kb/2629969

    It is assumed that exceptions are caused by SQL Server product problem but majority of access violations and exceptions are caused by external factors like hardware problem, corruption, Loading 3rd party DLL's in SQL server process etc.  So please don’t suggest services packs are CU’s without looking at stack, unless you are sure SQL servr is raising exception or access violation.

    @scott:

    I am seeing many threads with exception, Assertion and Access violation in MSDN and Other forums. Most of the time only the log is posted in the forums and without having stack of the thread which raised exception it is only remotely possible for anyone to find the cause of exception.  I have documented how to get the stack from the dump. in below article.

    http://mssqlwiki.com/2012/10/16/sql-server-exception_access_violation-and-sql-server-assertion/

    Please post the stack in the thread when you ask the Question next time along with error message in log. so it would be easy for community to answer. Thanks


     

    Thank you,

    Karthick P.K |My Facebook Group |My Site| Blog Space |Twitter

    www.Mssqlwiki.com

    Please click the Mark as answer button and vote as helpful if this reply solves your problem

  • Tuesday, October 16, 2012 11:55 AM
     
     

    Hi Karthick,

    Many thanks for the help and advice! I will pass your comments about the mailer over to the developer who built the software so he can look into whether or not it uses the method above. 

    On a side note we do have a mailer job which runs every five minutes day and night. Could the job run successfully one time and not the next seen as the job uses the same resource to do so? Would it not be the case that the mail would simply not send at all?

    Thanks!

    Scott 

  • Tuesday, October 16, 2012 12:02 PM
    Moderator
     
     

     Yes, most of the exceptions are Intermittent.


     

    Thank you,

    Karthick P.K |My Facebook Group |My Site| Blog Space |Twitter

    www.Mssqlwiki.com

    Please click the Mark as answer button and vote as helpful if this reply solves your problem