Answered Memory dump

  • Sunday, November 11, 2012 8:45 AM
     
     

    Hi,

    We have a Ms Exchange 2010 with sp1 installed on WIN2K8 Server. Yesterday morning server was restarted with the following error in System event.

    “The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000009e (0xfffffa8022723b30, 0x000000000000003c, 0x0000000000000000, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 111012-40232-01.”

    The size of memory dump file is 1.7 Gb. When I opened this file through windows diagnosis tools for further diagnosis, I am getting below error message.

    MODULE_NAME: netft

    FAULTING_MODULE: fffff80001c57000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc48a

    PROCESS_OBJECT: fffffa8022723b30

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

    BUGCHECK_STR:  0x9E

    CURRENT_IRQL:  0

    LAST_CONTROL_TRANSFER:  from fffff880057d56a5 to fffff80001cc7600

    Kindly advice for further diagnosis to find out the problem.

    Regards,

    Chetan

All Replies

  • Sunday, November 11, 2012 2:29 PM
     
     Answered

    Generally this one may help.

    http://msdn.microsoft.com/en-us/library/windows/hardware/ff559326(v=vs.85).aspx

    For futher diagnosis you'll need to start a support case with Microsoft CSS.

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

  • Sunday, November 11, 2012 6:51 PM
     
     Answered

    I too agree with Dave and follow the steps as per the link abd troubleshoot accordingly

    If the issue persists, you may contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request. To troubleshoot this kind of kernel crash issue, we need to debug the crashed system dump. Unfortunately, debugging is beyond what we can do in the forum. Please be advised that contacting phone support will be a charged call.

    To obtain the phone numbers for specific technology request please take a look at the web site listed below.

    http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607

    Thank you for understanding.


    Regards, Ravikumar P