The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001a


  • We had quite a few unexpected reboot this month with this server.

    It is a Windows Server 2008 R2 Standard with Service Pack 1/ 4 GB RAM / 64-bit / Intel(R) Xeon(R) CPU E7- 8850 @ 2.00 GHz

    Please find the Memory dump that was created.!Avn-ZwAvVqbcgRgHZ3fR6t_W-XGx

    We have Arcserve running on this server and we're suspecting that it is conflicting with McAfee software.

    Really appreciate any help in advance. 

    čtvrtek 31. května 2018 13:36

Všechny reakce

  • Hi,

    According to the memory dump you provided, it said that the issue could be caused by 

    ntkrnlmp.exe ( nt!SeQuerySecurityDescriptorInfo+3b5 ).

    You could uninstall the McAfee software to check. As you said, they may create incompatibilities.


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact

    pátek 1. června 2018 7:06
  • Hi CW903.

    The 0x0000001E (KMODE_EXCEPTION_NOT_HANDLED) bug check indicates that a kernel-mode program generated an exception which the error handler did not catch; the value "ffffffffc0000005" of the first parameter indicates that a memory access violation occurred and it is confirmed by the following line in the .DMP file

    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

    If you know/suspect that one installed software is causing any conflict in the system, try disabling (or removing) it and check if the system works fine again.


    Luigi Bruno

    pátek 1. června 2018 7:43