Hi,
habe ein Problem mit einem Terminalserver Windows 2008 SP2 Enterprise.
Dieser stürzt gelegentlich ab ca. 1 mal alle 2 Monate.
Kurze Info zum Server:
Windows Server SP2 Enterprise 32 bit
14 GB Arbeitsspeicher
Intel Xeon E5540 @ 2.53 GHz
Ereignissanzeige :
Der vom Benutzer ??\Administrator angegebene Grund für das unerwartete Herunterfahren des Computers: Anderer Grund (nicht geplant)
Begründung: 0xa000000
Fehler-ID:
Fehlercheckzeichenfolge:
Kommentar:
Hier ein Auszug aus der .DMP Datei.
7: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: 92202130
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
OVERLAPPED_MODULE: Address regions for 'mouhid' and 'USBD.SYS' overlap
BUGCHECK_STR: 0x7f_8
TSS: 00000028 -- (.tss 0x28)
eax=67452301 ebx=efcdab89 ecx=98badcfe edx=10325476 esi=b6959073 edi=c3d2e1f0
eip=82c50b4c esp=9a13afe0 ebp=9a13b1b8 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
ksecdd!SHATransformP3+0x2c:
82c50b4c 893424 mov dword ptr [esp],esi ss:0010:9a13afe0=????????
Resetting default scope
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: OUTLOOK.EXE
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 82c4993b to 82c50b4c
STACK_TEXT:
9a13b12c 82c4993b cbd95e80 9a13b1b8 00000014 ksecdd!SHATransformP3+0x2c
9a13b150 82c49b57 cbd95e40 9a13b1b8 00000001 ksecdd!A_SHAUpdate+0xdb
9a13b1fc 82c9529b cbd95e40 b9dba020 00000014 ksecdd!HMACSHAInit+0x137
9a13b218 82c94d64 e9438e90 cbd95e24 cbd95e2c ksecdd!MSCryptCreateHash+0xfe
9a13b264 82c455ec cbd95e18 9a13b2a0 00000000 ksecdd!BCryptCreateHash+0x2aa
9a13b2b8 82c45766 c6ed1e40 b9dba008 00000017 ksecdd!Tls1ComputeMac+0x94
9a13b308 82c44236 c6ed1e40 b9dba008 8e13c19e ksecdd!TlsEncryptPacket+0xfe
9a13b338 82c7acb2 c6ed1e40 b9dba008 8e13c19e ksecdd!SPSslEncryptPacket+0x8c
9a13b36c 82c3cfae c6e450d8 b02b1610 8e13c19e ksecdd!SslEncryptPacket+0x4a
9a13b3d4 82c74793 b5c86370 00000000 00000000 ksecdd!SslSealMessageStream+0x24e
9a13b3f0 82c97470 b5c86370 00000000 9a13b474 ksecdd!SslSealMessage+0x33
9a13b408 b653c168 defe19c0 00000000 9a13b474 ksecdd!EncryptMessage+0x34
9a13b420 b653668f a656ac88 00000000 9a13b474 tssecsrv!SpEncryptMessage+0x25
9a13b480 b6536d6a 8e13c199 9a13b4bc 00000000 tssecsrv!CSecurityFilter::EncryptData+0xbd
9a13b498 b6535dfd 8e13c199 9a13b4bc a6469560 tssecsrv!CSecurityFilter::FilterOutgoingData+0x48
9a13b4c0 b65357a7 9a13b4d0 a6469550 b6538280 tssecsrv!CFilter::FilterOutgoingData+0x8d
9a13b4e4 983d0837 8f2db898 9a13b550 9a13b550 tssecsrv!ScrRawWrite+0x43
9a13b500 983d0918 a6469550 00000002 9a13b550 termdd!_IcaCallSd+0x37
9a13b51c b655a76c 9b7b1604 00000002 9a13b550 termdd!IcaCallNextDriver+0x4a
9a13b530 b654965c a95074a8 9b7b1604 9a13b550 RDPWD!FinalSendOutBuf+0x12
9a13b564 b6548dc1 000036f8 00000001 00000000 RDPWD!NM_SendData+0xd9
9a13b59c b654a07e 000036f8 00000001 00000000 RDPWD!SM_SendData+0x94
9a13b5c4 b65423e4 c1c5a008 8e13c19c 000036f8 RDPWD!ShareClass::SC_SendFastPathData+0x2a
9a13b5e8 b6551fd0 000016b9 9a13b67c 9a13b6d4 RDPWD!ShareClass::SC_GetSpaceInPackage+0x44
9a13b62c b6552484 0000245a fdc00000 0035d540 RDPWD!ShareClass::SDGSendSDARectWorker+0x19f
9a13b680 b6551222 c1c5a008 fdc00000 0035d540 RDPWD!ShareClass::SDGSendSDARect+0xbb
9a13b82c b654d06a 00000014 fdc00000 0035d540 RDPWD!ShareClass::SDG_SendScreenDataArea+0x95
9a13b86c b654bd71 00000000 fdc00000 0035d540 RDPWD!ShareClass::UP_SendUpdates+0x143
9a13b8b8 b6544cb5 c1c5a008 9a13ba98 9a13bad0 RDPWD!ShareClass::DCS_TimeToDoStuff+0xcf
9a13b8e0 b6543194 a76f8330 c1c5a008 9b7b15f0 RDPWD!WDLIB_DDOutputAvailable+0x18f
9a13b8f4 983d0837 a76f8330 9a13b97c a652f1c8 RDPWD!WDSYS_Ioctl+0x1e
9a13b910 983d0ced 9b7b15f0 00000005 9a13b97c termdd!_IcaCallSd+0x37
9a13b930 983d1598 a652f1c0 00000005 9a13b97c termdd!_IcaCallStack+0x57
9a13b958 983d20ee ed411848 00000005 9a13b97c termdd!IcaCallDriver+0x11e
9a13b994 983ce1b6 ed411848 ed95ab18 ed95ab88 termdd!IcaDeviceControlVirtual+0x23e
9a13b9b8 983cefe9 ed411848 ed95ab18 ed95ab88 termdd!IcaDeviceControlChannel+0x21a
9a13b9e8 983cf142 ed95ab18 ed95ab88 a6550bb0 termdd!IcaDeviceControl+0x59
9a13ba00 81c8a976 8a198030 ed95ab18 ed95ab18 termdd!IcaDispatch+0x130
9a13ba18 a3c42014 ffadb010 00000000 9a13ba68 nt!IofCallDriver+0x63
9a13ba2c a3c09991 a6550bb0 0038144f 9a13ba98 win32k!CtxDeviceIoControlFile+0x7e
9a13ba68 a3d611ba a6550bb0 0038144f 9a13ba98 win32k!EngFileIoControl+0x31
9a13baec a3d6d0b5 fe238010 00000001 ffadb060 RDPDD!SCH_DDOutputAvailable+0x12c
9a13bb10 a3d6ec18 fe238010 ffadb010 000006a0 RDPDD!OA_AllocOrderMem+0x3d
9a13bb60 a3d6f69e fe238010 ffaec868 fe2350a0 RDPDD!SBCCacheBits+0x110
9a13bbf0 a3d6a066 fe238010 9a13bfc0 0113bfa4 RDPDD!SBC_CacheBitmapTile+0x1aa
9a13bf3c a3d6a28a fe238010 0000000d 00000080 RDPDD!OETileBitBltOrder+0x162
9a13bf64 a3d63a02 00000000 9a13bfc8 9a13bfa4 RDPDD!OEEncodeMemBlt+0x100
9a13c01c a3d63fb7 fe238010 fe163018 00000000 RDPDD!DrvBitBlt+0x3ce
9a13c050 a3b7bbdd fe170a20 fe163018 9a13cb14 RDPDD!DrvCopyBits+0x37
9a13c098 a3b7b0dc a3d63f80 9a13c140 fe170a20 win32k!OffCopyBits+0x7d
9a13c14c a3b7afd7 fe170a20 fe163018 00000000 win32k!SpBitBlt+0xfc
9a13c180 a3b71f48 fe170a20 fe163018 9a13cb14 win32k!SpCopyBits+0x27
9a13c840 a3b5d95d fe170a20 9a13c9f8 fe4bca60 win32k!EngTextOut+0x8ce
9a13c88c a3b5d6ee a3b7167a 9a13c910 fe170a20 win32k!OffTextOut+0x71
9a13c920 a3b5ccd3 fe170a20 9a13c9f8 00000000 win32k!SpTextOut+0xd0
9a13cc28 a3b1a358 9a13cde8 ffbf06d0 ffbf072c win32k!GreExtTextOutWLocked+0x1002
9a13cca4 a3b65a1f 00000000 00000000 00001000 win32k!GreBatchTextOut+0x1e5
9a13ce10 81e4bbee 25629f16 01010111 00000002 win32k!NtGdiFlushUserBatch+0x122
9a13ce60 a3b2c38b 00000048 9a13cf04 00000084 nt!KeUserModeCallback+0x176
9a13d120 a3bde0ee 01010111 00000011 00000001 win32k!xxxClientExtTextOutW+0x15a
9a13d378 a3bdebaa fe633550 fe637054 01010111 win32k!xxxDrawMenuItemText+0xc9
9a13d468 a3bee7aa 01010111 00000011 00000001 win32k!xxxRealDrawMenuItem+0x805
9a13d518 a3b0c057 01010111 0110007e 9a13d560 win32k!xxxDrawState+0x1c9
9a13d588 a3b0c487 01010111 fe633550 00c8d0d4 win32k!xxxDrawMenuItem+0x408
9a13d600 a3bdbe1a 01010111 00000001 fe60dfc8 win32k!xxxMenuDraw+0x238
9a13d6c8 a3ba4eb3 fe633c48 00000318 01010111 win32k!xxxRealMenuWindowProc+0xe68
9a13d6fc a3b57507 fe633c48 00000318 01010111 win32k!xxxMenuWindowProc+0xda
9a13d73c a3b5759a fe633c48 00000318 01010111 win32k!xxxSendMessageTimeout+0x1d4
9a13d764 a3ba6918 fe633c48 00000318 01010111 win32k!xxxSendMessage+0x1d
9a13d7ac a3b5890f 00000001 00000000 0000000e win32k!xxxDWPPrint+0x1ea
9a13d828 a3b37e34 fe633c48 00000317 01010111 win32k!xxxRealDefWindowProc+0x135f
9a13d84c a3bdbf21 fe633c48 00000317 01010111 win32k!xxxDefWindowProc+0x109
9a13d918 a3ba4eb3 fe633c48 00000317 01010111 win32k!xxxRealMenuWindowProc+0xf6f
9a13d94c a3b57507 fe633c48 00000317 01010111 win32k!xxxMenuWindowProc+0xda
9a13d98c a3b5759a fe633c48 00000317 01010111 win32k!xxxSendMessageTimeout+0x1d4
STACK_COMMAND: .tss 0x28 ; kb
FOLLOWUP_IP:
ksecdd!SHATransformP3+2c
82c50b4c 893424 mov dword ptr [esp],esi
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: ksecdd!SHATransformP3+2c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ksecdd
IMAGE_NAME: ksecdd.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a3643ed
FAILURE_BUCKET_ID: 0x7f_8_ksecdd!SHATransformP3+2c
BUCKET_ID: 0x7f_8_ksecdd!SHATransformP3+2c
Followup: MachineOwner
Bedanke mich jetzt schon mal für eure Hilfe.
