none
BSODing with MEMORY_MANAGEMENT (1a) in Windows Server 2008 R2 RRS feed

  • Question

  • Hey, I'm having some problems with BSODing on 6 of my Microsoft Windows Server 2008 R2 servers.

     

    I think it may have to do with my 2 GB page file on a systems that have 64 or 128 GB of memory (some of each). If anyone can advise me on this, I'd greatly appreciate it. Thanks.

     

    And it's not a hardware failure. Memory and drives have tested fine. Voltages and heat are not a problem, either.

     

    Here's what I'm getting from my dump file:

     

     

    Opened log file 'c:\debug_log.txt'

    22: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols

    Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols

    Expanded Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols

    22: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q

    Loading Kernel Symbols

    ...............................................................

    ................................................................

    .............................

    Loading User Symbols

    Loading unloaded module list

    ..........................

    *******************************************************************************

    *                                                                             *

    *                        Bugcheck Analysis                                    *

    *                                                                             *

    *******************************************************************************

     

    MEMORY_MANAGEMENT (1a)

        # Any other values for parameter 1 must be individually examined.

    Arguments:

    Arg1: 0000000000041201, The subtype of the bugcheck.

    Arg2: fffff68000002000

    Arg3: 000000007f87312b

    Arg4: fffffa80656a60b0

     

    Debugging Details:

    ------------------

     

     

    BUGCHECK_STR:  0x1a_41201

     

    CUSTOMER_CRASH_COUNT:  1

     

    DEFAULT_BUCKET_ID:  DRIVER_FAULT_SERVER_MINIDUMP

     

    PROCESS_NAME:  conhost.exe

     

    CURRENT_IRQL:  0

     

    LAST_CONTROL_TRANSFER:  from fffff800018df2de to fffff80001882c40

     

    STACK_TEXT:  

    fffff880`0a2ee9b8 fffff800`018df2de : 00000000`0000001a 00000000`00041201 fffff680`00002000 00000000`7f87312b : nt!KeBugCheckEx

    fffff880`0a2ee9c0 fffff800`0184e831 : 00000000`00000000 fffff880`00000000 00000000`00000000 00000000`7f87312b : nt! ?? ::FNODOBFM::`string'+0x14382

    fffff880`0a2eea00 fffff800`0184e4ca : fffffa80`656a60b0 fffffa80`6e7cf060 fffffa80`6e7cf060 00000000`00400000 : nt!MiQueryAddressState+0x2b1

    fffff880`0a2eea50 fffff800`01b5d724 : fffff880`00000004 00000000`00401000 fffffa80`656a60b0 00000000`00000000 : nt!MiQueryAddressSpan+0xaa

    fffff880`0a2eeac0 fffff800`01881ed3 : 00000000`000001f0 fffffa80`9f1fc2d0 fffff880`0a2eebc8 00000000`0024a738 : nt!NtQueryVirtualMemory+0x382

    fffff880`0a2eebb0 00000000`7740154a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13

    00000000`0024a718 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7740154a

     

     

    STACK_COMMAND:  kb

     

    FOLLOWUP_IP: 

    nt! ?? ::FNODOBFM::`string'+14382

    fffff800`018df2de cc              int     3

     

    SYMBOL_STACK_INDEX:  1

     

    SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+14382

     

    FOLLOWUP_NAME:  MachineOwner

     

    MODULE_NAME: nt

     

    IMAGE_NAME:  ntkrnlmp.exe

     

    DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

     

    FAILURE_BUCKET_ID:  X64_0x1a_41201_nt!_??_::FNODOBFM::_string_+14382

     

    BUCKET_ID:  X64_0x1a_41201_nt!_??_::FNODOBFM::_string_+14382

     

    Followup: MachineOwner

    ---------

     

    rax=fffffa80656a60b0 rbx=000000007f87312b rcx=000000000000001a

    rdx=0000000000041201 rsi=fffffa80656a60b0 rdi=fffffa80017e9590

    rip=fffff80001882c40 rsp=fffff8800a2ee9b8 rbp=0000000000000000

     r8=fffff68000002000  r9=000000007f87312b r10=fffff68000002000

    r11=0000000000000000 r12=fffff6fb7da00000 r13=fffff8800a2eeac0

    r14=fffff68000002000 r15=0000000000400000

    iopl=0         nv up ei ng nz ac po cy

    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000297

    nt!KeBugCheckEx:

    fffff800`01882c40 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`0a2ee9c0=000000000000001a

    Child-SP          RetAddr           : Args to Child                                                           : Call Site

    fffff880`0a2ee9b8 fffff800`018df2de : 00000000`0000001a 00000000`00041201 fffff680`00002000 00000000`7f87312b : nt!KeBugCheckEx

    fffff880`0a2ee9c0 fffff800`0184e831 : 00000000`00000000 fffff880`00000000 00000000`00000000 00000000`7f87312b : nt! ?? ::FNODOBFM::`string'+0x14382

    fffff880`0a2eea00 fffff800`0184e4ca : fffffa80`656a60b0 fffffa80`6e7cf060 fffffa80`6e7cf060 00000000`00400000 : nt!MiQueryAddressState+0x2b1

    fffff880`0a2eea50 fffff800`01b5d724 : fffff880`00000004 00000000`00401000 fffffa80`656a60b0 00000000`00000000 : nt!MiQueryAddressSpan+0xaa

    fffff880`0a2eeac0 fffff800`01881ed3 : 00000000`000001f0 fffffa80`9f1fc2d0 fffff880`0a2eebc8 00000000`0024a738 : nt!NtQueryVirtualMemory+0x382

    fffff880`0a2eebb0 00000000`7740154a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0a2eec20)

    00000000`0024a718 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7740154a

    start             end                 module name

    fffff800`01631000 fffff800`0163b000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)

    fffff800`01806000 fffff800`01def000   nt       ntkrnlmp.exe Wed Jun 22 22:53:23 2011 (4E02AAA3)

    fffff800`01def000 fffff800`01e38000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)

    fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)

    fffff880`00cc0000 fffff880`00cd8000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)

    fffff880`00ce4000 fffff880`00d33000   mcupdate mcupdate.dll Sat Nov 20 08:03:51 2010 (4CE7C737)

    fffff880`00d33000 fffff880`00d47000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)

    fffff880`00d47000 fffff880`00da5000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)

    fffff880`00da5000 fffff880`00dc8000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)

    fffff880`00dc8000 fffff880`00de0000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)

    fffff880`00de0000 fffff880`00dfe000   bowser   bowser.sys   Tue Feb 22 23:55:04 2011 (4D649328)

    fffff880`00e00000 fffff880`00e5e000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)

    fffff880`00e5e000 fffff880`00ebe000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)

    fffff880`00ec0000 fffff880`00fb3000   NDIS     NDIS.SYS     Sat Nov 20 04:23:30 2010 (4CE79392)

    fffff880`00fb3000 fffff880`00fcc000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)

    fffff880`00fcc000 fffff880`00fd8000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)

    fffff880`00fd8000 fffff880`00fe6000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)

    fffff880`00fe6000 fffff880`00ffb000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)

    fffff880`01000000 fffff880`0100e000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)

    fffff880`01014000 fffff880`010b8000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)

    fffff880`010b8000 fffff880`010c7000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)

    fffff880`010c7000 fffff880`0111e000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)

    fffff880`0111e000 fffff880`01127000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

    fffff880`01127000 fffff880`01131000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)

    fffff880`01131000 fffff880`01164000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)

    fffff880`01164000 fffff880`01171000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)

    fffff880`01171000 fffff880`0119b000   mpio     mpio.sys     Sat Nov 20 05:35:38 2010 (4CE7A47A)

    fffff880`0119b000 fffff880`011f5000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)

    fffff880`01200000 fffff880`01226000   msdsm    msdsm.sys    Sat Nov 20 05:35:34 2010 (4CE7A476)

    fffff880`01226000 fffff880`0122e000   lamclar  lamclar.sys  Wed Feb 03 14:47:13 2010 (4B69D2C1)

    fffff880`0122e000 fffff880`01236000   lamsymm  lamsymm.sys  Wed Feb 03 14:49:17 2010 (4B69D33D)

    fffff880`01236000 fffff880`01279000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)

    fffff880`01279000 fffff880`01296000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)

    fffff880`01296000 fffff880`012a3000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)

    fffff880`012a3000 fffff880`01336000   EmcpMpx  EmcpMpx.sys  Wed Jul 21 03:08:17 2010 (4C469CE1)

    fffff880`01336000 fffff880`0134b000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)

    fffff880`0134b000 fffff880`01359000   elxplus  elxplus.sys  Tue Nov 10 23:41:47 2009 (4AFA408B)

    fffff880`01359000 fffff880`01362000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)

    fffff880`01362000 fffff880`0136e000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)

    fffff880`0136e000 fffff880`01383000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)

    fffff880`01383000 fffff880`013df000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)

    fffff880`013df000 fffff880`013e6000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)

    fffff880`013e6000 fffff880`013f6000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)

    fffff880`01400000 fffff880`01415000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)

    fffff880`0141c000 fffff880`014b2000   EmcpBase EmcpBase.sys Tue Jul 27 03:09:34 2010 (4C4E862E)

    fffff880`014b2000 fffff880`014bc000   EmcpGpx  EmcpGpx.sys  Thu Jun 03 02:32:30 2010 (4C074C7E)

    fffff880`014bc000 fffff880`01544000   bxvbda   bxvbda.sys   Thu Jan 06 13:55:14 2011 (4D261012)

    fffff880`01544000 fffff880`0155e000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)

    fffff880`0155e000 fffff880`01567000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)

    fffff880`01567000 fffff880`01591000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)

    fffff880`01591000 fffff880`015dd000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)

    fffff880`015dd000 fffff880`015ef000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)

    fffff880`015ef000 fffff880`015fd000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)

    fffff880`01600000 fffff880`01684000   bxois    bxois.sys    Fri Dec 10 16:06:36 2010 (4D02965C)

    fffff880`01684000 fffff880`0168f000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)

    fffff880`0168f000 fffff880`016b0000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)

    fffff880`016b0000 fffff880`016ca000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)

    fffff880`016cc000 fffff880`01770000   elxstor  elxstor.sys  Fri Apr 22 18:27:27 2011 (4DB200CF)

    fffff880`01770000 fffff880`017d3000   storport storport.sys Sat Nov 20 05:35:02 2010 (4CE7A456)

    fffff880`017d3000 fffff880`017df000   megasas  megasas.sys  Mon May 18 21:09:46 2009 (4A1206DA)

    fffff880`017df000 fffff880`017ef000   EmcpDm   EmcpDm.sys   Wed Jul 21 03:03:26 2010 (4C469BBE)

    fffff880`017ef000 fffff880`017fe000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)

    fffff880`01800000 fffff880`0181b000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)

    fffff880`0181b000 fffff880`0184a000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)

    fffff880`0184a000 fffff880`01859000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)

    fffff880`0185b000 fffff880`019fe000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)

    fffff880`01a00000 fffff880`01a09000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)

    fffff880`01a09000 fffff880`01a17000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)

    fffff880`01a17000 fffff880`01a3c000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)

    fffff880`01a3c000 fffff880`01a4c000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)

    fffff880`01a4c000 fffff880`01a55000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)

    fffff880`01a55000 fffff880`01a5e000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)

    fffff880`01a5e000 fffff880`01a67000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)

    fffff880`01a67000 fffff880`01a72000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)

    fffff880`01a72000 fffff880`01a83000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)

    fffff880`01a83000 fffff880`01aa5000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)

    fffff880`01aa5000 fffff880`01ab2000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)

    fffff880`01ab2000 fffff880`01ad6000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)

    fffff880`01ad6000 fffff880`01af1000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)

    fffff880`01af1000 fffff880`01af9080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)

    fffff880`01afc000 fffff880`01b6e000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)

    fffff880`01b6e000 fffff880`01b7f000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)

    fffff880`01b7f000 fffff880`01b89000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)

    fffff880`01b89000 fffff880`01bb4000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)

    fffff880`01bb4000 fffff880`01bea000   SYMEVENT64x86 SYMEVENT64x86.SYS Thu Apr 15 21:32:19 2010 (4BC7BE23)

    fffff880`01bea000 fffff880`01bfe000   SRTSPX64 SRTSPX64.SYS Tue Jul 27 02:31:39 2010 (4C4E7D4B)

    fffff880`01c21000 fffff880`01e25000   tcpip    tcpip.sys    Wed Sep 28 23:43:04 2011 (4E83E948)

    fffff880`01e25000 fffff880`01e6f000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)

    fffff880`01e6f000 fffff880`01e7f000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)

    fffff880`01e7f000 fffff880`01ecb000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)

    fffff880`01ecb000 fffff880`01ed3000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)

    fffff880`01ed3000 fffff880`01ee5000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)

    fffff880`01ee5000 fffff880`01eee000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)

    fffff880`01eee000 fffff880`01ef5000   EmcpClass EmcpClass.sys Wed Feb 03 14:42:17 2010 (4B69D199)

    fffff880`01ef5000 fffff880`01f0b000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)

    fffff880`01f0b000 fffff880`01f3b000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)

    fffff880`01f3b000 fffff880`01f49000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)

    fffff880`01f49000 fffff880`01f53000   dump_storport dump_storport.sys Fri Apr 22 16:04:32 2011 (4DB1DF50)

    fffff880`01f53000 fffff880`01f5f000   dump_megasas dump_megasas.sys Mon May 18 21:09:46 2009 (4A1206DA)

    fffff880`01f5f000 fffff880`01f89000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)

    fffff880`01f89000 fffff880`01fff000   SRTSP64  SRTSP64.SYS  Tue Jul 27 02:31:18 2010 (4C4E7D36)

    fffff880`06203000 fffff880`063fb000   EX64     EX64.SYS     Fri Jul 29 09:15:11 2011 (4E32B25F)

    fffff880`06400000 fffff880`0640c000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)

    fffff880`0640c000 fffff880`06417000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)

    fffff880`06417000 fffff880`06423000   dcdbas64 dcdbas64.sys Thu Jun 11 13:44:04 2009 (4A314264)

    fffff880`06423000 fffff880`064ac000   afd      afd.sys      Sun Apr 24 22:33:58 2011 (4DB4DD96)

    fffff880`064ac000 fffff880`064f1000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)

    fffff880`064f1000 fffff880`064fa000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)

    fffff880`064fa000 fffff880`06520000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)

    fffff880`06520000 fffff880`0652f000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)

    fffff880`0652f000 fffff880`0654c000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)

    fffff880`0654c000 fffff880`06567000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)

    fffff880`06567000 fffff880`0657b000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)

    fffff880`0657b000 fffff880`065cc000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)

    fffff880`065cc000 fffff880`065d8000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)

    fffff880`065d8000 fffff880`065e3000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)

    fffff880`065e3000 fffff880`065f9000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)

    fffff880`06600000 fffff880`06656000   USBPORT  USBPORT.SYS  Sat Nov 20 05:44:00 2010 (4CE7A670)

    fffff880`06656000 fffff880`06667000   usbehci  usbehci.sys  Sat Nov 20 05:43:54 2010 (4CE7A66A)

    fffff880`06667000 fffff880`06675000   vgapnp   vgapnp.sys   Mon Jul 13 19:38:47 2009 (4A5BC587)

    fffff880`06675000 fffff880`06681000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)

    fffff880`06681000 fffff880`06699000   IPMIDrv  IPMIDrv.sys  Sat Nov 20 05:04:53 2010 (4CE79D45)

    fffff880`06699000 fffff880`066a9000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)

    fffff880`066a9000 fffff880`06722000   eeCtrl64 eeCtrl64.sys Fri Oct 21 21:18:28 2011 (4EA219E4)

    fffff880`06722000 fffff880`06748000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri Oct 21 21:18:29 2011 (4EA219E5)

    fffff880`06748000 fffff880`06757000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)

    fffff880`06757000 fffff880`06775000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)

    fffff880`06775000 fffff880`06786000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)

    fffff880`06786000 fffff880`0679c000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)

    fffff880`0679c000 fffff880`067a6000   errdev   errdev.sys   Mon Jul 13 19:31:04 2009 (4A5BC3B8)

    fffff880`067a6000 fffff880`067b0000   acpipmi  acpipmi.sys  Sat Nov 20 04:30:42 2010 (4CE79542)

    fffff880`067b0000 fffff880`067cb000   bxnd60a  bxnd60a.sys  Fri Feb 04 19:58:43 2011 (4D4CA0C3)

    fffff880`067cb000 fffff880`067d8000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)

    fffff880`067d8000 fffff880`067fa000   basp     basp.sys     Tue Dec 21 13:31:41 2010 (4D10F28D)

    fffff880`067fa000 fffff880`067fb480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)

    fffff880`067fc000 fffff880`067fdf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)

    fffff880`07a00000 fffff880`07aa6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)

    fffff880`07aa6000 fffff880`07ab1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)

    fffff880`07ab1000 fffff880`07ae2000   srvnet   srvnet.sys   Thu Apr 28 23:05:35 2011 (4DBA2AFF)

    fffff880`07ae2000 fffff880`07af4000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)

    fffff880`07afe000 fffff880`07b2b000   mrxsmb   mrxsmb.sys   Tue Apr 26 22:40:38 2011 (4DB78226)

    fffff880`07b2b000 fffff880`07b79000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)

    fffff880`07b79000 fffff880`07b9d000   mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)

    fffff880`07b9d000 fffff880`07bd6000   RDPWD    RDPWD.SYS    Sat Nov 20 06:04:37 2010 (4CE7AB45)

    fffff880`08420000 fffff880`08489000   srv2     srv2.sys     Thu Apr 28 23:05:46 2011 (4DBA2B0A)

    fffff880`08489000 fffff880`08521000   srv      srv.sys      Thu Apr 28 23:06:06 2011 (4DBA2B1E)

    fffff880`0853c000 fffff880`08572000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)

    fffff880`0858d000 fffff880`085bb000   rdpdr    rdpdr.sys    Sat Nov 20 06:06:41 2010 (4CE7ABC1)

    fffff880`085bb000 fffff880`085c6000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)

    fffff880`085c6000 fffff880`085d5000   tssecsrv tssecsrv.sys Sat Nov 20 06:04:09 2010 (4CE7AB29)

    fffff880`09e91000 fffff880`09eb1000   ENG64    ENG64.SYS    Fri Jul 29 09:17:51 2011 (4E32B2FF)

    fffff880`09ec8000 fffff880`09f91000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)

    fffff880`09f91000 fffff880`09f9c000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)

    fffff960`00030000 fffff960`00344000   win32k   win32k.sys   Wed Nov 23 23:51:38 2011 (4ECDCD5A)

    fffff960`00400000 fffff960`0041e000   dxg      dxg.sys      Mon Jul 13 19:38:28 2009 (4A5BC574)

    fffff960`00690000 fffff960`0069a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)

    fffff960`008d0000 fffff960`008d9000   framebuf framebuf.dll Mon Jul 13 19:38:47 2009 (4A5BC587)

     

    Unloaded modules:

    fffff880`09eb8000 fffff880`09ebf000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`09eb1000 fffff880`09eb8000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`09e71000 fffff880`09e91000   ENG64.SYS

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00020000

    fffff880`06201000 fffff880`063f9000   EX64.SYS

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  001F8000

    fffff880`063f9000 fffff880`06400000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`063f9000 fffff880`06400000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`09fb8000 fffff880`09fd8000   ENG64.SYS

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00020000

    fffff880`06200000 fffff880`063f8000   EX64.SYS

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  001F8000

    fffff880`09e00000 fffff880`09e71000   spsys.sys

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00071000

    fffff880`063f8000 fffff880`063ff000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`063f8000 fffff880`063ff000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`063f8000 fffff880`063ff000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`063f8000 fffff880`063ff000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`01c00000 fffff880`01c20000   ENG64.SYS

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00020000

    fffff880`06208000 fffff880`06400000   EX64.SYS

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  001F8000

    fffff880`09fb1000 fffff880`09fb8000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`09faa000 fffff880`09fb1000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`09fa3000 fffff880`09faa000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`09f9c000 fffff880`09fa3000   cfig50wnt.sy

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00007000

    fffff880`09e57000 fffff880`09ec8000   spsys.sys

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  00071000

    fffff880`08572000 fffff880`0858d000   USBSTOR.SYS

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  0001B000

    fffff880`08521000 fffff880`0853c000   USBSTOR.SYS

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  0001B000

    fffff880`01f3b000 fffff880`01f49000   crashdmp.sys

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  0000E000

    fffff880`01f49000 fffff880`01f53000   dump_storpor

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  0000A000

    fffff880`01f53000 fffff880`01f5f000   dump_megasas

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  0000C000

    fffff880`00cc0000 fffff880`00cdb000   sacdrv.sys

        Timestamp: unavailable (00000000)

        Checksum:  00000000

        ImageSize:  0001B000

    Closing open log file c:\debug_log.txt

     



    • Modifié stevenst6 mardi 17 janvier 2012 18:36 Added information
    mardi 17 janvier 2012 16:38

Réponses

  • Hi,

     

    Adding more memory generally tends to decrease the size of the page file needed, but sometimes page file is required by a specific application. Decreasing it improperly may cause unexpected problem. I suggest you enable the option "Automatically manage paging file size for all drives" for a test.

     

    Here’s an article which might be helpful for you:

     

    How to determine the appropriate page file size for 64-bit versions of Windows Server 2008 and or Windows 2008 R2

    http://support.microsoft.com/kb/2021748

     

    If you need further assistance, we may have to analyze memory dump file to narrow down the cause of this issue. Please understand forum is not the best place for analyzing dump and it’s suggested to contact Microsoft Customer Support Services (CSS) so that a dedicated Support Professional can help you on this issue.

     

    To obtain the phone numbers for specific technology request please take a look at the web site listed below.

    http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS

     

    If you are outside the US please see http://support.microsoft.com for regional support phone numbers.

     

    Regards,

    Bruce

    • Marqué comme réponse Bruce-Liu lundi 23 janvier 2012 02:14
    mercredi 18 janvier 2012 08:30

Toutes les réponses

  • Hello,

    Bug Check Code 0x1A: http://msdn.microsoft.com/en-us/library/windows/hardware/ff557391(v=vs.85).aspx

    I can not retrieve much information from the output of the debugger.

    For that, start by:

    • Updating all possible drivers
    • Running msconfig and disable all startup items / services except Microsoft ones
    • Disabling all security softwares that you have

    Once done, check results.

    If this does not help, use Microsoft Skydrive to upload dump files (c:\windows\minidumps).

    You can also contact Microsoft CSS for assistance.



    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. 

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer

    mardi 17 janvier 2012 20:41
  • Thanks for the reply. All drivers are up-to-date, this is a fresh install of Windows, with just the Page File adjusted down to 2 GB. This has happened to all 6 of my Windows servers once every couple months for the past few months, so I can't confirm anything to fix it in a short time frame.

    We have two pieces of security software which are necessary, and have never caused problems with identical machines in the same environment. Uninstalling isn't really an option.

    I really think this may be a result of the page file being too small. I'm really looking for more of someone who can confirm or deny that this may be what's going on in this particular circumstance, and that I'm heading in the right direction.

    mardi 17 janvier 2012 21:47
  • Hi,

     

    Adding more memory generally tends to decrease the size of the page file needed, but sometimes page file is required by a specific application. Decreasing it improperly may cause unexpected problem. I suggest you enable the option "Automatically manage paging file size for all drives" for a test.

     

    Here’s an article which might be helpful for you:

     

    How to determine the appropriate page file size for 64-bit versions of Windows Server 2008 and or Windows 2008 R2

    http://support.microsoft.com/kb/2021748

     

    If you need further assistance, we may have to analyze memory dump file to narrow down the cause of this issue. Please understand forum is not the best place for analyzing dump and it’s suggested to contact Microsoft Customer Support Services (CSS) so that a dedicated Support Professional can help you on this issue.

     

    To obtain the phone numbers for specific technology request please take a look at the web site listed below.

    http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS

     

    If you are outside the US please see http://support.microsoft.com for regional support phone numbers.

     

    Regards,

    Bruce

    • Marqué comme réponse Bruce-Liu lundi 23 janvier 2012 02:14
    mercredi 18 janvier 2012 08:30
  • Steven

    What make and model machines are these that are encountering the issue? One of my colleagues pointed me to this page since we found the value in your rbx and r9 registers [7f87312b] as a common memory overwrite sequence/signature found in some crashes reported by customers on Dell R910/R810 series machines we are investigating. Some of the customers found updates to BIOS, firmware and controllers and even Emulex drivers on the system.

    Thanks

    Suresh

    mercredi 1 février 2012 15:54
  • Suresh,

     

    These are Dell R910s as well. We are updating BIOS and firmwares, as well as our Emulex drivers. Interesting.

     

    Thanks,

    Tony

    • Proposé comme réponse Bhupinder S S mardi 17 juillet 2012 13:05
    • Non proposé comme réponse Bhupinder S S mardi 17 juillet 2012 13:05
    mercredi 1 février 2012 19:10