Windows 10: BSOD Exchange Server

  1.    08 Jan 2018 #1

    BSOD Exchange Server


    Got a BSOD on an Exchange server today, Windows 2008 R2. I was just looking around the exchange management console and the machine disconnected me, I went into VMWare, opened the console and it had BSOD on me. I managed to run the minidump file in windbg and get the following. I have never really had to look through a DMP file before so I don't really understand what I am looking at here. Any advice?

    Code:
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck FC, {fffff880009c5f38, 80000000022f2963, fffff88009738ea0, 2}
    
    Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+3b8cc )
    
    Followup:     MachineOwner
    ---------
    
    1: kd> !analyze -v
    
    
    
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
    An attempt was made to execute non-executable memory.  The guilty driver
    is on the stack trace (and is typically the current instruction pointer).
    When possible, the guilty driver's name (Unicode string) is printed on
    the bugcheck screen and saved in KiBugCheckDriver.
    Arguments:
    Arg1: fffff880009c5f38, Virtual address for the attempted execute.
    Arg2: 80000000022f2963, PTE contents.
    Arg3: fffff88009738ea0, (reserved)
    Arg4: 0000000000000002, (reserved)
    
    Debugging Details:
    ------------------
    
    
    DUMP_CLASS: 1
    
    DUMP_QUALIFIER: 400
    
    BUILD_VERSION_STRING:  7601.23677.amd64fre.win7sp1_ldr.170209-0600
    
    SYSTEM_MANUFACTURER:  VMware, Inc.
    
    VIRTUAL_MACHINE:  VMware
    
    SYSTEM_PRODUCT_NAME:  VMware Virtual Platform
    
    SYSTEM_VERSION:  None
    
    BIOS_VENDOR:  Phoenix Technologies LTD
    
    BIOS_VERSION:  6.00
    
    BIOS_DATE:  07/30/2013
    
    BASEBOARD_MANUFACTURER:  Intel Corporation
    
    BASEBOARD_PRODUCT:  440BX Desktop Reference Platform
    
    BASEBOARD_VERSION:  None
    
    DUMP_TYPE:  2
    
    BUGCHECK_P1: fffff880009c5f38
    
    BUGCHECK_P2: 80000000022f2963
    
    BUGCHECK_P3: fffff88009738ea0
    
    BUGCHECK_P4: 2
    
    CPU_COUNT: 2
    
    CPU_MHZ: a28
    
    CPU_VENDOR:  GenuineIntel
    
    CPU_FAMILY: 6
    
    CPU_MODEL: 2d
    
    CPU_STEPPING: 2
    
    CPU_MICROCODE: 6,2d,2,0 (F,M,S,R)  SIG: 416'00000000 (cache) 416'00000000 (init)
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER
    
    BUGCHECK_STR:  0xFC
    
    PROCESS_NAME:  mmc.exe
    
    CURRENT_IRQL:  0
    
    ANALYSIS_SESSION_HOST:  IPS-IT-LT-09
    
    ANALYSIS_SESSION_TIME:  01-08-2018 14:13:40.0069
    
    ANALYSIS_VERSION: 10.0.16299.91 x86fre
    
    TRAP_FRAME:  fffff88009738ea0 -- (.trap 0xfffff88009738ea0)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffff900c221d700 rbx=0000000000000000 rcx=0000000000000000
    rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff800018b8400 rsp=fffff88009739030 rbp=fffff88009739d05
     r8=fffff8000184b000  r9=0000000000000000 r10=fffffffffffffffd
    r11=fffff880009bf101 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up di ng nz na pe nc
    nt!KiPageFault:
    fffff800`018b8400 55              push    rbp
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff80001938136 to fffff800018ba440
    
    STACK_TEXT:  
    fffff880`09738d38 fffff800`01938136 : 00000000`000000fc fffff880`009c5f38 80000000`022f2963 fffff880`09738ea0 : nt!KeBugCheckEx
    fffff880`09738d40 fffff800`018b856e : 00000000`00000008 fffff880`009c5f38 00000010`008c0a00 fffffa80`7e8a8d80 : nt! ?? ::FNODOBFM::`string'+0x3b8cc
    fffff880`09738ea0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault+0x16e
    fffff880`09739030 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739060 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739090 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097390c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097390f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739120 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739150 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739180 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097391b0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097391e0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739210 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739240 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739270 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097392a0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097392d0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739300 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739330 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739360 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739390 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097393c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097393f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739420 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739450 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739480 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097394b0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097394e0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739510 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739540 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739570 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097395a0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097395d0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739600 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739630 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739660 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739690 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097396c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097396f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739720 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739750 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739780 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097397b0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097397e0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739810 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739840 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739870 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097398a0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097398d0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739900 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739930 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739960 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739990 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097399c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`097399f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739a20 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739a50 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739a80 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
    fffff880`09739ab0 fffff800`018b8400 : 00000000`00000010 fffff960`001c7ae0 00000000`00000010 00000000`00010282 : nt!KiPageFault
    fffff880`09739ae0 fffff960`001c7ae0 : 00000000`0000ff00 fffff960`000f7b51 00000000`0000000a 00000000`0000306c : nt!KiPageFault
    fffff880`09739b10 fffff960`001c7b78 : 00000000`00000000 ffffffff`9c080527 fffff900`c0be8c00 fffff960`002643c0 : win32k!GreAcquireSemaphore+0x1c
    fffff880`09739b40 fffff960`000e64f7 : fffff880`09739d08 fffff960`000e606d 00000000`00000000 fffffa80`00000000 : win32k!GreAcquireHmgrSemaphore+0x10
    fffff880`09739b70 fffff960`000e7bc6 : fffff880`09739d18 fffff880`09739d10 fffff880`09739d40 fffff880`09739f08 : win32k!HmgInsertObject+0x4f
    fffff880`09739bc0 fffff960`000bc758 : fffff880`00000000 00000000`00000000 00000000`02220000 00000000`00000000 : win32k!SURFMEM::bCreateDIB+0x792
    fffff880`09739cb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!GreCreateDIBitmapReal+0x548
    
    
    THREAD_SHA1_HASH_MOD_FUNC:  ab2d763cc9803ad6f9698fa98400d4eaf56ce9af
    
    THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  e9c6e9f27e6f4bf6e1a6ddbfc531a53d7506563c
    
    THREAD_SHA1_HASH_MOD:  aa80c53405f90a3f2d07160345d02132c204b91e
    
    FOLLOWUP_IP: 
    nt! ?? ::FNODOBFM::`string'+3b8cc
    fffff800`01938136 cc              int     3
    
    FAULT_INSTR_CODE:  4901b2cc
    
    SYMBOL_STACK_INDEX:  1
    
    SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+3b8cc
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: nt
    
    IMAGE_NAME:  ntkrnlmp.exe
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  589c915d
    
    IMAGE_VERSION:  6.1.7601.23677
    
    STACK_COMMAND:  .thread ; .cxr ; kb
    
    FAILURE_BUCKET_ID:  X64_0xFC_nt!_??_::FNODOBFM::_string_+3b8cc
    
    BUCKET_ID:  X64_0xFC_nt!_??_::FNODOBFM::_string_+3b8cc
    
    PRIMARY_PROBLEM_CLASS:  X64_0xFC_nt!_??_::FNODOBFM::_string_+3b8cc
    
    TARGET_TIME:  2018-01-08T13:31:15.000Z
    
    OSBUILD:  7601
    
    OSSERVICEPACK:  1000
    
    SERVICEPACK_NUMBER: 0
    
    OS_REVISION: 0
    
    SUITE_MASK:  272
    
    PRODUCT_TYPE:  3
    
    OSPLATFORM_TYPE:  x64
    
    OSNAME:  Windows 7
    
    OSEDITION:  Windows 7 Server (Service Pack 1) TerminalServer SingleUserTS
    
    OS_LOCALE:  
    
    USER_LCID:  0
    
    OSBUILD_TIMESTAMP:  2017-02-09 15:57:17
    
    BUILDDATESTAMP_STR:  170209-0600
    
    BUILDLAB_STR:  win7sp1_ldr
    
    BUILDOSVER_STR:  6.1.7601.23677.amd64fre.win7sp1_ldr.170209-0600
    
    ANALYSIS_SESSION_ELAPSED_TIME:  6a0
    
    ANALYSIS_SOURCE:  KM
    
    FAILURE_ID_HASH_STRING:  km:x64_0xfc_nt!_??_::fnodobfm::_string_+3b8cc
    
    FAILURE_ID_HASH:  {df1919c4-4780-0541-a786-cbc2df619a49}
    
    Followup:     MachineOwner
    ---------
    
    1: kd> .trap 0xfffff88009738ea0
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffff900c221d700 rbx=0000000000000000 rcx=0000000000000000
    rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff800018b8400 rsp=fffff88009739030 rbp=fffff88009739d05
     r8=fffff8000184b000  r9=0000000000000000 r10=fffffffffffffffd
    r11=fffff880009bf101 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up di ng nz na pe nc
    nt!KiPageFault:
    fffff800`018b8400 55              push    rbp
    Last edited by Brink; 08 Jan 2018 at 09:34. Reason: code box
      My ComputerSystem Spec


  2. Posts : 3,147
    64bit Win 10 Pro ver 1709 Build 16299.248 and W10 Insider Build 17101 and 17604
       11 Jan 2018 #2

    Hello Jporter297,

    Sorry for the delay in a response. This is probably because there is very little information to be extracted from the WinDBG analysis - no guilty driver was detected.

    You will probably need to wait and see if it repeats and try and post a set of logfiles for us to explore.
      My ComputersSystem Spec


 

Related Threads
Exchange Server 2013 files in Browsers and Email
Need osttopst converter for Exchange Server 2013 files. Old converters do not work with new 2013 format. I want to convert new format .ost files in .pst files because Microsoft Domain controller is not available.
Solved Crash on a server Exchange 2003 in Browsers and Email
Hi guys! We had a crash on a server Exchange 2003. After that we made a copy of the mdbdata. Of course we reinstalled it. Now we're trying to mount the mailbox store (Priv1.edb 5 GB) but we receive this error: The database files in this storage...
I have experience with MS Exchange Server 2013 for two years. But today I have seen - Corrupted header information, when I opened program. How did it happen? What to do?
Exchange Support For Windows Server 2016 Source: https://blogs.technet.microsoft.com/rmilne/2016/05/16/exchange-support-for-windows-server-2016/
Source: Coming soon: A first look at Exchange Server 2016 - Exchange Team Blog - Site Home - TechNet Blogs
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 16:25.
Find Us