BSOD Exchange Server


  1. jporter297
    Posts : 1
    10
       New #1

    BSOD Exchange Server


    Got a BSOD on an Exchange server today, Windows 2008 R2. I was just looking around the exchange management console and the machine disconnected me, I went into VMWare, opened the console and it had BSOD on me. I managed to run the minidump file in windbg and get the following. I have never really had to look through a DMP file before so I don't really understand what I am looking at here. Any advice?

    Code:
    *******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck FC, {fffff880009c5f38, 80000000022f2963, fffff88009738ea0, 2}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+3b8cc )

Followup:     MachineOwner
---------

1: kd> !analyze -v



*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory.  The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff880009c5f38, Virtual address for the attempted execute.
Arg2: 80000000022f2963, PTE contents.
Arg3: fffff88009738ea0, (reserved)
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  7601.23677.amd64fre.win7sp1_ldr.170209-0600

SYSTEM_MANUFACTURER:  VMware, Inc.

VIRTUAL_MACHINE:  VMware

SYSTEM_PRODUCT_NAME:  VMware Virtual Platform

SYSTEM_VERSION:  None

BIOS_VENDOR:  Phoenix Technologies LTD

BIOS_VERSION:  6.00

BIOS_DATE:  07/30/2013

BASEBOARD_MANUFACTURER:  Intel Corporation

BASEBOARD_PRODUCT:  440BX Desktop Reference Platform

BASEBOARD_VERSION:  None

DUMP_TYPE:  2

BUGCHECK_P1: fffff880009c5f38

BUGCHECK_P2: 80000000022f2963

BUGCHECK_P3: fffff88009738ea0

BUGCHECK_P4: 2

CPU_COUNT: 2

CPU_MHZ: a28

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 2d

CPU_STEPPING: 2

CPU_MICROCODE: 6,2d,2,0 (F,M,S,R)  SIG: 416'00000000 (cache) 416'00000000 (init)

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER

BUGCHECK_STR:  0xFC

PROCESS_NAME:  mmc.exe

CURRENT_IRQL:  0

ANALYSIS_SESSION_HOST:  IPS-IT-LT-09

ANALYSIS_SESSION_TIME:  01-08-2018 14:13:40.0069

ANALYSIS_VERSION: 10.0.16299.91 x86fre

TRAP_FRAME:  fffff88009738ea0 -- (.trap 0xfffff88009738ea0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff900c221d700 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800018b8400 rsp=fffff88009739030 rbp=fffff88009739d05
 r8=fffff8000184b000  r9=0000000000000000 r10=fffffffffffffffd
r11=fffff880009bf101 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di ng nz na pe nc
nt!KiPageFault:
fffff800`018b8400 55              push    rbp
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80001938136 to fffff800018ba440

STACK_TEXT:  
fffff880`09738d38 fffff800`01938136 : 00000000`000000fc fffff880`009c5f38 80000000`022f2963 fffff880`09738ea0 : nt!KeBugCheckEx
fffff880`09738d40 fffff800`018b856e : 00000000`00000008 fffff880`009c5f38 00000010`008c0a00 fffffa80`7e8a8d80 : nt! ?? ::FNODOBFM::`string'+0x3b8cc
fffff880`09738ea0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault+0x16e
fffff880`09739030 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739060 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739090 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097390c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097390f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739120 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739150 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739180 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097391b0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097391e0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739210 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739240 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739270 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097392a0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097392d0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739300 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739330 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739360 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739390 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097393c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097393f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739420 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739450 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739480 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097394b0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097394e0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739510 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739540 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739570 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097395a0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097395d0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739600 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739630 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739660 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739690 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097396c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097396f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739720 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739750 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739780 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097397b0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097397e0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739810 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739840 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739870 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097398a0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097398d0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739900 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739930 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739960 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739990 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097399c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`097399f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739a20 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739a50 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739a80 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault
fffff880`09739ab0 fffff800`018b8400 : 00000000`00000010 fffff960`001c7ae0 00000000`00000010 00000000`00010282 : nt!KiPageFault
fffff880`09739ae0 fffff960`001c7ae0 : 00000000`0000ff00 fffff960`000f7b51 00000000`0000000a 00000000`0000306c : nt!KiPageFault
fffff880`09739b10 fffff960`001c7b78 : 00000000`00000000 ffffffff`9c080527 fffff900`c0be8c00 fffff960`002643c0 : win32k!GreAcquireSemaphore+0x1c
fffff880`09739b40 fffff960`000e64f7 : fffff880`09739d08 fffff960`000e606d 00000000`00000000 fffffa80`00000000 : win32k!GreAcquireHmgrSemaphore+0x10
fffff880`09739b70 fffff960`000e7bc6 : fffff880`09739d18 fffff880`09739d10 fffff880`09739d40 fffff880`09739f08 : win32k!HmgInsertObject+0x4f
fffff880`09739bc0 fffff960`000bc758 : fffff880`00000000 00000000`00000000 00000000`02220000 00000000`00000000 : win32k!SURFMEM::bCreateDIB+0x792
fffff880`09739cb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!GreCreateDIBitmapReal+0x548


THREAD_SHA1_HASH_MOD_FUNC:  ab2d763cc9803ad6f9698fa98400d4eaf56ce9af

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  e9c6e9f27e6f4bf6e1a6ddbfc531a53d7506563c

THREAD_SHA1_HASH_MOD:  aa80c53405f90a3f2d07160345d02132c204b91e

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+3b8cc
fffff800`01938136 cc              int     3

FAULT_INSTR_CODE:  4901b2cc

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+3b8cc

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  589c915d

IMAGE_VERSION:  6.1.7601.23677

STACK_COMMAND:  .thread ; .cxr ; kb

FAILURE_BUCKET_ID:  X64_0xFC_nt!_??_::FNODOBFM::_string_+3b8cc

BUCKET_ID:  X64_0xFC_nt!_??_::FNODOBFM::_string_+3b8cc

PRIMARY_PROBLEM_CLASS:  X64_0xFC_nt!_??_::FNODOBFM::_string_+3b8cc

TARGET_TIME:  2018-01-08T13:31:15.000Z

OSBUILD:  7601

OSSERVICEPACK:  1000

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  3

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 7

OSEDITION:  Windows 7 Server (Service Pack 1) TerminalServer SingleUserTS

OS_LOCALE:  

USER_LCID:  0

OSBUILD_TIMESTAMP:  2017-02-09 15:57:17

BUILDDATESTAMP_STR:  170209-0600

BUILDLAB_STR:  win7sp1_ldr

BUILDOSVER_STR:  6.1.7601.23677.amd64fre.win7sp1_ldr.170209-0600

ANALYSIS_SESSION_ELAPSED_TIME:  6a0

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0xfc_nt!_??_::fnodobfm::_string_+3b8cc

FAILURE_ID_HASH:  {df1919c4-4780-0541-a786-cbc2df619a49}

Followup:     MachineOwner
---------

1: kd> .trap 0xfffff88009738ea0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff900c221d700 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800018b8400 rsp=fffff88009739030 rbp=fffff88009739d05
 r8=fffff8000184b000  r9=0000000000000000 r10=fffffffffffffffd
r11=fffff880009bf101 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di ng nz na pe nc
nt!KiPageFault:
fffff800`018b8400 55              push    rbp
    Last edited by Brink; 08 Jan 2018 at 09:34. Reason: code box
      My Computer
    Quote Quote

  3. philc43
    Posts : 5,169
    64bit Win 10 Pro ver 21H2
       New #2

    Hello Jporter297,

    Sorry for the delay in a response. This is probably because there is very little information to be extracted from the WinDBG analysis - no guilty driver was detected.

    You will probably need to wait and see if it repeats and try and post a set of logfiles for us to explore.
      My Computers
    Quote Quote

 

  Related Discussions
Hoping someone may have an idea. My exchange server has been working fine for years and tonight suddenly it will not respond to anything. If i login locally the OWA works fine but remotely nothing. This to me is pointing at port 443 being...
Exchange Server 2013 files
in Browsers and Email

Need osttopst converter for Exchange Server 2013 files. Old converters do not work with new 2013 format. I want to convert new format .ost files in .pst files because Microsoft Domain controller is not available.
Crash on a server Exchange 2003
in Browsers and Email

Hi guys! We had a crash on a server Exchange 2003. After that we made a copy of the mdbdata. Of course we reinstalled it. Now we're trying to mount the mailbox store (Priv1.edb 5 GB) but we receive this error: The database files in this storage...
I have experience with MS Exchange Server 2013 for two years. But today I have seen - Corrupted header information, when I opened program. How did it happen? What to do?
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 23:43.
Find Us




Windows 10 Forums