blue screen--we have a Windows serve 2008 R2 and some times got a blue screen. and below is the dump file please help us to analysis it (Network Steve Forum)

blue screen--we have a Windows serve 2008 R2 and some times got a blue screen. and below is the dump file please help us to analysis it

Microsoft (R) Windows Debugger Version 6.3.9600.17237 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [D:\SyngoPlaza\Minidump_pid_6584_20150814-025517.dmp\Minidump_pid_6584_20150814-025517.dmp]
User Mini Dump File with Full Memory: Only application data is available

WARNING: Whitespace at end of path element
Error: Empty Path.
Symbol search path is: SRV*C:\websymbols*http://msdl.microsoft.com/download/symbols

Executable search path is:
Windows 7 Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Machine Name:
Debug session time: Fri Aug 14 02:55:18.000 2015 (UTC + 8:00)
System Uptime: 4 days 4:24:54.890
Process Uptime: 0 days 0:40:04.000
................................................................
................................................................
....................
Loading unloaded module list
.........................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(19b8.11fc): CLR exception - code e0434f4d (first/second chance not available)
ntdll!NtGetContextThread+0xa:
00000000`775e1f8a c3 ret
0:016> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*** WARNING: Unable to verify checksum for mscorlib.ni.dll
GetUrlPageData2 (WinHttp) failed: 12002.

FAULTING_IP:
KERNELBASE!RaiseException+39
000007fe`fd6b940d 4881c4c8000000 add rsp,0C8h

EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000007fefd6b940d (KERNELBASE!RaiseException+0x0000000000000039)
ExceptionCode: e0434f4d (CLR exception)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: ffffffff80131014

CONTEXT: 0000000000000000 -- (.cxr 0x0;r)
rax=000000000000057f rbx=00000000000004d0 rcx=000000000667bd08
rdx=fffffffffb7a4d78 rsi=0000000000000005 rdi=0000000000f58b28
rip=00000000775e1f8a rsp=000000000667b738 rbp=000000000667c750
r8=000000000000001c r9=0000000000000b28 r10=0000000000000000
r11=000000000667bcf0 r12=0000000000f58a68 r13=000000000b8f0080
r14=00000000800704c7 r15=0000000000100000
iopl=0 nv up ei pl nz na pe nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
ntdll!NtGetContextThread+0xa:
00000000`775e1f8a c3 ret

DEFAULT_BUCKET_ID: WRONG_SYMBOLS

PROCESS_NAME: w3wp.exe

ERROR_CODE: (NTSTATUS) 0xe0434f4d - <Unable to get error code text>

EXCEPTION_CODE: (NTSTATUS) 0xe0434f4d - <Unable to get error code text>

EXCEPTION_PARAMETER1: ffffffff80131014

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

APP: w3wp.exe

ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre

MANAGED_STACK: !dumpstack -EE
No export dumpstack found

PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS

BUGCHECK_STR: APPLICATION_FAULT_WRONG_SYMBOLS_CLR_EXCEPTION

LAST_CONTROL_TRANSFER: from 000007fef9bcffb3 to 000007fefd6b940d

STACK_TEXT:
00000000`0667eb30 000007fe`f9bcffb3 : 00000000`029d8040 00000000`0667ef68 00000000`0667ec50 00000000`029d8040 : KERNELBASE!RaiseException+0x39
00000000`0667ec00 000007fe`f9f27477 : 00000001`800a80e0 00000000`00000000 000007fe`00000000 000007fe`00000001 : mscorwks!RaiseTheExceptionInternalOnly+0x2ff
00000000`0667ecf0 000007fe`f9f29656 : 00002026`00000001 00000000`00000000 0000d538`0df85a7a 00000000`0667ee10 : mscorwks!RaiseTheException+0x57
00000000`0667ed20 000007fe`f9fac525 : 00000000`0667ef68 00000000`0667f188 00000000`00000000 00000000`029d8040 : mscorwks!BStrFromString+0x66
00000000`0667ed50 000007fe`f9fac53b : 00000001`7f94fdc0 00000000`0667f188 00000000`029d8040 00000000`00000000 : mscorwks!RealCOMPlusThrow+0x35
00000000`0667edc0 000007fe`f9f91cd5 : 00000000`0667ee10 00000000`0667f188 00000000`0667ef68 00000000`0667ee60 : mscorwks!RealCOMPlusThrow+0xb
00000000`0667edf0 000007fe`f9fccb18 : 00000000`0667ef68 00000000`00000000 00000000`00000000 00000000`00000000 : mscorwks!Thread::RaiseCrossContextExceptionHelper+0xa5
00000000`0667eee0 000007fe`f9e70698 : 00000000`0292ffe0 00000000`0667ff20 00000000`00000000 00000000`029d8040 : mscorwks!Thread::RaiseCrossContextException+0x88
00000000`0667f0f0 000007fe`f9bf5a61 : 00000000`00000001 00000000`01467301 00000002`00000000 000007fe`f9b9096e : mscorwks! ?? ::FNODOBFM::`string'+0x5b438
00000000`0667f260 000007fe`f9bdba45 : 00000000`00000000 00000000`00000000 00000000`029d8040 00000000`0667f3e0 : mscorwks!CClosedHashEx<CCustAttrHashKey,CCustAttrHash>::Hash+0x55
00000000`0667f2b0 000007fe`f9ad35b5 : 00000000`00000000 00000000`029d8040 00000000`0667f320 00000000`0667f380 : mscorwks!SVR::gc_heap::make_heap_segment+0x155
00000000`0667f380 000007fe`f9c405e9 : 00000000`0667f3e0 ffffffff`ffffffff 00000000`029d8040 00000000`0667da30 : mscorwks!EEToProfilerExceptionInterfaceWrapper::ExceptionCatcherEnter+0x4d
00000000`0667f3c0 000007fe`f9bfffbb : 00000000`029d8040 00000000`00000000 00000000`00000001 00000000`00000017 : mscorwks!ZapNibbleMap::GetSize+0x55
00000000`0667f420 000007fe`f9bf8164 : 00000002`00000000 00000000`00473900 00000000`029d8040 00000000`0667f498 : mscorwks!ThreadNative::KickOffThread+0xd3
00000000`0667f500 00000000`774859ed : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : mscorwks!Thread::intermediateThreadProc+0x78
00000000`0667ff50 00000000`775bc541 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`0667ff80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d

FOLLOWUP_IP:
mscorwks!BStrFromString+66
000007fe`f9f29656 cc int 3

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: mscorwks!BStrFromString+66

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: mscorwks

IMAGE_NAME: mscorwks.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 4ca2b7e1

STACK_COMMAND: ~16s; .ecxr ; kb

FAILURE_BUCKET_ID: WRONG_SYMBOLS_e0434f4d_mscorwks.dll!BStrFromString

BUCKET_ID: X64_APPLICATION_FAULT_WRONG_SYMBOLS_CLR_EXCEPTION_mscorwks!BStrFromString+66

ANALYSIS_SOURCE: UM

FAILURE_ID_HASH_STRING: um:wrong_symbols_e0434f4d_mscorwks.dll!bstrfromstring

FAILURE_ID_HASH: {a9178cff-9ee3-b02d-2d69-1d6d60ca3d60}

Followup: MachineOwner
---------

0:016> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

GetUrlPageData2 (WinHttp) failed: 12002.

FAULTING_IP:
KERNELBASE!RaiseException+39
000007fe`fd6b940d 4881c4c8000000 add rsp,0C8h

EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000007fefd6b940d (KERNELBASE!RaiseException+0x0000000000000039)
ExceptionCode: e0434f4d (CLR exception)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: ffffffff80131014

CONTEXT: 0000000000000000 -- (.cxr 0x0;r)
rax=000000000000057f rbx=00000000000004d0 rcx=000000000667bd08
rdx=fffffffffb7a4d78 rsi=0000000000000005 rdi=0000000000f58b28
rip=00000000775e1f8a rsp=000000000667b738 rbp=000000000667c750
r8=000000000000001c r9=0000000000000b28 r10=0000000000000000
r11=000000000667bcf0 r12=0000000000f58a68 r13=000000000b8f0080
r14=00000000800704c7 r15=0000000000100000
iopl=0 nv up ei pl nz na pe nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
ntdll!NtGetContextThread+0xa:
00000000`775e1f8a c3 ret

DEFAULT_BUCKET_ID: WRONG_SYMBOLS

PROCESS_NAME: w3wp.exe

ERROR_CODE: (NTSTATUS) 0xe0434f4d - <Unable to get error code text>

EXCEPTION_CODE: (NTSTATUS) 0xe0434f4d - <Unable to get error code text>

EXCEPTION_PARAMETER1: ffffffff80131014

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

APP: w3wp.exe

ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre

MANAGED_STACK: !dumpstack -EE
No export dumpstack found

PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS

BUGCHECK_STR: APPLICATION_FAULT_WRONG_SYMBOLS_CLR_EXCEPTION

LAST_CONTROL_TRANSFER: from 000007fef9bcffb3 to 000007fefd6b940d

STACK_TEXT:
00000000`0667eb30 000007fe`f9bcffb3 : 00000000`029d8040 00000000`0667ef68 00000000`0667ec50 00000000`029d8040 : KERNELBASE!RaiseException+0x39
00000000`0667ec00 000007fe`f9f27477 : 00000001`800a80e0 00000000`00000000 000007fe`00000000 000007fe`00000001 : mscorwks!RaiseTheExceptionInternalOnly+0x2ff
00000000`0667ecf0 000007fe`f9f29656 : 00002026`00000001 00000000`00000000 0000d538`0df85a7a 00000000`0667ee10 : mscorwks!RaiseTheException+0x57
00000000`0667ed20 000007fe`f9fac525 : 00000000`0667ef68 00000000`0667f188 00000000`00000000 00000000`029d8040 : mscorwks!BStrFromString+0x66
00000000`0667ed50 000007fe`f9fac53b : 00000001`7f94fdc0 00000000`0667f188 00000000`029d8040 00000000`00000000 : mscorwks!RealCOMPlusThrow+0x35
00000000`0667edc0 000007fe`f9f91cd5 : 00000000`0667ee10 00000000`0667f188 00000000`0667ef68 00000000`0667ee60 : mscorwks!RealCOMPlusThrow+0xb
00000000`0667edf0 000007fe`f9fccb18 : 00000000`0667ef68 00000000`00000000 00000000`00000000 00000000`00000000 : mscorwks!Thread::RaiseCrossContextExceptionHelper+0xa5
00000000`0667eee0 000007fe`f9e70698 : 00000000`0292ffe0 00000000`0667ff20 00000000`00000000 00000000`029d8040 : mscorwks!Thread::RaiseCrossContextException+0x88
00000000`0667f0f0 000007fe`f9bf5a61 : 00000000`00000001 00000000`01467301 00000002`00000000 000007fe`f9b9096e : mscorwks! ?? ::FNODOBFM::`string'+0x5b438
00000000`0667f260 000007fe`f9bdba45 : 00000000`00000000 00000000`00000000 00000000`029d8040 00000000`0667f3e0 : mscorwks!CClosedHashEx<CCustAttrHashKey,CCustAttrHash>::Hash+0x55
00000000`0667f2b0 000007fe`f9ad35b5 : 00000000`00000000 00000000`029d8040 00000000`0667f320 00000000`0667f380 : mscorwks!SVR::gc_heap::make_heap_segment+0x155
00000000`0667f380 000007fe`f9c405e9 : 00000000`0667f3e0 ffffffff`ffffffff 00000000`029d8040 00000000`0667da30 : mscorwks!EEToProfilerExceptionInterfaceWrapper::ExceptionCatcherEnter+0x4d
00000000`0667f3c0 000007fe`f9bfffbb : 00000000`029d8040 00000000`00000000 00000000`00000001 00000000`00000017 : mscorwks!ZapNibbleMap::GetSize+0x55
00000000`0667f420 000007fe`f9bf8164 : 00000002`00000000 00000000`00473900 00000000`029d8040 00000000`0667f498 : mscorwks!ThreadNative::KickOffThread+0xd3
00000000`0667f500 00000000`774859ed : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : mscorwks!Thread::intermediateThreadProc+0x78
00000000`0667ff50 00000000`775bc541 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`0667ff80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d

FOLLOWUP_IP:
mscorwks!BStrFromString+66
000007fe`f9f29656 cc int 3

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: mscorwks!BStrFromString+66

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: mscorwks

IMAGE_NAME: mscorwks.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 4ca2b7e1

STACK_COMMAND: ~16s; .ecxr ; kb

FAILURE_BUCKET_ID: WRONG_SYMBOLS_e0434f4d_mscorwks.dll!BStrFromString

BUCKET_ID: X64_APPLICATION_FAULT_WRONG_SYMBOLS_CLR_EXCEPTION_mscorwks!BStrFromString+66

ANALYSIS_SOURCE: UM

FAILURE_ID_HASH_STRING: um:wrong_symbols_e0434f4d_mscorwks.dll!bstrfromstring

FAILURE_ID_HASH: {a9178cff-9ee3-b02d-2d69-1d6d60ca3d60}

Followup: MachineOwner
---------

Moved by Torsten [MVP]MVP Tuesday, August 18, 2015 5:52 AM

August 18th, 2015 5:45am

This topic is archived. No further replies will be accepted.