Windows 8 and 8.1 Forums


Domain Controller BSOD'ing all of a sudden

  1. #1


    Posts : 2
    Windows

    ESXi 5.0.x and Server 2012 causing bugcheck 109 BSOD


    Getting a CRITICAL_STRUCTURE_CORRUPTION.

    Diag file attached

    Windbg is not super helpful...



    Microsoft (R) Windows Debugger Version 6.3.9600.17298 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.




    Loading Dump File [\\sadvm1\c$\Windows\MEMORY.DMP]
    Kernel Bitmap Dump File: Only kernel address space is available




    ************* Symbol Path validation summary **************
    Response Time (ms) Location
    Deferred SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
    Symbol search path is: SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows 8 Kernel Version 9600 MP (4 procs) Free x64
    Product: LanManNt, suite: TerminalServer DataCenter SingleUserTS
    Built by: 9600.17328.amd64fre.winblue_r3.140827-1500
    Machine Name:
    Kernel base = 0xfffff803`ee207000 PsLoadedModuleList = 0xfffff803`ee4dd370
    Debug session time: Tue Jan 13 08:21:09.262 2015 (UTC - 7:00)
    System Uptime: 0 days 0:31:18.165
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .....
    Loading User Symbols


    Loading unloaded module list
    ....
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************


    Use !analyze -v to get detailed debugging information.


    BugCheck 109, {a3a01f5a49ec84f0, b3b72be09c6c8a8b, 2c0000103, 7}


    Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )


    Followup: MachineOwner
    ---------


    2: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************


    CRITICAL_STRUCTURE_CORRUPTION (109)
    This bugcheck is generated when the kernel detects that critical kernel code or
    data have been corrupted. There are generally three causes for a corruption:
    1) A driver has inadvertently or deliberately modified critical kernel code
    or data. See Kernel patch protection for x64-based operating systems
    2) A developer attempted to set a normal kernel breakpoint using a kernel
    debugger that was not attached when the system was booted. Normal breakpoints,
    "bp", can only be set if the debugger is attached at boot time. Hardware
    breakpoints, "ba", can be set at any time.
    3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
    Arguments:
    Arg1: a3a01f5a49ec84f0, Reserved
    Arg2: b3b72be09c6c8a8b, Reserved
    Arg3: 00000002c0000103, Failure type dependent information
    Arg4: 0000000000000007, Type of corrupted region, can be
    0 : A generic data region
    1 : Modification of a function or .pdata
    2 : A processor IDT
    3 : A processor GDT
    4 : Type 1 process list corruption
    5 : Type 2 process list corruption
    6 : Debug routine modification
    7 : Critical MSR modification


    Debugging Details:
    ------------------




    PG_MISMATCH: 1


    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT


    BUGCHECK_STR: 0x109


    PROCESS_NAME: System


    CURRENT_IRQL: 2


    ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre


    STACK_TEXT:
    ffffd001`b95951c8 00000000`00000000 : 00000000`00000109 a3a01f5a`49ec84f0 b3b72be0`9c6c8a8b 00000002`c0000103 : nt!KeBugCheckEx




    STACK_COMMAND: kb


    SYMBOL_NAME: ANALYSIS_INCONCLUSIVE


    FOLLOWUP_NAME: MachineOwner


    MODULE_NAME: Unknown_Module


    IMAGE_NAME: Unknown_Image


    DEBUG_FLR_IMAGE_TIMESTAMP: 0


    IMAGE_VERSION:


    BUCKET_ID: BAD_STACK


    FAILURE_BUCKET_ID: BAD_STACK


    ANALYSIS_SOURCE: KM


    FAILURE_ID_HASH_STRING: km:bad_stack


    FAILURE_ID_HASH: {75814664-faf6-4b70-bbc7-dc592132ecdd}


    Followup: MachineOwner
    ---------

    This is a virtual machine in a vSphere environment.

    Thanks folks!
    Last edited by BoomSchtick; 14 Jan 2015 at 21:07.

      My System SpecsSystem Spec

  2. #2


    Posts : 2,480
    Windows 10 Pro x64


    Update your Intel Ethernet drivers.
    Code:
    E1G6032E.sys Tue Mar 23 22:08:16 2010  (4BA92DC0) 
    Intel Ethernet 
    http://www.carrona.org/drivers/driver.php?id=E1G6032E.sys 
    
    vmci.sys Tue May 1 03:14:27 2012  (4F9F38F3) 
    VMware 
    http://www.carrona.org/drivers/driver.php?id=vmci.sys 
    
    vmmouse.sys Mon Jun 4 11:34:25 2012  (4FCC8121) 
    
    vmmouse.sys -  this driver hasn't been added to the DRT as of this run. Please search  Google/Bing for the driver if additional information is needed.  
    
    vm3dmp.sys Wed Jun 13 11:42:02 2012 (4FD8606A) 
    
    vm3dmp.sys - this driver hasn't been  added to the DRT as of this run. Please search Google/Bing for the driver if  additional information is needed. 
    
    vsock.sys Sat Sep 29 07:01:05  2012 (50668091) 
    VMware vSockets Service 
    http://www.carrona.org/drivers/driver.php?id=vsock.sys 
    
    vmmemctl.sys Sat Nov 17 16:43:40  2012 (50A7B0AC) 
    VMware server memory controller - digitally signed 
    http://www.carrona.org/drivers/driver.php?id=vmmemctl.sys 
    
    dump_LSI_SAS.sys Thu Mar 28  18:42:34 2013 (5154810A) 
    
    dump_LSI_SAS.sys - this driver hasn't been added to the DRT  as of this run. Please search Google/Bing for the driver if additional  information is needed. 
    
    lsi_sas.sys Thu Mar 28 18:42:34 2013  (5154810A) 
    LSI SAS driver 
    http://www.carrona.org/drivers/driver.php?id=lsi_sas.sys 
    
    intelppm.sys Thu Aug 22 10:46:35  2013 (5215CFEB) 
    Intel Processor driver 
    http://www.carrona.org/drivers/driver.php?id=intelppm.sys 
    
    dfsrro.sys Thu Aug 22 13:39:34  2013 (5215F876) 
    
    dfsrro.sys - this driver hasn't been added to the DRT as of  this run. Please search Google/Bing for the driver if additional information is  needed. 
    
    intelide.sys Thu Aug 22 13:40:03 2013 (5215F893)  
    Intel IDE storage driver 
    http://www.carrona.org/drivers/driver.php?id=intelide.sys 
    
    
    
    Debug session time: Tue  Jan 13 16:21:09.262 2015 (UTC + 1:00) 
    Loading Dump File  [C:\Users\Mihael\SysnativeBSODApps\011315-6859-01.dmp] 
    Built by:  9600.17328.amd64fre.winblue_r3.140827-1500 
    System Uptime: 0 days 0:31:18.165  
    Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE ) 
    BugCheck  109, {a3a01f5a49ec84f0, b3b72be09c6c8a8b, 2c0000103, 7} 
    BugCheck Info: CRITICAL_STRUCTURE_CORRUPTION  (109) 
    Bugcheck code 00000109 
    Arguments: 
    Arg1: a3a01f5a49ec84f0,  Reserved 
    Arg2: b3b72be09c6c8a8b, Reserved 
    Arg3: 00000002c0000103,  Failure type dependent information 
    Arg4: 0000000000000007, Type of corrupted  region, can be 
    0 : A generic data region 
    1 : Modification of a function  or .pdata 
    2 : A processor IDT 
    3 : A processor GDT 
    4 : Type 1 process  list corruption 
    5 : Type 2 process list corruption 
    6 : Debug routine  modification 
    7 : Critical MSR modification 
    BUGCHECK_STR: 0x109  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER 
    PROCESS_NAME: System  
    FAILURE_BUCKET_ID: BAD_STACK 
    MaxSpeed: 2400 
    CurrentSpeed: 2399  
    BiosVersion = 6.00 
    BiosReleaseDate = 07/12/2011 
    SystemManufacturer =  VMware, Inc. 
    SystemProductName = VMware Virtual Platform  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Tue Jan 13 15:48:24.095 2015 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\011315-4078-02.dmp] 
    Built by:  9600.17328.amd64fre.winblue_r3.140827-1500 
    System Uptime: 0 days 1:03:52.569  
    Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE ) 
    BugCheck  109, {a3a01f5a3328cb9c, b3b72be085a8d127, 2c0000103, 7} 
    BugCheck Info: CRITICAL_STRUCTURE_CORRUPTION  (109) 
    Bugcheck code 00000109 
    Arguments: 
    Arg1: a3a01f5a3328cb9c,  Reserved 
    Arg2: b3b72be085a8d127, Reserved 
    Arg3: 00000002c0000103,  Failure type dependent information 
    Arg4: 0000000000000007, Type of corrupted  region, can be 
    0 : A generic data region 
    1 : Modification of a function  or .pdata 
    2 : A processor IDT 
    3 : A processor GDT 
    4 : Type 1 process  list corruption 
    5 : Type 2 process list corruption 
    6 : Debug routine  modification 
    7 : Critical MSR modification 
    BUGCHECK_STR: 0x109  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER 
    PROCESS_NAME: System  
    FAILURE_BUCKET_ID: BAD_STACK 
    MaxSpeed: 2400 
    CurrentSpeed: 2399  
    BiosVersion = 6.00 
    BiosReleaseDate = 07/12/2011 
    SystemManufacturer =  VMware, Inc. 
    SystemProductName = VMware Virtual Platform  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Tue Jan 13 14:45:04.355 2015 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\011315-4578-01.dmp] 
    Built by:  9600.17328.amd64fre.winblue_r3.140827-1500 
    System Uptime: 0 days 0:06:17.012  
    Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE ) 
    BugCheck  109, {a3a01f5a3988c52a, b3b72be08c08c725, c0000103, 7} 
    BugCheck Info: CRITICAL_STRUCTURE_CORRUPTION  (109) 
    Bugcheck code 00000109 
    Arguments: 
    Arg1: a3a01f5a3988c52a,  Reserved 
    Arg2: b3b72be08c08c725, Reserved 
    Arg3: 00000000c0000103,  Failure type dependent information 
    Arg4: 0000000000000007, Type of corrupted  region, can be 
    0 : A generic data region 
    1 : Modification of a function  or .pdata 
    2 : A processor IDT 
    3 : A processor GDT 
    4 : Type 1 process  list corruption 
    5 : Type 2 process list corruption 
    6 : Debug routine  modification 
    7 : Critical MSR modification 
    BUGCHECK_STR: 0x109  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER 
    FAILURE_BUCKET_ID: BAD_STACK  
    MaxSpeed: 2400 
    CurrentSpeed: 2399 
    BiosVersion = 6.00  
    BiosReleaseDate = 07/12/2011 
    SystemManufacturer = VMware, Inc.  
    SystemProductName = VMware Virtual Platform  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Tue Jan 13 14:37:21.811 2015 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\011315-4765-01.dmp] 
    Built by:  9600.17328.amd64fre.winblue_r3.140827-1500 
    System Uptime: 0 days 0:04:21.579  
    Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE ) 
    BugCheck  109, {a3a01f5a3cad05f1, b3b72be08f2d0b7c, 2c0000103, 7} 
    BugCheck Info: CRITICAL_STRUCTURE_CORRUPTION  (109) 
    Bugcheck code 00000109 
    Arguments: 
    Arg1: a3a01f5a3cad05f1,  Reserved 
    Arg2: b3b72be08f2d0b7c, Reserved 
    Arg3: 00000002c0000103,  Failure type dependent information 
    Arg4: 0000000000000007, Type of corrupted  region, can be 
    0 : A generic data region 
    1 : Modification of a function  or .pdata 
    2 : A processor IDT 
    3 : A processor GDT 
    4 : Type 1 process  list corruption 
    5 : Type 2 process list corruption 
    6 : Debug routine  modification 
    7 : Critical MSR modification 
    BUGCHECK_STR: 0x109  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER 
    PROCESS_NAME: System  
    FAILURE_BUCKET_ID: BAD_STACK 
    MaxSpeed: 2400 
    CurrentSpeed: 2399  
    BiosVersion = 6.00 
    BiosReleaseDate = 07/12/2011 
    SystemManufacturer =  VMware, Inc. 
    SystemProductName = VMware Virtual Platform  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Tue Jan 13 14:29:30.239 2015 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\011315-4234-01.dmp] 
    Built by:  9600.17328.amd64fre.winblue_r3.140827-1500 
    System Uptime: 0 days 3:48:47.881  
    Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE ) 
    BugCheck  109, {a3a00f5a824f65ac, b3b71be0d4cf6b37, 2c0000103, 7} 
    BugCheck Info: CRITICAL_STRUCTURE_CORRUPTION  (109) 
    Bugcheck code 00000109 
    Arguments: 
    Arg1: a3a00f5a824f65ac,  Reserved 
    Arg2: b3b71be0d4cf6b37, Reserved 
    Arg3: 00000002c0000103,  Failure type dependent information 
    Arg4: 0000000000000007, Type of corrupted  region, can be 
    0 : A generic data region 
    1 : Modification of a function  or .pdata 
    2 : A processor IDT 
    3 : A processor GDT 
    4 : Type 1 process  list corruption 
    5 : Type 2 process list corruption 
    6 : Debug routine  modification 
    7 : Critical MSR modification 
    BUGCHECK_STR: 0x109  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER 
    PROCESS_NAME: csrss.exe  
    FAILURE_BUCKET_ID: BAD_STACK 
    MaxSpeed: 2400 
    CurrentSpeed: 2399  
    BiosVersion = 6.00 
    BiosReleaseDate = 07/12/2011 
    SystemManufacturer =  VMware, Inc. 
    SystemProductName = VMware Virtual Platform  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Tue Jan 13 10:39:13.883 2015 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\011315-4562-01.dmp] 
    Built by:  9600.17328.amd64fre.winblue_r3.140827-1500 
    System Uptime: 0 days 0:04:01.010  
    Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE ) 
    BugCheck  109, {a3a01f58c7cc8929, b3b72bdf1a4c907c, 3c0000103, 7} 
    BugCheck Info: CRITICAL_STRUCTURE_CORRUPTION  (109) 
    Bugcheck code 00000109 
    Arguments: 
    Arg1: a3a01f58c7cc8929,  Reserved 
    Arg2: b3b72bdf1a4c907c, Reserved 
    Arg3: 00000003c0000103,  Failure type dependent information 
    Arg4: 0000000000000007, Type of corrupted  region, can be 
    0 : A generic data region 
    1 : Modification of a function  or .pdata 
    2 : A processor IDT 
    3 : A processor GDT 
    4 : Type 1 process  list corruption 
    5 : Type 2 process list corruption 
    6 : Debug routine  modification 
    7 : Critical MSR modification 
    BUGCHECK_STR: 0x109  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER 
    PROCESS_NAME: System  
    FAILURE_BUCKET_ID: BAD_STACK 
    MaxSpeed: 2400 
    CurrentSpeed: 2399  
    BiosVersion = 6.00 
    BiosReleaseDate = 07/12/2011 
    SystemManufacturer =  VMware, Inc. 
    SystemProductName = VMware Virtual Platform  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Tue Jan 13 10:33:44.616 2015 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\011315-4171-01.dmp] 
    Built by:  9600.17328.amd64fre.winblue_r3.140827-1500 
    System Uptime: 0 days 1:30:00.175  
    Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE ) 
    BugCheck  109, {a3a01f58fdee152c, b3b72bdf506e1727, c0000103, 7} 
    BugCheck Info: CRITICAL_STRUCTURE_CORRUPTION  (109) 
    Bugcheck code 00000109 
    Arguments: 
    Arg1: a3a01f58fdee152c,  Reserved 
    Arg2: b3b72bdf506e1727, Reserved 
    Arg3: 00000000c0000103,  Failure type dependent information 
    Arg4: 0000000000000007, Type of corrupted  region, can be 
    0 : A generic data region 
    1 : Modification of a function  or .pdata 
    2 : A processor IDT 
    3 : A processor GDT 
    4 : Type 1 process  list corruption 
    5 : Type 2 process list corruption 
    6 : Debug routine  modification 
    7 : Critical MSR modification 
    BUGCHECK_STR: 0x109  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER 
    PROCESS_NAME: csrss.exe  
    FAILURE_BUCKET_ID: BAD_STACK 
    MaxSpeed: 2400 
    CurrentSpeed: 2399  
    BiosVersion = 6.00 
    BiosReleaseDate = 07/12/2011 
    SystemManufacturer =  VMware, Inc. 
    SystemProductName = VMware Virtual Platform  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Tue Jan 13 09:02:17.298 2015 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\011315-4062-01.dmp] 
    Built by:  9600.17328.amd64fre.winblue_r3.140827-1500 
    System Uptime: 0 days 1:20:05.796  
    Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE ) 
    BugCheck  109, {a3a01f5993cd1a04, b3b72bdfe64d1f9f, 2c0000103, 7} 
    BugCheck Info: CRITICAL_STRUCTURE_CORRUPTION  (109) 
    Bugcheck code 00000109 
    Arguments: 
    Arg1: a3a01f5993cd1a04,  Reserved 
    Arg2: b3b72bdfe64d1f9f, Reserved 
    Arg3: 00000002c0000103,  Failure type dependent information 
    Arg4: 0000000000000007, Type of corrupted  region, can be 
    0 : A generic data region 
    1 : Modification of a function  or .pdata 
    2 : A processor IDT 
    3 : A processor GDT 
    4 : Type 1 process  list corruption 
    5 : Type 2 process list corruption 
    6 : Debug routine  modification 
    7 : Critical MSR modification 
    BUGCHECK_STR: 0x109  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER 
    PROCESS_NAME: System  
    FAILURE_BUCKET_ID: BAD_STACK 
    MaxSpeed: 2400 
    CurrentSpeed: 2399  
    BiosVersion = 6.00 
    BiosReleaseDate = 07/12/2011 
    SystemManufacturer =  VMware, Inc. 
    SystemProductName = VMware Virtual Platform  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    
    
    
    
    --- E O J --- 2015 Jan 14 13:16:58 PM _88-dbug Copyright  2012 Sysnative Forums 
    --- E O J --- 2015 Jan 14 13:16:58 PM _88-dbug  Copyright 2012 Sysnative Forums 
    --- E O J --- 2015 Jan 14 13:16:58 PM  _88-dbug Copyright 2012 Sysnative Forums
      My System SpecsSystem Spec

  3. #3


    Posts : 2
    Windows


    It turned out to be a documented bug in ESXi 5.0.x.

    Here's a link to the KB.

    VMware KB: Windows 8.1/Windows Server 2012R2 virtual machines fail with a blue screen and report the error: CRITICAL_STRUCTURE_CORRUPTION

    Thanks for your efforts though
      My System SpecsSystem Spec

Domain Controller BSOD'ing all of a sudden
Related Threads
Solved Sudden black screen no BSOD. in General Support
Hi everyone I was just checking email on my Win 8.1 Pro machine and got a sudden black screen no BSOD. I know my MSI P35 board is a bit old but thought my Video card or monitor had gone. PSU is old but only a couple of years I think and it is a Corsair modular 500w. I know this is a one off but...
Solved Activation all of a sudden?? in Windows Updates & Activation
All of a sudden Windows 8.1 is asking me to activate my product when it is a purchased version of Windows 8 from when Windows 8 first came out. I've been using it this entire time, even right from when 8.1 first was updated and it never asked me for an activation until tonight. I have no idea...
I also get: irql_not_less_or_equal sometimes. My computer: Aspire V3 - 772G NVIDIA GeForce GT 750M I have no clue what causes this - I use Firefox as browser, and I run no other large programs. The BSOD comes suddenly, machine freezes for about 2 seconds first. Please help - It's so...
I am at my wits end, any help would be appreciated. I have two computers: LOFT mapped network drives M, N, O BEDROOM mapped network drives P, Q, R
This is confusing. I've set up numerous computers on our domain before so I'm pretty well acquainted with the procedure. So we upgraded a computer in our domain from XP to 8 so my manager could see if our software would work in 8. That much I got done just fine (put simply, it does). The...
Windows sudden freeze in General Support
Hi guys..need help for this...my laptop jut bought 2weeks ago..recently I found it will freeze if I'm not using it for around 15min ...and I can't do anything...I can move my mouse but can't click ...the only choice is to hard reset...I have updated everything to latest...need expert to help me...
Sudden shutdowns in Gaming
I have downloaded some games from the store such as suduko, solitaire, mah jong, etc. on my PC. After playing a game for 10 minutes or so, the computer abruptly shuts down. I can play suduko puzzles I have put in Excel 2013 With no problems. It just seems to be the programs I downloaded from the...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook