error dump on my pc server

Rievo Niemrod Efraim 0 Reputation points
2025-06-04T06:31:42.93+00:00

Hello

please help our server experiencing a blue screen and an error appears

as below

************* Preparing the environment for Debugger Extensions Gallery repositories **************
   ExtensionRepository : Implicit
   UseExperimentalFeatureForNugetShare : true
   AllowNugetExeUpdate : true
   NonInteractiveNuget : true
   AllowNugetMSCredentialProviderInstall : true
   AllowParallelInitializationOfLocalRepositories : true
   EnableRedirectToChakraJsProvider : false

   -- Configuring repositories
      ----> Repository : LocalInstalled, Enabled: true
      ----> Repository : UserExtensions, Enabled: true

>>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds

************* Waiting for Debugger Extensions Gallery to Initialize **************

>>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.453 seconds
   ----> Repository : UserExtensions, Enabled: true, Packages count: 0
   ----> Repository : LocalInstalled, Enabled: true, Packages count: 44

Microsoft (R) Windows Debugger Version 10.0.27829.1001 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\edp.rievo\Desktop\030325-30562-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*
Executable search path is: 
Windows 8.1 Kernel Version 9600 MP (8 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Edition build lab: 9600.18589.amd64fre.winblue_ltsb.170204-0600
Kernel base = 0xfffff803`bc073000 PsLoadedModuleList = 0xfffff803`bc346670
Debug session time: Mon Mar  3 16:07:59.210 2025 (UTC + 7:00)
System Uptime: 64 days 0:46:54.226
Loading Kernel Symbols
..

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

.............................................................
................................................................
..................................
Loading User Symbols

Loading unloaded module list
...........
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff803`bc1c12a0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffd000`9e2094e0=000000000000000a

Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,662 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Henry Mai 1,030 Reputation points
    2025-06-06T01:13:03.92+00:00

    Hello, I am Henry, I will help with this.

    This is the initial output from WinDbg loading your minidump. The most crucial information for analysis is missing, which is the output of the !analyze -v command.

    You've correctly loaded the dump file, and the debugger has identified it as a "Mini Kernel Dump File."

    Here's what I know so far:

    • OS: Windows 8.1 Kernel (likely Windows Server 2012 R2, given "Product: Server" and the build lab "winblue_ltsb")
    • Architecture: x64
    • Processors: 8
    • System Uptime: 64 days (long uptime can sometimes contribute to issues due to resource exhaustion or accumulated errors, but isn't a direct cause itself)
    • Debugger Ready: The debugger is loaded and symbols are being processed.
    • Last instruction before crash: nt!KeBugCheckEx was called. The value in rcx (the first argument to KeBugCheckEx) is 000000000000000a. This means the Bug Check Code was 0xA (or IRQL_NOT_LESS_OR_EQUAL).

    In the WinDbg command window (where you see kd>), type the following command and press Enter: User's image

    This command will perform an automated analysis of the dump file and provide:

    The Bug Check Code (which we already suspect is 0xA).

    • The Bug Check Parameters (Arg1, Arg2, Arg3, Arg4). For 0xA, these are:
      • Arg1: The memory address that was improperly referenced.
      • Arg2: The IRQL at the time of the fault.
      • Arg3: Type of access (0 = read, 1 = write).
      • Arg4: The instruction pointer (address of the instruction that referenced the bad memory).
    • A Probably Caused By line, which often points to a specific driver file (e.g., some_driver.sys). This is extremely helpful.
    • The Call Stack, showing the sequence of function calls that led to the crash.

    Also you can consider these general troubleshooting steps for your server (if it's still unstable):

    1. Recent Changes: Did this start happening after installing new software, updating drivers, or adding new hardware? If so, try rolling back those changes.
    2. Driver Updates: Check for updated drivers for your main hardware components, especially network, storage, and graphics (if applicable to a server).
    3. Windows Updates: Ensure your Windows Server 2012 R2 is fully updated.
    4. Hardware Diagnostics: Run memory tests (like MemTest86+) and check hard drive health (e.g., chkdsk /f /r from a recovery console, or vendor-specific tools).
    5. Event Viewer: Check the System and Application logs in Windows Event Viewer for any errors or warnings leading up to the BSOD times.

    Hope this can provide the right direction for your troubleshooting.


    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.