Windows server 2012 Blue screen Error

Question

Windows server 2012 Blue screen Error

Anonymous

Hi All,

one of my office file server suddenly stopped responding.then it gave a BSOD message and auto restart. it created an automatic dump file in windows folder as usual. so i did some search in the internet and i follow up below link and debug it using the windows debug kit tools. (windbg.exe)

Link : https://www.bleepingcomputer.com/forums/t/176011/how-to-receive-help-diagnosing-blue-screens-and-windows-crashes/

All generated information is listed below.

\\\\\\\\\\\\\\\\\\\\\

Microsoft (R) Windows Debugger Version 10.0.15063.468 AMD64

Loading Dump File [E:\Dump\MEMORY.DMP]

Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.

************* Symbol Path validation summary **************

Response Time (ms) Location

Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:

**************************************************************************

THIS DUMP FILE IS PARTIALLY CORRUPT.

KdDebuggerDataBlock is not present or unreadable.

**************************************************************************

Unable to read KLDR_DATA_TABLE_ENTRY at ffffffff`ffffffff - NTSTATUS 0xC0000147

"nt" was not found in the image list.

Debugger will attempt to load "nt" at given base 00000000`00000000.

Please provide the full image name, including the extension (i.e. kernel32.dll)

for more reliable results.Base address and size overrides can be given as

.reload <image.ext>=<base>,<size>.

Unable to add module at 00000000`00000000

WARNING: .reload failed, module list may be incomplete

**************************************************************************

THIS DUMP FILE IS PARTIALLY CORRUPT.

KdDebuggerDataBlock is not present or unreadable.

**************************************************************************

KdDebuggerData.KernBase < SystemRangeStart

Windows 8.1 Kernel Version 9600 MP (16 procs) Free x64

Product: Server, suite: TerminalServer SingleUserTS

Machine Name:

Kernel base = 0x0000000000000000 PsLoadedModuleList = 0xfffff802690e5630

Debug session time: Mon Sep 4 12:11:26.645 2017 (UTC + 5:30)

System Uptime: 79 days 8:47:23.201

**************************************************************************

THIS DUMP FILE IS PARTIALLY CORRUPT.

KdDebuggerDataBlock is not present or unreadable.

**************************************************************************

Unable to read KLDR_DATA_TABLE_ENTRY at ffffffff`ffffffff - NTSTATUS 0xC0000147

"nt" was not found in the image list.

Debugger will attempt to load "nt" at given base 00000000`00000000.

Please provide the full image name, including the extension (i.e. kernel32.dll)

for more reliable results.Base address and size overrides can be given as

.reload <image.ext>=<base>,<size>.

Unable to add module at 00000000`00000000

WARNING: .reload failed, module list may be incomplete

**************************************************************************

THIS DUMP FILE IS PARTIALLY CORRUPT.

KdDebuggerDataBlock is not present or unreadable.

**************************************************************************

KdDebuggerData.KernBase < SystemRangeStart

Loading Kernel Symbols

Unable to read KLDR_DATA_TABLE_ENTRY at ffffffff`ffffffff - NTSTATUS 0xC0000147

ReadControl failed - kernel symbols must be loaded first

WARNING: .reload failed, module list may be incomplete

GetContextState failed, 0xD0000147

CS descriptor lookup failed

GetContextState failed, 0xD0000147

Unable to get program counter

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 133, {0, 501, 500, 0}

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

***** Debugger could not find nt in module list, module list might be corrupt, error 0x80070057.

ReadControl failed - kernel symbols must be loaded first

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

ReadControl failed - kernel symbols must be loaded first

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner

ReadControl failed - kernel symbols must be loaded first

WARNING: Unable to reset page directories

GetContextState failed, 0xD0000147

?: kd> !analyze -v

GetContextState failed, 0xD0000147

Unable to get program counter

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

DPC_WATCHDOG_VIOLATION (133)

The DPC watchdog detected a prolonged run time at an IRQL of DISPATCH_LEVEL

or above.

Arguments:

Arg1: 0000000000000000, A single DPC or ISR exceeded its time allotment. The offending

component can usually be identified with a stack trace.

Arg2: 0000000000000501, The DPC time count (in ticks).

Arg3: 0000000000000500, The DPC time allotment (in ticks).

Arg4: 0000000000000000, cast to nt!DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK, which contains

additional information regarding this single DPC timeout

Debugging Details:

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

***** Debugger could not find nt in module list, module list might be corrupt, error 0x80070057.

ReadControl failed - kernel symbols must be loaded first

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

Unable to get current machine context, NTSTATUS 0xC0000147

GetContextState failed, 0xD0000147

GetContextState failed, 0xD000014

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous

Kindly post your query at:

https://social.technet.microsoft.com/Forums/

Server questions are best handled there.

0 comments

1 additional answer

Answer 1

Anonymous

Hi Sumit,

Thank you for the prompt feedback.

Lahiru Mendis

0 comments

Share via

Windows server 2012 Blue screen Error

1 additional answer