Windows Server R2 server repeatedly blue screen

Source: Internet
Author: User

===dump information===
2:kd>!mex.t
Process Thread CID usertime kerneltime contextswitches Wait Reason time State
System (ffffe0002ba30900) ffffe0002d5fc040 4.73c 0s 141ms 4564 Executive 0s Running on CPU 2

CHILD-SP Return Call Site Info
0 ffffd000d1f70498 Fffff802d7e03bd2 nt! kebugcheckex+0x0
1 ffffd000d1f704a0 fffff802d7cdd2b9 nt! Misystemfault+0x10a3d2
2 ffffd000d1f70540 fffff802d7ddfc2f nt! mmaccessfault+0x769
3 ffffd000d1f70700 fffff800facf7360 nt! kipagefault+0x12f Trapframe @ ffffd000d1f70700
4 ffffd000d1f70890 fffff800facf72a5 srv! srvos2featont+0x48
5 ffffd000d1f708c0 fffff800fad1869b srv! srvos2fealisttont+0x125
6 ffffd000d1f70910 Fffff800fad218ba srv! Srvsmbopen2+0xc3
7 ffffd000d1f709b0 fffff800fad24b2e srv! Executetransaction+0x2ca
8 ffffd000d1f709f0 fffff800facb284f srv! srvsmbtransactionsecondary+0x40b
9 Ffffd000d1f70a90 fffff800facb2a20 srv! srvprocesssmb+0x237
A FFFFD000D1F70B10 Fffff800facf1ac8 srv! srvrestartreceive+0x114
b ffffd000d1f70b50 fffff802d819dd92 srv! workerthread+0x5248
C ffffd000d1f70bd0 Fffff802d7d86c70 nt! Iopthreadstart+0x26
D ffffd000d1f70c00 Fffff802d7ddbfc6 nt! pspsystemthreadstartup+0x58
E ffffd000d1f70c60 0000000000000000 nt! kxstartsystemthread+0x16

2:kd>. Trap ffffd000d1f70700
Note:the trap frame does not contain all registers.
Some register values may zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffe00030c94000
rdx=ffffc0013fdc709a rsi=0000000000000000 rdi=0000000000000000
rip=fffff800facf7360 rsp=ffffd000d1f70890 rbp=ffffc0013fdc7095
r8=0000000000000000 r9= 0000000000000000 r10=0000000000000200
r11=ffffe00030c94000 r12=0000000000000000 r13=0000000000000000
r14= 0000000000000000 r15=0000000000000000
Iopl=0 nv up ei ng nz na po NC
srv! srvos2featont+0x48:
fffff800 facf7360 c60300 mov byte ptr [rbx],0 ds:00000000 00000000=??

2:kd> LMVM SRV
Browse Full Module List
Start End Module Name
fffff800 faca5000 fffff800 fad33000 SRV (private pdb symbols) c:\symbols\srv.pdb\665B8481A81740C59F71C54C0DD24E762\srv.pdb
Loaded symbol Image File:srv.sys
Image Path: \systemroot\system32\drivers\srv.sys
Image Name:srv.sys
Browse all global symbols functions data
Timestamp:thu Jul 19:43:27 (53d0f15f)
Checksum:0006f7ba
imagesize:0008e000
Translations:0000.04b0 0000.04e4 0409.04b0 0409.04e4

2:kd> Vertarget
Windows 8.1 Kernel Version 9600 MP (8 procs) free x64
Product:lanmannt, Suite:terminalserver Singleuserts
Built by:9600.17415.amd64fre.winblue_r4.141028-1500
Machine Name: "d0ap2002"
Kernel base = 0xfffff802 d7c85000 PsLoadedModuleList = 0xfffff802 d7f5e250
Debug Session time:wed Feb 11:22:40.306 2018 (UTC + 8:00)
System uptime:0 days 7:01:13.511

Dump, the server's repeated blue screen is caused by an SRV vulnerability. Install KB4012213 for all 2012R2 servers to fix the vulnerability or the machine may be infected with wannacry virus.

Installing KB4012213
https://www.catalog.update.microsoft.com/Search.aspx?q=4012213

Install the above patch can solve the problem of repeated blue screen

Windows Server R2 server repeatedly blue screen

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.