VMWare with Windows 2003 Server Crashes - DUMP DATA

webit · 7th February 2007

Not sure if this is the correct place for this post since it has to deal with VMWare Server and Windows 2003 Server but here goes.

I am using VMWare Server with a WIndows 2003 R2 32 Bit Enterprise Edition Image and up until recently it decided to crash that image almost once a day now. I am using this image as a Provision Networks (Citrix Alternative) terminal server and the only apps I have on it are Microsoft Office 2003 and Adobe 8 pro. About the time it started crashing was when I installed Symantec Anti-Virus Corp edition 10.1.5. Since the crashing started after that I decided to uninstall the Symantec Anti-Virus but the problem still persists.

Below is the DUMP DATA in case anyone can help solve this problem:

--------------------------BEGIN DUMP-------------------------------------
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5 Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [\\prodsrv1-00\c$\WINDOWS\system32\config
\systemprofile\Application Data\VMware\vmware-vmx-3956.dmp] User Mini Dump File: Only registers, stack and portions of memory are available

Windows Server 2003 Version 3790 (Service Pack 1) MP (2 procs) Free
x86 compatible
Product: Server, suite: Enterprise TerminalServer SingleUserTS Debug session time: Wed Feb 7 09:31:45.000 2007 (GMT-6) System Uptime: not available Process Uptime: 0 days 1:13:03.000 Symbol search path is: SRV*c:\windows\symbols*http:// msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS
\system32\drivers
................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(f74.e0c): Unknown exception - code cafebabe (first/second chance not
available)
eax=012a0000 ebx=00000480 ecx=00000007 edx=7c82ed54 esi=155fcbd8
edi=00000005
eip=7c82ed54 esp=042aec6c ebp=042aec7c iopl=0 nv up ei pl zr
na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
ntdll!KiFastSystemCallRet:
7c82ed54 c3 ret
0:002> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
*
*
* Exception
Analysis *
*
*
*************************************************************************** ****

FAULTING_IP:
kernel32!RaiseException+53
77e55e02 5e pop esi

EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff) .exr ffffffffffffffff
ExceptionAddress: 77e55e02 (kernel32!RaiseException+0x00000053)
ExceptionCode: cafebabe
ExceptionFlags: 00000000
NumberParameters: 0

BUGCHECK_STR: cafebabe

DEFAULT_BUCKET_ID: STACK_CORRUPTION

PROCESS_NAME: vmware-vmx.exe

ERROR_CODE: (NTSTATUS) 0xcafebabe - <Unable to get error code text>

LAST_CONTROL_TRANSFER: from 00000000 to 00441ee3

STACK_TEXT:
042af698 00000000 77e74a65 0002dd55 00010007 vmware_vmx+0x41ee3

STACK_COMMAND: ~2s; .ecxr ; kb

FAULTING_THREAD: 00000e0c

PRIMARY_PROBLEM_CLASS: STACK_CORRUPTION

FOLLOWUP_IP:
vmware_vmx+41ee3
00441ee3 ?? ???

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: vmware_vmx

IMAGE_NAME: vmware-vmx.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 44da61e5

SYMBOL_NAME: vmware_vmx+41ee3

FAILURE_BUCKET_ID: cafebabe_vmware_vmx+41ee3

BUCKET_ID: cafebabe_vmware_vmx+41ee3

Followup: MachineOwner
---------

eax=012a0000 ebx=00000480 ecx=00000007 edx=7c82ed54 esi=155fcbd8
edi=00000005
eip=7c82ed54 esp=042aec6c ebp=042aec7c iopl=0 nv up ei pl zr
na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
ntdll!KiFastSystemCallRet:
7c82ed54 c3 ret
ChildEBP RetAddr Args to Child
042aec68 042af4cc 155fcbd8 00000480 001925ce ntdll!KiFastSystemCallRet
(FPO: [0,0,0])
WARNING: Frame IP not in any known module. Following frames may be wrong.
042aec7c 00166210 00000000 bffdc000 00000001 0x42af4cc 042aec80 00000000 bffdc000 00000001 00192852 0x166210
start end module name
00320000 003f2000 libeay32 libeay32.dll Fri Jan 27 20:16:00 2006
(43DAD3E0)
00400000 00a24000 vmware_vmx vmware-vmx.exe Wed Aug 09 17:29:57 2006
(44DA61E5)
00a30000 00a57000 ssleay32 ssleay32.dll Fri Jan 27 20:15:44 2006
(43DAD3D0)
31d70000 31e31000 dbghelp dbghelp.dll Wed Jan 29 16:10:30 2003
(3E385156)
5ccf0000 5ccff000 samlib samlib.dll Thu Mar 24 20:30:34 2005
(424377CA)
5e8d0000 5e99e000 opengl32 opengl32.dll Thu Mar 24 20:31:01 2005
(424377E5)
5f270000 5f2c9000 hnetcfg hnetcfg.dll Thu Mar 24 20:30:17 2005
(424377B9)
68000000 6802f000 rsaenh rsaenh.dll Thu Mar 24 18:30:55 2005
(42435BBF)
68720000 68740000 glu32 glu32.dll Thu Mar 24 20:30:08 2005
(424377B0)
690d0000 690dd000 ntwrap ntwrap.dll Wed Aug 09 16:36:19 2006
(44DA5553)
71ae0000 71ae8000 wshtcpip wshtcpip.dll Tue Mar 25 03:43:27 2003
(3E8024BF)
71b20000 71b61000 mswsock mswsock.dll Thu Mar 24 20:33:09 2005
(42437865)
71bb0000 71bb9000 wsock32 wsock32.dll Tue Mar 25 03:43:26 2003
(3E8024BE)
71bc0000 71bc8000 rdpsnd rdpsnd.dll Tue Mar 25 03:43:26 2003
(3E8024BE)
71bf0000 71bf8000 ws2help ws2help.dll Thu Mar 24 20:31:10 2005
(424377EE)
71c00000 71c17000 ws2_32 ws2_32.dll Thu Mar 24 20:31:09 2005
(424377ED)
71c40000 71c98000 netapi32 netapi32.dll Fri Aug 11 04:57:41 2006
(44DC5495)
722c0000 722ea000 dinput dinput.dll Thu Mar 24 20:30:34 2005
(424377CA)
73860000 738ac000 ddraw ddraw.dll Thu Mar 24 20:30:11 2005
(424377B3)
73b30000 73b36000 dciman32 dciman32.dll Tue Mar 25 03:43:12 2003
(3E8024B0)
73e50000 73eae000 dsound dsound.dll Thu Mar 24 20:31:25 2005
(424377FD)
748d0000 748d8000 cfgmgr32 cfgmgr32.dll Tue Mar 25 03:43:06 2003
(3E8024AA)
76190000 761a2000 msasn1 msasn1.dll Thu Mar 24 20:31:34 2005
(42437806)
761b0000 76243000 crypt32 crypt32.dll Thu Mar 24 20:31:27 2005
(424377FF)
76280000 76285000 msimg32 msimg32.dll Tue Mar 25 03:42:55 2003
(3E80249F)
766d0000 766d9000 shfolder shfolder.dll Thu Mar 24 20:30:50 2005
(424377DA)
76aa0000 76acd000 winmm winmm.dll Thu Mar 24 20:31:20 2005
(424377F8)
76b70000 76b7b000 psapi psapi.dll Thu Mar 24 20:30:53 2005
(424377DD)
76bb0000 76bdb000 wintrust wintrust.dll Thu Mar 24 20:30:45 2005
(424377D5)
76c10000 76c39000 imagehlp imagehlp.dll Thu Mar 24 20:30:33 2005
(424377C9)
76f10000 76f3e000 wldap32 wldap32.dll Thu Mar 24 20:30:51 2005
(424377DB)
76f50000 76f63000 secur32 secur32.dll Thu Mar 24 20:31:01 2005
(424377E5)
770e0000 771ea000 setupapi setupapi.dll Thu Mar 24 20:30:41 2005
(424377D1)
771f0000 77201000 winsta winsta.dll Thu Mar 24 20:30:44 2005
(424377D4)
77380000 77412000 user32 user32.dll Thu Mar 24 20:30:46 2005
(424377D6)
77420000 77523000 comctl32 comctl32.dll Mon Aug 28 03:25:50 2006
(44F2A88E)
77670000 777a4000 ole32 ole32.dll Wed Jul 20 22:24:19 2005
(42DF1563)
77b90000 77b98000 version version.dll Thu Mar 24 20:30:46 2005
(424377D6)
77ba0000 77bfa000 msvcrt msvcrt.dll Thu Mar 24 20:33:02 2005
(4243785E)
77c00000 77c48000 gdi32 gdi32.dll Fri Dec 30 22:12:56 2005
(43B60548)
77c50000 77cef000 rpcrt4 rpcrt4.dll Thu Mar 24 20:30:40 2005
(424377D0)
77d00000 77d8c000 oleaut32 oleaut32.dll Thu Mar 24 20:30:53 2005
(424377DD)
77da0000 77df2000 shlwapi shlwapi.dll Mon Oct 23 11:50:35 2006
(453CF2DB)
77e00000 77e22000 ntmarta ntmarta.dll Thu Mar 24 20:31:11 2005
(424377EF)
77e40000 77f42000 kernel32 kernel32.dll Tue Jul 25 07:31:53 2006
(44C60F39)
77f50000 77fec000 advapi32 advapi32.dll Thu Mar 24 20:30:12 2005
(424377B4)
7c340000 7c396000 msvcr71 msvcr71.dll Fri Feb 21 06:42:20 2003
(3E561EAC)
7c800000 7c8c0000 ntdll ntdll.dll Thu Mar 24 20:30:42 2005
(424377D2)
Closing open log file c:\debuglog.txt

--------------------------END DUMP-------------------------------------

If anyone could help that would be great with this problem.

Thanks,
Chad

bbbobins · 7th February 2007

I would see link below.

I had norton and thought I had uninstalled it. Months ago.

Last week I found this. He said even if you had uninstalled could still run this.

I did and fixed speed and stability, it was hard to believe. But my puter is better than new it seems. I told friends about it, the did it too. All are very happy!

http://windowsbbs.com/showthread.php?t=61013

Bob