Windows 2008r2 server got abruptly rebooted with Bugcheck error.

today our 2008r2 server got abruptly rebooted, found out in event viewer "the computer has rebooted from  bugcheck". bugcheck was: 0x0000001a (0x000xxxxxxxxx). .dmp created got analyzed, looks

windows 7 kernel version 7600 mp (10 procs) free x64  product: server, suite: enterprise terminalserver  built by: 7600.16385.amd64fre.win7_rtm.090713-1255  machine name:  kernel base = 0xfffff800`01e0a000 psloadedmodulelist = 0xfffff800`02047e50  debug session time: wed mar 18 07:03:28.450 2015 (utc - 4:00)  system uptime: 4 days 2:03:47.198  *******************************************************************************  *                                                                             *  *                        bugcheck analysis                                    *  *                                                                             *  *******************************************************************************  
memory_management (1a)      # other values parameter 1 must individually examined.  arguments:  arg1: 0000000000061940, pde has been unexpectedly invalidated.  arg2: 00000000695ec000  arg3: 0000000000000000  arg4: 0000000000000000    debugging details:  ------------------    triager: not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2    bugcheck_str:  0x1a_61940    default_bucket_id:  win7_driver_fault_server    process_name:  excel.exe    current_irql:  0    last_control_transfer:  fffff80001e29e99 fffff80001e7bf00    stack_text:    fffff880`195bf778 fffff800`01e29e99 : 00000000`0000001a 00000000`00061940 00000000`695ec000 00000000`00000000 : nt!kebugcheckex  fffff880`195bf780 fffff800`01e979b2 : 00000000`00000acf 00000000`694a1001 fffff700`01080000 00000000`0000014c : nt! ?? ::fnodobfm::`string'+0x1fda3  fffff880`195bf7e0 fffff800`01ea29cd : 00000000`0000e4b1 00000000`00000000 00000000`00000000 fffff8a0`3a6d2900 : nt!miupdatewsle+0xd2  fffff880`195bf840 fffff800`01ea2353 : 4b100003`572fa025 00000003`572fa121 00000000`00000000 fffff880`195bfc60 : nt!micompleteprotoptefault+0x2cd  fffff880`195bf8d0 fffff800`01e97d9e : 00000000`00000000 00000000`694a17ee fffff680`0034a508 fffffa81`8ea0f588 : nt!miresolveprotoptefault+0x1d3  fffff880`195bf970 fffff800`01e95f23 : 00000000`00000000 00000000`694a17ee 00000000`00000000 00000000`00000000 : nt!midispatchfault+0x1de  fffff880`195bfa80 fffff800`01e79fee : 00000000`00000000 00000000`69e74701 00000000`00000001 00000000`049b8de8 : nt!mmaccessfault+0x343  fffff880`195bfbe0 00000000`68ffd742 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!kipagefault+0x16e  00000000`00269724 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x68ffd742      stack_command:  kb    followup_ip:   nt! ?? ::fnodobfm::`string'+1fda3  fffff800`01e29e99 cc              int     3    symbol_stack_index:  1    symbol_name:  nt! ?? ::fnodobfm::`string'+1fda3    followup_name:  machineowner    module_name: nt    image_name:  ntkrnlmp.exe    debug_flr_image_timestamp:  4a5bc600    failure_bucket_id:  x64_0x1a_61940_nt!_??_::fnodobfm::_string_+1fda3    bucket_id:  x64_0x1a_61940_nt!_??_::fnodobfm::_string_+1fda3    followup: machineowner  ---------

i can see excel.exe possible reason cant make out if excel 1 causing entire problem. new quiet confusing appreciated.

thanks,

amol s

bug check code 0x1a: https://msdn.microsoft.com/en-us/library/windows/hardware/ff557391%28v=vs.85%29.aspx

i recommend start checking ram okay using memtest86+. if error reported recommend replacing faulty ram.

if not please try temporary disable security software running on server , check again.

---

this posting provided no warranties or guarantees , , confers no rights.

ahmed malek

my website link

my linkedin profile

my mvp profile

Windows Server  >  Windows Server General Forum