Released: Microsoft Security Bulletin MS13-105 for Exchange

Deleted

Jan 01, 1970

As I see by BSOD-dump, it is because of Health Monitoring service:

Debugging Details:

------------------

Page 785dd not present in the dump file. Type ".hh dbgerr004" for details

PROCESS_OBJECT: fffffa80143727f0

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: wininit

FAULTING_MODULE: 0000000000000000

PROCESS_NAME: MSExchangeHMWo

BUGCHECK_STR: 0xF4_MSExchangeHMWo

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80001c57ab2 to fffff800018c9bc0

STACK_TEXT:

fffff880`0a2d0b08 fffff800`01c57ab2 : 00000000`000000f4 00000000`00000003 fffffa80`143727f0 fffffa80`14372ad0 : nt!KeBugCheckEx

fffff880`0a2d0b10 fffff800`01c02abb : ffffffff`ffffffff fffffa80`182f1060 fffffa80`143727f0 fffffa80`17d38060 : nt!PspCatchCriticalBreak+0x92

fffff880`0a2d0b50 fffff800`01b82674 : ffffffff`ffffffff 00000000`00000001 fffffa80`143727f0 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17486

fffff880`0a2d0ba0 fffff800`018c8e53 : fffffa80`143727f0 fffff880`ffffffff fffffa80`182f1060 00000000`00000000 : nt!NtTerminateProcess+0xf4

fffff880`0a2d0c20 00000000`77a8157a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13

00000000`2a93d1e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77a8157a

STACK_COMMAND: kb

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: wininit.exe

FAILURE_BUCKET_ID: X64_0xF4_MSExchangeHMWo_IMAGE_wininit.exe

BUCKET_ID: X64_0xF4_MSExchangeHMWo_IMAGE_wininit.exe

Followup: MachineOwner

Blog Post