Windows 2003 Server R2 Standard - Reboots

Looking through all threads i cant find the same problem.

I have a "Windows 2003 Server R2 - Service Pack 2" running. Sometimes de server has a BSOD and reboots automaticly. I cant seem to find a solution for this problem. Maybe you guys can help me with this. Below is the debuglog.

Thanks in advance !

grtz

________

Microsoft (R) Windows Debugger Version 6.10.0003.233 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini112808-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Built by: 3790.srv03_sp2_gdr.070304-2240
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af9c8
Debug session time: Fri Nov 28 10:33:10.784 2008 (GMT+1)
System Uptime: 0 days 20:21:44.468
Loading Kernel Symbols
...............................................................
...............................................
Loading User Symbols
Loading unloaded module list
..
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {c0000005, 8083e4d6, f78e2c54, f78e2950}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

2: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8083e4d6, The address that the exception occurred at
Arg3: f78e2c54, Exception Record Address
Arg4: f78e2950, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
nt!ObfDereferenceObject+23
8083e4d6 f00fc11e lock xadd dword ptr [esi],ebx

EXCEPTION_RECORD: f78e2c54 -- (.exr 0xfffffffff78e2c54)
.exr 0xfffffffff78e2c54
ExceptionAddress: 8083e4d6 (nt!ObfDereferenceObject+0x00000023)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 006c005e
Attempt to write to address 006c005e

CONTEXT: f78e2950 -- (.cxr 0xfffffffff78e2950)
.cxr 0xfffffffff78e2950
eax=f78e0001 ebx=ffffffff ecx=006c0076 edx=00000000 esi=006c005e edi=8083e407
eip=8083e4d6 esp=f78e2d1c ebp=f78e2d2c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!ObfDereferenceObject+0x23:
8083e4d6 f00fc11e lock xadd dword ptr [esi],ebx ds:0023:006c005e=????????
.cxr
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: CODE_CORRUPTION

CURRENT_IRQL: 0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

EXCEPTION_PARAMETER1: 00000001

EXCEPTION_PARAMETER2: 006c005e

WRITE_ADDRESS: 006c005e

FOLLOWUP_IP:
nt!ObfDereferenceObject+23
8083e4d6 f00fc11e lock xadd dword ptr [esi],ebx

BUGCHECK_STR: 0x7E

EXCEPTION_STR: 0x0

LAST_CONTROL_TRANSFER: from f721712e to 8083e4d6

STACK_TEXT:
f78e2d2c f721712e 8833c8f0 f78e2d80 f721304e nt!ObfDereferenceObject+0x23
f78e2d38 f721304e e8749ca0 8a3873f0 808b70e0 Mup!DfsCloseIpcConnection+0x16
f78e2d80 8082db08 88483030 00000000 8a3873f0 Mup!DnrInsertReferralAndResume+0x9f
f78e2dac 80920833 88483030 00000000 00000000 nt!ExpWorkerThread+0xeb
f78e2ddc 8083fe9f 8082da4b 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
!chkimg -lo 50 -d !nt
8083e64c-8083e64f 4 bytes - nt!KiServiceTable+84
[ dc 02 92 80:00 e3 e4 e4 ]
8083ea08-8083ea0b 4 bytes - nt!KiServiceTable+440 (+0x3bc)
[ 1c a1 97 80:d0 e6 58 f5 ]
8 errors : !nt (8083e64c-8083ea0b)

MODULE_NAME: memory_corruption

IMAGE_NAME: memory_corruption

FOLLOWUP_NAME: memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MEMORY_CORRUPTOR: LARGE

STACK_COMMAND: .cxr 0xfffffffff78e2950 ; kb

FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE

BUCKET_ID: MEMORY_CORRUPTION_LARGE

Followup: memory_corruption
---------

eax=f78e0001 ebx=ffffffff ecx=006c0076 edx=00000000 esi=006c005e edi=8083e407
eip=8083e4d6 esp=f78e2d1c ebp=f78e2d2c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!ObfDereferenceObject+0x23:
8083e4d6 f00fc11e lock xadd dword ptr [esi],ebx ds:0023:006c005e=????????
ChildEBP RetAddr Args to Child
f78e2d2c f721712e 8833c8f0 f78e2d80 f721304e nt!ObfDereferenceObject+0x23 (FPO: [0,1,4])
f78e2d38 f721304e e8749ca0 8a3873f0 808b70e0 Mup!DfsCloseIpcConnection+0x16 (FPO: [1,0,4])
f78e2d80 8082db08 88483030 00000000 8a3873f0 Mup!DnrInsertReferralAndResume+0x9f (FPO: [1,12,4])
f78e2dac 80920833 88483030 00000000 00000000 nt!ExpWorkerThread+0xeb (FPO: [1,5,0])
f78e2ddc 8083fe9f 8082da4b 00000000 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [SEH])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a7a000 nt ntkrnlmp.exe Mon Mar 05 14:02:02 2007 (45EC14CA)
80a7a000 80aa6000 hal halmacpi.dll Sat Feb 17 06:48:26 2007 (45D6972A)
b7f2a000 b7f54000 Fastfat Fastfat.SYS Sat Feb 17 07:27:55 2007 (45D6A06B)
bf800000 bf9d0000 win32k win32k.sys Wed Mar 19 12:31:40 2008 (47E0F99C)
bf9d0000 bf9e7000 dxg dxg.sys Sat Feb 17 07:14:39 2007 (45D69D4F)
bf9e7000 bf9fbb80 vmx_fb vmx_fb.dll Wed Apr 11 19:54:42 2007 (461D20E2)
bff60000 bff7e000 RDPDD RDPDD.dll Sat Feb 17 15:01:19 2007 (45D70AAF)
f5097000 f50c2000 RDPWD RDPWD.SYS Sat Feb 17 06:44:38 2007 (45D69646)
f53f6000 f53f9580 KAPFA KAPFA.SYS Fri Mar 21 20:23:51 2008 (47E40B47)
f5482000 f548d000 TDTCP TDTCP.SYS Sat Feb 17 06:44:32 2007 (45D69640)
f558e000 f5590300 uphcleanhlp uphcleanhlp.sys Wed Apr 27 20:58:56 2005 (426FE0F0)
f57ca000 f5827000 srv srv.sys Sat Feb 17 07:27:20 2007 (45D6A048)
f5877000 f58c7000 HTTP HTTP.sys Sat Feb 17 07:28:12 2007 (45D6A07C)
f5edf000 f5ef0000 dump_symmpi dump_symmpi.sys Mon Dec 13 22:03:14 2004 (41BE0392)
f5ef0000 f5f05000 Cdfs Cdfs.SYS Sat Feb 17 07:27:08 2007 (45D6A03C)
f6053000 f6064000 Fips Fips.SYS Sat Feb 17 07:26:33 2007 (45D6A019)
f6064000 f60da000 mrxsmb mrxsmb.sys Sat Feb 17 07:28:15 2007 (45D6A07F)
f6102000 f6132000 rdbss rdbss.sys Sat Feb 17 07:27:37 2007 (45D6A059)
f6132000 f615c000 afd afd.sys Fri Jun 20 16:20:58 2008 (485BBCCA)
f615c000 f618d000 netbt netbt.sys Sat Feb 17 07:28:57 2007 (45D6A0A9)
f62ad000 f62ec160 SYMTDI SYMTDI.SYS Sat Jun 12 03:20:13 2004 (40CA5A4D)
f62ed000 f6317000 ipnat ipnat.sys Sat Feb 17 06:59:08 2007 (45D699AC)
f6317000 f63a7000 tcpip tcpip.sys Fri Jun 20 16:20:25 2008 (485BBCA9)
f63a7000 f63c0000 ipsec ipsec.sys Sat Feb 17 07:29:28 2007 (45D6A0C8)
f6408000 f640f000 vmmemctl vmmemctl.sys Fri Nov 30 03:03:16 2007 (474F6F64)
f6430000 f64441e0 naveng naveng.sys Sat Nov 08 03:27:13 2008 (4914F901)
f6445000 f6519420 navex15 navex15.sys Sat Nov 08 03:26:34 2008 (4914F8DA)
f651a000 f652cf00 SYMEVENT SYMEVENT.SYS Thu Jan 15 03:02:13 2004 (4005F4A5)
f652d000 f657c000 savrt savrt.sys Tue Feb 10 00:24:30 2004 (402816AE)
f6646000 f6650000 Dxapi Dxapi.sys Tue Mar 25 08:06:01 2003 (3E7FFFD9)
f6666000 f6670000 dump_diskdump dump_diskdump.sys Sat Feb 17 07:07:44 2007 (45D69BB0)
f66b6000 f66c0000 ndisuio ndisuio.sys Sat Feb 17 06:58:25 2007 (45D69981)
f66c6000 f6725000 update update.sys Mon May 28 14:15:16 2007 (465AC7D4)
f6725000 f675c000 rdpdr rdpdr.sys Sat Feb 17 06:51:00 2007 (45D697C4)
f675c000 f676e000 raspptp raspptp.sys Sat Feb 17 07:29:20 2007 (45D6A0C0)
f676e000 f6787000 ndiswan ndiswan.sys Sat Feb 17 07:29:22 2007 (45D6A0C2)
f6787000 f679b000 rasl2tp rasl2tp.sys Sat Feb 17 07:29:02 2007 (45D6A0AE)
f679b000 f67b7000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 07:10:30 2007 (45D69C56)
f67b7000 f67de000 ks ks.sys Sat Feb 17 07:30:40 2007 (45D6A110)
f67de000 f67f2000 redbook redbook.sys Sat Feb 17 07:07:26 2007 (45D69B9E)
f67f2000 f6807000 cdrom cdrom.sys Sat Feb 17 07:07:48 2007 (45D69BB4)
f6807000 f681c000 serial serial.sys Sat Feb 17 07:06:46 2007 (45D69B76)
f681c000 f6834000 parport parport.sys Sat Feb 17 07:06:42 2007 (45D69B72)
f6834000 f6847000 i8042prt i8042prt.sys Sat Feb 17 07:30:40 2007 (45D6A110)
f69e8000 f69f5000 wanarp wanarp.sys Sat Feb 17 06:59:17 2007 (45D699B5)
f6a08000 f6a16000 msgpc msgpc.sys Sat Feb 17 06:58:37 2007 (45D6998D)
f6a18000 f6a25000 Npfs Npfs.SYS Sat Feb 17 06:50:36 2007 (45D697AC)
f6a28000 f6a33000 Msfs Msfs.SYS Sat Feb 17 06:50:33 2007 (45D697A9)
f6a38000 f6a44000 vga vga.sys Sat Feb 17 07:10:30 2007 (45D69C56)
f6a58000 f6a68000 Savrtpel Savrtpel.sys Tue Feb 10 00:24:34 2004 (402816B2)
f6a68000 f6a72000 flpydisk flpydisk.sys Tue Mar 25 08:04:32 2003 (3E7FFF80)
f6ad1000 f6ad3180 VCdRom VCdRom.sys Wed Dec 19 20:44:58 2001 (3C20EE3A)
f7195000 f7198700 CmBatt CmBatt.sys Sat Feb 17 06:58:51 2007 (45D6999B)
f7201000 f7220000 Mup Mup.sys Sat Feb 17 07:27:41 2007 (45D6A05D)
f7220000 f725f000 NDIS NDIS.sys Sat Feb 17 07:28:49 2007 (45D6A0A1)
f725f000 f72f4000 Ntfs Ntfs.sys Sat Feb 17 07:27:23 2007 (45D6A04B)
f72f4000 f731a000 KSecDD KSecDD.sys Sat Feb 17 06:46:32 2007 (45D696B8)
f731a000 f733f000 fltMgr fltMgr.sys Sat Feb 17 06:51:08 2007 (45D697CC)
f733f000 f7352000 CLASSPNP CLASSPNP.SYS Sat Feb 17 07:28:16 2007 (45D6A080)
f7352000 f7371000 SCSIPORT SCSIPORT.SYS Sat Feb 17 07:28:41 2007 (45D6A099)
f7371000 f7382000 symmpi symmpi.sys Mon Dec 13 22:03:14 2004 (41BE0392)
f7382000 f739f000 atapi atapi.sys Sat Feb 17 07:07:34 2007 (45D69BA6)
f739f000 f73c9000 volsnap volsnap.sys Sat Feb 17 07:08:23 2007 (45D69BD7)
f73c9000 f73f5000 dmio dmio.sys Sat Feb 17 07:10:44 2007 (45D69C64)
f73f5000 f741c000 ftdisk ftdisk.sys Sat Feb 17 07:08:05 2007 (45D69BC5)
f741c000 f7432000 pci pci.sys Sat Feb 17 06:59:03 2007 (45D699A7)
f7432000 f7466000 ACPI ACPI.sys Sat Feb 17 06:58:47 2007 (45D69997)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 08:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Sat Feb 17 06:58:57 2007 (45D699A1)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 07:07:32 2007 (45D69BA4)
f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 07:05:35 2007 (45D69B2F)
f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 07:29:25 2007 (45D6A0C5)
f74d7000 f74e7000 disk disk.sys Sat Feb 17 07:07:51 2007 (45D69BB7)
f74e7000 f74f3000 Dfs Dfs.sys Sat Feb 17 06:51:17 2007 (45D697D5)
f74f7000 f7507000 agp440 agp440.sys Sat Feb 17 06:58:53 2007 (45D6999D)
f7507000 f7511000 crcdisk crcdisk.sys Sat Feb 17 07:09:50 2007 (45D69C2E)
f7547000 f7551000 serenum serenum.sys Sat Feb 17 07:06:44 2007 (45D69B74)
f7557000 f7560000 mssmbios mssmbios.sys Sat Feb 17 06:59:12 2007 (45D699B0)
f7567000 f7576000 termdd termdd.sys Sat Feb 17 06:44:32 2007 (45D69640)
f7587000 f7592000 fdc fdc.sys Sat Feb 17 07:07:16 2007 (45D69B94)
f7597000 f75a6000 intelppm intelppm.sys Sat Feb 17 06:48:30 2007 (45D6972E)
f75b7000 f75c0000 raspti raspti.sys Sat Feb 17 06:59:23 2007 (45D699BB)
f75c7000 f75d1000 mouclass mouclass.sys Tue Mar 25 08:03:09 2003 (3E7FFF2D)
f75d7000 f75e5000 NDProxy NDProxy.SYS Sat Feb 17 06:59:21 2007 (45D699B9)
f75e7000 f75f6000 raspppoe raspppoe.sys Sat Feb 17 06:59:23 2007 (45D699BB)
f7607000 f7612000 TDI TDI.SYS Sat Feb 17 07:01:19 2007 (45D69A2F)
f7617000 f7624b00 vmx_svga vmx_svga.sys Wed Apr 11 19:53:38 2007 (461D20A2)
f7627000 f7630000 ndistapi ndistapi.sys Sat Feb 17 06:59:19 2007 (45D699B7)
f7637000 f7644000 netbios netbios.sys Sat Feb 17 06:58:29 2007 (45D69985)
f7657000 f7662000 ptilink ptilink.sys Sat Feb 17 07:06:38 2007 (45D69B6E)
f7667000 f7672000 kbdclass kbdclass.sys Sat Feb 17 07:05:39 2007 (45D69B33)
f7677000 f7680000 watchdog watchdog.sys Sat Feb 17 07:11:45 2007 (45D69CA1)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 08:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 08:07:58 2003 (3E80004E)
f7717000 f771e000 intelide intelide.sys Sat Feb 17 07:07:32 2007 (45D69BA4)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 08:08:08 2003 (3E800058)
f7757000 f775e000 Beep Beep.SYS Tue Mar 25 08:03:04 2003 (3E7FFF28)
f775f000 f7767000 mnmdd mnmdd.SYS Tue Mar 25 08:07:53 2003 (3E800049)
f7767000 f776f000 RDPCDD RDPCDD.sys Tue Mar 25 08:03:05 2003 (3E7FFF29)
f776f000 f7777000 rasacd rasacd.sys Tue Mar 25 08:11:50 2003 (3E800136)
f77a7000 f77ae000 dxgthk dxgthk.sys Tue Mar 25 08:05:52 2003 (3E7FFFD0)
f77f7000 f77fe400 lgtosync lgtosync.sys Fri Mar 10 02:47:08 2006 (4410DA9C)
f77ff000 f7806280 vmxnet vmxnet.sys Sun Sep 30 14:22:32 2007 (46FF9508)
f7807000 f780f000 audstub audstub.sys Tue Mar 25 08:09:12 2003 (3E800098)
f780f000 f7816000 parvdm parvdm.sys Tue Mar 25 08:03:49 2003 (3E7FFF55)
f7817000 f781f000 Fs_Rec Fs_Rec.SYS Tue Mar 25 08:08:36 2003 (3E800074)
f781f000 f7826000 Null Null.SYS Tue Mar 25 08:03:05 2003 (3E7FFF29)
f7897000 f7899980 compbatt compbatt.sys Sat Feb 17 06:58:51 2007 (45D6999B)
f789b000 f789e900 BATTC BATTC.SYS Sat Feb 17 06:58:46 2007 (45D69996)
f79e3000 f79e4280 vmmouse vmmouse.sys Wed Apr 11 19:54:49 2007 (461D20E9)
f79e5000 f79e6280 swenum swenum.sys Sat Feb 17 07:05:56 2007 (45D69B44)

Unloaded modules:
f75f7000 f7605000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f780f000 f7817000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:temp\debuglog.txt

 

Yep its random allright... i searched the whole freakin internet but cant seem to find any solution. I thought maybe you guys have an idea... While waiting for your reply, i'm searching on the internet as well...

So... if someone has an idea when you see the debuglog.. PLEASE LET ME KNOW ! i'm running out of options now and my customer is getting a little irritated...

thnx

 

same error on other server

I have the same error on an other Windows 2003 Server, but has SP1 installled instead of SP2 on the earlier posted question. Below the other debuglog :


Opened log file 'c:temp\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.10.0003.233 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini120408-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: Server, suite: Enterprise TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_qfe.070304-2232
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6e48
Debug session time: Thu Dec 4 08:55:08.861 2008 (GMT+1)
System Uptime: 20 days 19:34:51.742
Loading Kernel Symbols
...............................................................
.........................................................
Loading User Symbols
Loading unloaded module list
.............................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {c0000005, 8086c627, f78dec54, f78de950}

Probably caused by : Mup.sys ( Mup!DfsCloseConnection+12 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8086c627, The address that the exception occurred at
Arg3: f78dec54, Exception Record Address
Arg4: f78de950, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
nt!ObfDereferenceObject+23
8086c627 f00fc11e lock xadd dword ptr [esi],ebx

EXCEPTION_RECORD: f78dec54 -- (.exr 0xfffffffff78dec54)
.exr 0xfffffffff78dec54
ExceptionAddress: 8086c627 (nt!ObfDereferenceObject+0x00000023)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 00470029
Attempt to write to address 00470029

CONTEXT: f78de950 -- (.cxr 0xfffffffff78de950)
.cxr 0xfffffffff78de950
eax=e3854f58 ebx=ffffffff ecx=00470041 edx=00000000 esi=00470029 edi=00000000
eip=8086c627 esp=f78ded1c ebp=f78ded2c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!ObfDereferenceObject+0x23:
8086c627 f00fc11e lock xadd dword ptr [esi],ebx ds:0023:00470029=????????
.cxr
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

CURRENT_IRQL: 0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

EXCEPTION_PARAMETER1: 00000001

EXCEPTION_PARAMETER2: 00470029

WRITE_ADDRESS: 00470029

FOLLOWUP_IP:
Mup!DfsCloseConnection+12
f7887a7e 8b4624 mov eax,dword ptr [esi+24h]

BUGCHECK_STR: 0x7E

EXCEPTION_STR: 0x0

LAST_CONTROL_TRANSFER: from f7887a7e to 8086c627

STACK_TEXT:
f78ded2c f7887a7e 8a515c20 f78ded80 f788a306 nt!ObfDereferenceObject+0x23
f78ded38 f788a306 e3854f58 8cf60db0 808ae560 Mup!DfsCloseConnection+0x12
f78ded80 808800ad 89f51218 00000000 8cf60db0 Mup!DnrInsertReferralAndResume+0xa7
f78dedac 80949544 89f51218 00000000 00000000 nt!ExpWorkerThread+0xeb
f78deddc 8088dc62 8087ffc2 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: Mup!DfsCloseConnection+12

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Mup

IMAGE_NAME: Mup.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 42435e11

STACK_COMMAND: .cxr 0xfffffffff78de950 ; kb

FAILURE_BUCKET_ID: 0x7E_Mup!DfsCloseConnection+12

BUCKET_ID: 0x7E_Mup!DfsCloseConnection+12

Followup: MachineOwner
---------

eax=e3854f58 ebx=ffffffff ecx=00470041 edx=00000000 esi=00470029 edi=00000000
eip=8086c627 esp=f78ded1c ebp=f78ded2c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!ObfDereferenceObject+0x23:
8086c627 f00fc11e lock xadd dword ptr [esi],ebx ds:0023:00470029=????????
ChildEBP RetAddr Args to Child
f78ded2c f7887a7e 8a515c20 f78ded80 f788a306 nt!ObfDereferenceObject+0x23 (FPO: [0,1,4])
f78ded38 f788a306 e3854f58 8cf60db0 808ae560 Mup!DfsCloseConnection+0x12 (FPO: [1,0,4])
f78ded80 808800ad 89f51218 00000000 8cf60db0 Mup!DnrInsertReferralAndResume+0xa7 (FPO: [1,12,4])
f78dedac 80949544 89f51218 00000000 00000000 nt!ExpWorkerThread+0xeb (FPO: [1,5,0])
f78deddc 8088dc62 8087ffc2 00000000 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [SEH])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a53000 nt ntkrpamp.exe Mon Mar 05 10:21:59 2007 (45EBE137)
80a53000 80a7f000 hal halmacpi.dll Fri Mar 25 01:28:37 2005 (42435B35)
8ec90000 8ec9f000 NMnt NMnt.sys Fri Mar 25 01:30:01 2005 (42435B89)
b36cd000 b36fa000 RDPWD RDPWD.SYS Wed Jun 15 17:33:14 2005 (42B04A3A)
b40d5000 b40d8580 KAPFA KAPFA.SYS Fri Mar 21 20:23:51 2008 (47E40B47)
b4685000 b4690000 TDTCP TDTCP.SYS Fri Mar 25 01:27:15 2005 (42435AE3)
b4905000 b4971000 srv srv.sys Fri Sep 01 16:32:26 2006 (44F8447A)
b4a61000 b4ab1000 HTTP HTTP.sys Fri Mar 25 01:40:36 2005 (42435E04)
b4c41000 b4c66500 ino_fltr ino_fltr.sys Thu Mar 16 09:16:16 2006 (44191ED0)
b57a7000 b57b0000 ndisuio ndisuio.sys Fri Mar 25 01:33:16 2005 (42435C4C)
b597b000 b5990000 Cdfs Cdfs.SYS Fri Mar 25 01:40:55 2005 (42435E17)
b6120000 b612c000 dump_mraid35x dump_mraid35x.sys Mon Nov 01 20:42:58 2004 (418691C2)
b657d000 b6583b00 npf npf.sys Tue Nov 06 21:09:15 2007 (4730C9EB)
b7dec000 b7df6000 Dxapi Dxapi.sys Tue Mar 25 08:06:01 2003 (3E7FFFD9)
b82e2000 b82f0000 HIDCLASS HIDCLASS.SYS Tue Mar 25 08:10:17 2003 (3E8000D9)
b8332000 b833b000 kbdhid kbdhid.sys Fri Mar 25 01:27:27 2005 (42435AEF)
b8372000 b837c000 dump_diskdump dump_diskdump.sys Fri Mar 25 01:28:56 2005 (42435B48)
b85f2000 b85fb000 hidusb hidusb.sys Tue Mar 25 08:10:17 2003 (3E8000D9)
b86a6000 b86add00 usbccgp usbccgp.sys Fri Mar 25 01:30:48 2005 (42435BB8)
b8bf2000 b8bfa000 mouhid mouhid.sys Tue Mar 25 08:03:12 2003 (3E7FFF30)
b8c4a000 b8c4d4e0 MLPTDR_B MLPTDR_B.sys Mon Jul 21 22:24:07 2003 (3F1C4BE7)
b8c62000 b8c73000 Fips Fips.SYS Fri Mar 25 01:40:33 2005 (42435E01)
b8c73000 b8cf3000 mrxsmb mrxsmb.sys Mon May 08 19:18:45 2006 (445F7D75)
b8cf3000 b8d2c000 rdbss rdbss.sys Mon May 08 19:18:53 2006 (445F7D7D)
b8d2c000 b8d56000 afd afd.sys Fri Jun 20 17:58:17 2008 (485BD399)
b8d7e000 b8daf000 netbt netbt.sys Fri Mar 25 01:40:31 2005 (42435DFF)
b8daf000 b8e10000 tcpip tcpip.sys Fri Jun 20 17:57:40 2008 (485BD374)
b8e10000 b8e29000 ipsec ipsec.sys Fri Mar 25 01:40:49 2005 (42435E11)
b8e96000 b8e9d000 dxgthk dxgthk.sys Tue Mar 25 08:05:52 2003 (3E7FFFD0)
b8fc6000 b8fce000 rasacd rasacd.sys Tue Mar 25 08:11:50 2003 (3E800136)
b8fce000 b8fd6000 RDPCDD RDPCDD.sys Tue Mar 25 08:03:05 2003 (3E7FFF29)
b8fd6000 b8fde000 mnmdd mnmdd.SYS Tue Mar 25 08:07:53 2003 (3E800049)
b8fde000 b8fe4300 HIDPARSE HIDPARSE.SYS Fri Mar 25 01:30:36 2005 (42435BAC)
b8fe6000 b8fed000 Beep Beep.SYS Tue Mar 25 08:03:04 2003 (3E7FFF28)
b8fee000 b8ff5000 Null Null.SYS Tue Mar 25 08:03:05 2003 (3E7FFF29)
b8ff6000 b8ffe000 Fs_Rec Fs_Rec.SYS Tue Mar 25 08:08:36 2003 (3E800074)
b8ffe000 b9005000 i2omgmt i2omgmt.SYS Fri Mar 25 01:29:39 2005 (42435B73)
b9006000 b901a000 usbhub usbhub.sys Fri Mar 25 01:30:46 2005 (42435BB6)
b907a000 b9087000 netbios netbios.sys Fri Mar 25 01:33:21 2005 (42435C51)
b90da000 b90e7000 wanarp wanarp.sys Fri Mar 25 01:34:07 2005 (42435C7F)
b91fa000 b9208000 msgpc msgpc.sys Fri Mar 25 01:33:31 2005 (42435C5B)
b923a000 b9245000 Msfs Msfs.SYS Fri Mar 25 01:30:04 2005 (42435B8C)
b929a000 b92a7000 Npfs Npfs.SYS Fri Mar 25 01:30:04 2005 (42435B8C)
b964d000 b96ac000 update update.sys Mon May 28 13:30:38 2007 (465ABD5E)
b96ac000 b96e3000 rdpdr rdpdr.sys Fri Mar 25 01:30:20 2005 (42435B9C)
b96e3000 b96f6000 raspptp raspptp.sys Fri Mar 25 01:40:43 2005 (42435E0B)
b96f6000 b9710000 ndiswan ndiswan.sys Fri Mar 25 01:40:46 2005 (42435E0E)
b9710000 b9725000 rasl2tp rasl2tp.sys Fri Mar 25 01:40:29 2005 (42435DFD)
b9725000 b974d000 ks ks.sys Fri Mar 25 01:41:03 2005 (42435E1F)
b974d000 b9761000 redbook redbook.sys Fri Mar 25 01:28:46 2005 (42435B3E)
b9761000 b9776000 cdrom cdrom.sys Fri Mar 25 01:28:57 2005 (42435B49)
b9776000 b978e000 parport parport.sys Fri Mar 25 01:28:25 2005 (42435B29)
b978e000 b97a3000 serial serial.sys Fri Mar 25 01:28:29 2005 (42435B2D)
b97a3000 b97be000 VIDEOPRT VIDEOPRT.SYS Fri Mar 25 01:29:53 2005 (42435B81)
b97be000 b989c000 ati2mtag ati2mtag.sys Fri Nov 12 04:02:01 2004 (419427A9)
b989c000 b98c6000 USBPORT USBPORT.SYS Fri Mar 25 01:30:43 2005 (42435BB3)
b98c6000 b98f1000 e1000325 e1000325.sys Mon Nov 22 19:38:39 2004 (41A2322F)
b9920000 b9920e00 PORTACCESSOR32 PORTACCESSOR32.sys Mon Jul 25 07:40:20 2005 (42E47B44)
ba485000 ba493000 NDProxy NDProxy.SYS Fri Mar 25 01:34:13 2005 (42435C85)
ba984000 ba98c000 audstub audstub.sys Tue Mar 25 08:09:12 2003 (3E800098)
bab18000 bab21000 ndistapi ndistapi.sys Fri Mar 25 01:34:11 2005 (42435C83)
bab28000 bab33000 ptilink ptilink.sys Fri Mar 25 01:28:25 2005 (42435B29)
bab38000 bab47000 intelppm intelppm.sys Fri Mar 25 01:28:40 2005 (42435B38)
baec8000 baed1000 watchdog watchdog.sys Fri Mar 25 01:30:19 2005 (42435B9B)
baf08000 baf13000 TDI TDI.SYS Fri Mar 25 01:35:34 2005 (42435CD6)
baf38000 baf47000 raspppoe raspppoe.sys Fri Mar 25 01:34:16 2005 (42435C88)
baf48000 baf57000 termdd termdd.sys Fri Mar 25 01:27:15 2005 (42435AE3)
baf58000 baf62000 kbdclass kbdclass.sys Tue Mar 25 08:03:10 2003 (3E7FFF2E)
bf800000 bf9d1000 win32k win32k.sys Wed Mar 19 11:40:19 2008 (47E0ED93)
bf9d1000 bf9e7000 dxg dxg.sys Fri Mar 25 01:27:25 2005 (42435AED)
bf9e7000 bfa21000 ati2dvag ati2dvag.dll Fri Nov 12 04:02:23 2004 (419427BF)
bfa21000 bfa5e000 ati2cqag ati2cqag.dll Fri Nov 12 03:22:24 2004 (41941E60)
bfa5e000 bfc91320 ati3duag ati3duag.dll Fri Nov 12 03:43:23 2004 (4194234B)
bfc92000 bfcfc000 ativvaxx ativvaxx.dll Fri Nov 12 03:38:17 2004 (41942219)
bff60000 bff7e000 RDPDD RDPDD.dll Fri Mar 25 03:30:48 2005 (424377D8)
f720a000 f7224260 snapman snapman.sys Fri Oct 06 15:44:30 2006 (45265DBE)
f7225000 f724c000 KSecDD KSecDD.sys Fri Mar 25 01:28:53 2005 (42435B45)
f724c000 f7271000 fltMgr fltMgr.sys Mon Aug 21 11:59:45 2006 (44E98411)
f7271000 f7284000 CLASSPNP CLASSPNP.SYS Fri Mar 25 01:40:23 2005 (42435DF7)
f7284000 f72a3000 SCSIPORT SCSIPORT.SYS Fri Mar 25 01:40:26 2005 (42435DFA)
f72a3000 f72bf000 atapi atapi.sys Fri Mar 25 01:28:49 2005 (42435B41)
f72bf000 f72e9000 volsnap volsnap.sys Fri Mar 25 01:29:10 2005 (42435B56)
f72e9000 f7315000 dmio dmio.sys Fri Mar 25 01:30:02 2005 (42435B8A)
f7315000 f733c000 ftdisk ftdisk.sys Fri Mar 25 01:29:00 2005 (42435B4C)
f733c000 f7352000 pci pci.sys Fri Mar 25 01:34:14 2005 (42435C86)
f7352000 f7386000 ACPI ACPI.sys Fri Mar 25 01:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 08:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 08:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Fri Mar 25 01:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Fri Mar 25 01:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Fri Mar 25 01:40:34 2005 (42435E02)
f74d7000 f74e3000 mraid35x mraid35x.sys Mon Nov 01 20:42:58 2004 (418691C2)
f74e7000 f74f6000 symmpi symmpi.sys Wed Oct 08 18:47:35 2003 (3F843FA7)
f74f7000 f7507000 disk disk.sys Fri Mar 25 01:28:58 2005 (42435B4A)
f7507000 f7512120 vsp vsp.sys Fri Sep 05 18:36:50 2003 (3F58BBA2)
f7517000 f7523000 Dfs Dfs.sys Fri Mar 25 01:30:28 2005 (42435BA4)
f7527000 f7531000 crcdisk crcdisk.sys Fri Mar 25 01:29:40 2005 (42435B74)
f7587000 f7594000 dcdipm32 dcdipm32.sys Wed Sep 07 03:51:01 2005 (431E4785)
f75c7000 f75d1000 mouclass mouclass.sys Tue Mar 25 08:03:09 2003 (3E7FFF2D)
f75f7000 f7602000 dcdbas32 dcdbas32.sys Wed Sep 07 03:48:06 2005 (431E46D6)
f7647000 f7652000 fdc fdc.sys Fri Mar 25 01:28:43 2005 (42435B3B)
f7667000 f7673000 vga vga.sys Fri Mar 25 01:29:54 2005 (42435B82)
f7677000 f7681000 serenum serenum.sys Fri Mar 25 01:28:27 2005 (42435B2B)
f76a7000 f76b0000 mssmbios mssmbios.sys Fri Mar 25 01:34:14 2005 (42435C86)
f76b7000 f76c0000 raspti raspti.sys Fri Mar 25 01:34:16 2005 (42435C88)
f76d1000 f7707000 NDIS NDIS.sys Fri Mar 25 01:40:26 2005 (42435DFA)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 08:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 08:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 08:04:46 2003 (3E7FFF8E)
f771f000 f7726000 intelide intelide.sys Fri Mar 25 01:28:48 2005 (42435B40)
f7727000 f772e000 dmload dmload.sys Tue Mar 25 08:08:08 2003 (3E800058)
f772f000 f7734200 ino_flpy ino_flpy.sys Thu Nov 03 17:03:02 2005 (436A34B6)
f774f000 f7756000 parvdm parvdm.sys Tue Mar 25 08:03:49 2003 (3E7FFF55)
f780f000 f7815a00 usbehci usbehci.sys Fri Mar 25 01:30:43 2005 (42435BB3)
f7817000 f781c180 usbuhci usbuhci.sys Fri Mar 25 01:30:45 2005 (42435BB5)
f7878000 f7897000 Mup Mup.sys Fri Mar 25 01:40:49 2005 (42435E11)
f7897000 f7899800 compbatt compbatt.sys Tue Mar 25 08:16:28 2003 (3E80024C)
f789b000 f789e900 BATTC BATTC.SYS Fri Mar 25 01:34:07 2005 (42435C7F)
f799d000 f799e280 swenum swenum.sys Fri Mar 25 01:27:42 2005 (42435AFE)
f79c3000 f79c4580 USBD USBD.SYS Tue Mar 25 08:10:39 2003 (3E8000EF)
f7b4a000 f7bdf000 Ntfs Ntfs.sys Fri Mar 25 01:40:29 2005 (42435DFD)

Unloaded modules:
8e2aa000 8e2ac000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
8e1b4000 8e1b6000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
8e302000 8e304000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
8e2c0000 8e2c2000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
8e300000 8e302000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
8e320000 8e322000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
8e20c000 8e20e000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
8e0d8000 8e0da000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
98457000 98459000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9838f000 98391000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
982d1000 982d3000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9871f000 98721000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
959e3000 959e5000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9599f000 959a1000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9850b000 9850d000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
983e3000 983e5000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9837b000 9837d000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9871f000 98721000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
98223000 98225000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
98233000 98235000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
98355000 98357000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab3bd000 ab3bf000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab52d000 ab52f000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab449000 ab44b000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab517000 ab519000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab42d000 ab42f000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab3db000 ab3dd000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab491000 ab493000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab413000 ab415000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab583000 ab585000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab853000 ab855000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab519000 ab51b000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab793000 ab795000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab5bd000 ab5bf000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ab60b000 ab60d000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f79d7000 f79d9000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7991000 f7993000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b425d000 b425f000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b5bf5000 b5bf7000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b36fa000 b38ed000 iqvw32.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
baeac000 baead000 BCMmodemnet.
Timestamp: unavailable (00000000)
Checksum: 00000000
b8ec6000 b8ed4000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b931a000 b9323000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8e36000 b8e49000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f778f000 f7797000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:temp\debuglog.txt

 

Are both these servers in the same location?

If both have suddenly started crashing and they are in the same location, I'd start by looking for an environmental problem?

Are both properly ventilated? Is the room they are in getting hot? Do you have a UPS and do the servers share the same UPS?

 

nope

Nope... both server are with different customers but share the same bluescreen. Both servers reside in cooled areas ( airconditioning ) and are used as Teminal Server.