W2K3 Crashes when backing up

Hello, I hope someone can help me with this. A few days ago our backup software attempted to backup our data server, the server crashed restarted, and here is the minidump output. Any assistance would be greatly appreciated.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\xxx\Desktop\Mini063008-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_gdr.070304-2240
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af9c8
Debug session time: Mon Jun 30 14:25:09.056 2008 (GMT-5)
System Uptime: 157 days 18:43:41.953
Loading Kernel Symbols
..............................................................................................................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007F, {8, f773ffe0, 0, 0}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: f773ffe0
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


BUGCHECK_STR: 0x7f_8

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

CURRENT_IRQL: 1

LAST_CONTROL_TRANSFER: from 00000000 to 8087ba37

STACK_TEXT:
f4edf000 00000000 00000000 00000000 00000000 nt!KeBugCheck2+0x10


STACK_COMMAND: kb

SYMBOL_NAME: ANALYSIS_INCONCLUSIVE

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME: Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP: 0

BUCKET_ID: ZEROED_STACK

Followup: MachineOwner
---------

eax=0000bb40 ebx=00000000 ecx=f4edf088 edx=83aa1408 esi=839a39a0 edi=808b4160
eip=8087ba37 esp=f4edec80 ebp=f4edf000 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
nt!KeBugCheck2+0x10:
8087ba37 8945fc mov dword ptr [ebp-4],eax ss:0010:f4edeffc=00000000
ChildEBP RetAddr Args to Child
f4edf000 00000000 00000000 00000000 00000000 nt!KeBugCheck2+0x10 (FPO: [Non-Fpo])
start end module name
80800000 80a7a000 nt ntkrnlmp.exe Mon Mar 05 07:02:02 2007 (45EC14CA)
80a7a000 80aa6000 hal halmacpi.dll Fri Feb 16 23:48:26 2007 (45D6972A)
bf800000 bf9cf000 win32k win32k.sys Thu Mar 01 08:59:28 2007 (45E6EA50)
bf9cf000 bf9e6000 dxg dxg.sys Sat Feb 17 00:14:39 2007 (45D69D4F)
bf9e6000 bfa1e000 ati2dvag ati2dvag.dll Thu Aug 12 21:15:03 2004 (411C2427)
bfa1e000 bfa58000 ati2cqag ati2cqag.dll Thu Aug 12 20:22:28 2004 (411C17D4)
bfa58000 bfc7ab60 ati3duag ati3duag.dll Thu Aug 12 20:57:50 2004 (411C201E)
bfc7b000 bfcef700 ativvaxx ativvaxx.dll Thu Aug 12 20:38:19 2004 (411C1B8B)
bff60000 bff7e000 RDPDD RDPDD.dll Sat Feb 17 08:01:19 2007 (45D70AAF)
f506a000 f5095000 RDPWD RDPWD.SYS Fri Feb 16 23:44:38 2007 (45D69646)
f512d000 f5138000 TDTCP TDTCP.SYS Fri Feb 16 23:44:32 2007 (45D69640)
f5315000 f5320000 FileScreenFilter FileScreenFilter.SYS Thu May 29 14:53:05 2003 (3ED66521)
f56fd000 f572b000 sfmsrv sfmsrv.sys Fri Feb 16 23:59:53 2007 (45D699D9)
f572b000 f5788000 srv srv.sys Sat Feb 17 00:27:20 2007 (45D6A048)
f5840000 f5848b00 portmap portmap.sys Wed Nov 12 16:36:29 2003 (3FB2B5ED)
f5918000 f5968000 HTTP HTTP.sys Sat Feb 17 00:28:12 2007 (45D6A07C)
f5ac8000 f5ad6000 rpcxdr rpcxdr.sys Wed Nov 12 16:36:24 2003 (3FB2B5E8)
f5b70000 f5b84000 nwlnkspx nwlnkspx.sys Fri Feb 16 23:58:35 2007 (45D6998B)
f5c9c000 f5cb0000 nwlnknb nwlnknb.sys Tue Mar 25 02:10:07 2003 (3E8000CF)
f5cb0000 f5ccb000 nwlnkipx nwlnkipx.sys Fri Feb 16 23:58:33 2007 (45D69989)
f5ccb000 f5cf9000 sfmatalk sfmatalk.sys Fri Feb 16 23:59:55 2007 (45D699DB)
f5de9000 f5e0e700 ino_fltr ino_fltr.sys Sat Apr 10 09:10:10 2004 (40780042)
f5f3f000 f5f49000 ndisuio ndisuio.sys Fri Feb 16 23:58:25 2007 (45D69981)
f5f77000 f5fbc000 dump_aar81xx dump_aar81xx.sys Fri Jan 13 19:04:32 2006 (43C84E20)
f5fbc000 f5fdb000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Mon Aug 13 23:45:03 2007 (46C1334F)
f5fdb000 f603e000 eeCtrl eeCtrl.sys Mon Aug 13 23:45:03 2007 (46C1334F)
f603e000 f604f000 Fips Fips.SYS Sat Feb 17 00:26:33 2007 (45D6A019)
f604f000 f60c5000 mrxsmb mrxsmb.sys Sat Feb 17 00:28:15 2007 (45D6A07F)
f60ed000 f611d000 rdbss rdbss.sys Sat Feb 17 00:27:37 2007 (45D6A059)
f611d000 f6147000 afd afd.sys unavailable (00000000)
f6147000 f6178000 netbt netbt.sys Sat Feb 17 00:28:57 2007 (45D6A0A9)
f6178000 f6208000 tcpip tcpip.sys Tue Oct 30 12:34:10 2007 (47276B12)
f6208000 f6221000 ipsec ipsec.sys Sat Feb 17 00:29:28 2007 (45D6A0C8)
f6241000 f6254000 i8042prt i8042prt.sys Sat Feb 17 00:30:40 2007 (45D6A110)
f6254000 f6266320 naveng naveng.sys Sat Jun 23 13:23:20 2007 (467D6518)
f6267000 f6338c40 navex15 navex15.sys Sat Jun 23 12:48:39 2007 (467D5CF7)
f6339000 f634d000 Savrtpel Savrtpel.sys Wed Sep 06 16:26:26 2006 (44FF3D02)
f634d000 f636f000 SYMEVENT SYMEVENT.SYS Mon Sep 18 19:52:19 2006 (450F3F43)
f636f000 f63c7000 savrt savrt.sys Wed Sep 06 16:26:23 2006 (44FF3CFF)
f64cf000 f64e4000 usbhub usbhub.sys Sat Feb 17 00:13:05 2007 (45D69CF1)
f6504000 f6563000 update update.sys Mon May 28 07:15:16 2007 (465AC7D4)
f657b000 f65a2000 ks ks.sys Sat Feb 17 00:30:40 2007 (45D6A110)
f65a2000 f65d9000 rdpdr rdpdr.sys Fri Feb 16 23:51:00 2007 (45D697C4)
f6609000 f6613000 Dxapi Dxapi.sys Tue Mar 25 02:06:01 2003 (3E7FFFD9)
f6619000 f6623000 dump_diskdump dump_diskdump.sys Sat Feb 17 00:07:44 2007 (45D69BB0)
f6669000 f6676000 netbios netbios.sys Fri Feb 16 23:58:29 2007 (45D69985)
f6679000 f668b000 raspptp raspptp.sys Sat Feb 17 00:29:20 2007 (45D6A0C0)
f668b000 f66a4000 ndiswan ndiswan.sys Sat Feb 17 00:29:22 2007 (45D6A0C2)
f66a4000 f66b8000 rasl2tp rasl2tp.sys Sat Feb 17 00:29:02 2007 (45D6A0AE)
f66cb000 f66e0000 serial serial.sys Sat Feb 17 00:06:46 2007 (45D69B76)
f66e0000 f66fc000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 00:10:30 2007 (45D69C56)
f66fc000 f67d7000 ati2mtag ati2mtag.sys Thu Aug 12 21:14:44 2004 (411C2414)
f67d7000 f6801000 USBPORT USBPORT.SYS Sat Feb 17 00:12:59 2007 (45D69CEB)
f6801000 f682c000 e1000325 e1000325.sys Mon Nov 22 12:38:39 2004 (41A2322F)
f7088000 f70a7000 Mup Mup.sys Sat Feb 17 00:27:41 2007 (45D6A05D)
f70a7000 f70e6000 NDIS NDIS.sys Sat Feb 17 00:28:49 2007 (45D6A0A1)
f70e6000 f717b000 Ntfs Ntfs.sys Sat Feb 17 00:27:23 2007 (45D6A04B)
f717b000 f71c1000 revfs revfs.sys Wed Jun 22 15:34:57 2005 (42B9CB71)
f71c1000 f71e7000 KSecDD KSecDD.sys Fri Feb 16 23:46:32 2007 (45D696B8)
f71e7000 f72ad000 dmboot dmboot.sys unavailable (00000000)
f72ad000 f72c1800 QAFilter QAFilter.sys Thu Jul 31 08:58:08 2003 (3F292070)
f72c2000 f72e7000 fltmgr fltmgr.sys Fri Feb 16 23:51:08 2007 (45D697CC)
f72e7000 f72fa000 CLASSPNP CLASSPNP.SYS Sat Feb 17 00:28:16 2007 (45D6A080)
f72fa000 f731e000 adpu320 adpu320.sys Wed Sep 08 18:36:50 2004 (413F9792)
f731e000 f733d000 SCSIPORT SCSIPORT.SYS Sat Feb 17 00:28:41 2007 (45D6A099)
f733d000 f7382000 aar81xx aar81xx.sys Fri Jan 13 19:04:32 2006 (43C84E20)
f7382000 f739f000 atapi atapi.sys Sat Feb 17 00:07:34 2007 (45D69BA6)
f739f000 f73c9000 volsnap volsnap.sys Sat Feb 17 00:08:23 2007 (45D69BD7)
f73c9000 f73f5000 dmio dmio.sys Sat Feb 17 00:10:44 2007 (45D69C64)
f73f5000 f741c000 ftdisk ftdisk.sys Sat Feb 17 00:08:05 2007 (45D69BC5)
f741c000 f7432000 pci pci.sys Fri Feb 16 23:59:03 2007 (45D699A7)
f7432000 f7466000 ACPI ACPI.sys Fri Feb 16 23:58:47 2007 (45D69997)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 02:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Fri Feb 16 23:58:57 2007 (45D699A1)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 00:07:32 2007 (45D69BA4)
f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 00:05:35 2007 (45D69B2F)
f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 00:29:25 2007 (45D6A0C5)
f74d7000 f74e7000 disk disk.sys Sat Feb 17 00:07:51 2007 (45D69BB7)
f74e7000 f74f3000 Dfs Dfs.sys Fri Feb 16 23:51:17 2007 (45D697D5)
f74f7000 f7503000 SAPORT SAPORT.SYS Tue Mar 25 02:09:08 2003 (3E800094)
f7507000 f7511000 crcdisk crcdisk.sys Sat Feb 17 00:09:50 2007 (45D69C2E)
f7517000 f7527000 agp440 agp440.sys Fri Feb 16 23:58:53 2007 (45D6999D)
f7537000 f7543000 vga vga.sys Sat Feb 17 00:10:30 2007 (45D69C56)
f7547000 f7552000 Msfs Msfs.SYS unavailable (00000000)
f7557000 f7564000 Npfs Npfs.SYS Fri Feb 16 23:50:36 2007 (45D697AC)
f7567000 f7575000 msgpc msgpc.sys Fri Feb 16 23:58:37 2007 (45D6998D)
f7577000 f7584000 wanarp wanarp.sys Fri Feb 16 23:59:17 2007 (45D699B5)
f7587000 f7596000 intelppm intelppm.sys Fri Feb 16 23:48:30 2007 (45D6972E)
f7597000 f75a0000 watchdog watchdog.sys Sat Feb 17 00:11:45 2007 (45D69CA1)
f75a7000 f75b1000 serenum serenum.sys Sat Feb 17 00:06:44 2007 (45D69B74)
f75b7000 f75c2000 kbdclass kbdclass.sys Sat Feb 17 00:05:39 2007 (45D69B33)
f75c7000 f75d1000 mouclass mouclass.sys Tue Mar 25 02:03:09 2003 (3E7FFF2D)
f75d7000 f75e0000 ndistapi ndistapi.sys Fri Feb 16 23:59:19 2007 (45D699B7)
f75e7000 f75f6000 raspppoe raspppoe.sys Fri Feb 16 23:59:23 2007 (45D699BB)
f75f7000 f7602000 TDI TDI.SYS Sat Feb 17 00:01:19 2007 (45D69A2F)
f7607000 f7612000 ptilink ptilink.sys Sat Feb 17 00:06:38 2007 (45D69B6E)
f7617000 f7626000 termdd termdd.sys Fri Feb 16 23:44:32 2007 (45D69640)
f7627000 f7630000 mssmbios mssmbios.sys Fri Feb 16 23:59:12 2007 (45D699B0)
f7637000 f7640000 raspti raspti.sys Fri Feb 16 23:59:23 2007 (45D699BB)
f7647000 f7655000 NDProxy NDProxy.SYS Fri Feb 16 23:59:21 2007 (45D699B9)
f76c7000 f76d0000 hidusb hidusb.sys Tue Mar 25 02:10:17 2003 (3E8000D9)
f76d7000 f76e5000 HIDCLASS HIDCLASS.SYS Tue Mar 25 02:10:17 2003 (3E8000D9)
f76e7000 f76f0000 kbdhid kbdhid.sys Sat Feb 17 00:05:42 2007 (45D69B36)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 02:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 02:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 02:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys unavailable (00000000)
f7727000 f772cf00 NmSvFsf NmSvFsf.sys Wed May 07 17:48:09 2003 (3EB98D29)
f772f000 f7733d00 ino_flpy ino_flpy.sys Thu Jun 19 12:17:12 2003 (3EF1F018)
f7737000 f773e000 msnvram msnvram.sys Mon Jun 27 19:56:43 2005 (42C0A04B)
f7797000 f779c180 usbuhci usbuhci.sys Sat Feb 17 00:13:02 2007 (45D69CEE)
f779f000 f77a5b80 usbehci usbehci.sys Sat Feb 17 00:12:56 2007 (45D69CE8)
f77a7000 f77af000 audstub audstub.sys Tue Mar 25 02:09:12 2003 (3E800098)
f77af000 f77b7000 smbdev smbdev.sys Thu Jul 28 15:46:08 2005 (42E94410)
f77b7000 f77bed80 usbccgp usbccgp.sys Sat Feb 17 00:13:08 2007 (45D69CF4)
f77bf000 f77c5300 HIDPARSE HIDPARSE.SYS Sat Feb 17 00:12:35 2007 (45D69CD3)
f77c7000 f77cf000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
f77cf000 f77d6000 Null Null.SYS unavailable (00000000)
f77d7000 f77df000 mouhid mouhid.sys Tue Mar 25 02:03:12 2003 (3E7FFF30)
f77df000 f77e6000 Beep Beep.SYS Tue Mar 25 02:03:04 2003 (3E7FFF28)
f77e7000 f77ef000 mnmdd mnmdd.SYS Tue Mar 25 02:07:53 2003 (3E800049)
f77ef000 f77f7000 RDPCDD RDPCDD.sys Tue Mar 25 02:03:05 2003 (3E7FFF29)
f77ff000 f7807000 rasacd rasacd.sys Tue Mar 25 02:11:50 2003 (3E800136)
f7837000 f783e000 dxgthk dxgthk.sys Tue Mar 25 02:05:52 2003 (3E7FFFD0)
f7897000 f789ad00 imdrvfsf imdrvfsf.sys Mon May 16 15:06:08 2005 (4288FD30)
f7999000 f799a280 swenum swenum.sys Sat Feb 17 00:05:56 2007 (45D69B44)
f799f000 f79a0580 USBD USBD.SYS Tue Mar 25 02:10:39 2003 (3E8000EF)

Unloaded modules:
f6659000 f6667000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6109000 f611d000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f63b2000 f63c7000 cdrom.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f76b7000 f76c1000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f66b8000 f66cb000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f76a7000 f76b2000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

has it crashed again?
Most likley cause is hardware or driver. First you need to trun off the auto restart so that you can capture the blue screen info.

What is the backup software and what is the physcial tape drive and controller the tape drive is on?

Bill Lunam

 

Hi stephan

I agree with Arie you need a full dump!

But have you noticed anything else that seems to occur when processing all the files on the disk like a Virus scan or Defrag?

This could be a disk error!

Please do the below in the order presented. Looks like a lot but is not, some are pure maintenance that should already have been done anyway!
--------------------------------------------------------------------------
First I would do the below to cover yourself!

Add System Restore to Server 2003

http://www.msfn.org/win2k3/sysrestore.htm

Then

Add a redundent Reg backup, get and install ERUNT let it add itself to startup and do a backup on install check all boxes.

ERUNT http://www.larshederer.homepage.t-online.de/erunt/
Yes! Even if you use system restore and other backups Registry and Images.
--------------------------------------------------------------------------

Next

I recomend a deep cleanup as below!

D/L install and run ATF-Cleaner clear all except passwords in all browsers you have. Run repeatedly until no more found.

http://www.majorgeeks.com/ATF_Cleaner_d4949.html

D/L and install CCleaner: Clean temps and registry. Run both (temp and registry) repeatedly until no more found.

http://www.ccleaner.com/download/builds GET SLIM!

Clean and update Java
Cleanup old Java and update to newest version this program will do it all for you.

Download JavaRa http://prm753.bchea.org/JavaRa.html
Unzip it, run it, cleanup old versions then use the update, chose Jucheck first and if you do not have Jucheck then chose Update using Sun..

THEN:

Start-Run-Cmd
type
chkdsk /r
give permission to Scan on boot
reboot!

OPTIONAL BUT HIGHLY RECCOMENDED: Defrag especially if the chkdsk repaired anything.

Mike