1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Crash dump Server 2003

Discussion in 'Windows Server System' started by interf, 2007/12/14.

  1. 2007/12/14
    interf

    interf Inactive Thread Starter

    Joined:
    2007/12/14
    Messages:
    2
    Likes Received:
    0
    Hello
    Had a crash dump :
    Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (4 procs) Free x86 compatible
    Product: LanManNt, suite: TerminalServer SingleUserTS
    Built by: 3790.srv03_sp2_gdr.070304-2240
    Kernel base = 0x80800000 PsLoadedModuleList = 0x808af9c8
    Debug session time: Thu Dec 13 17:39:57.056 2007 (GMT+1)
    System Uptime: 0 days 2:13:26.859
    Loading Kernel Symbols
    ..............................................................................................................
    Loading User Symbols

    Loading unloaded module list
    .........
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck C2, {7, 121a, 0, 87000380}

    *** ERROR: Module load completed but symbols could not be loaded for bxnd52x.sys
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for mfehidk.sys -
    *** ERROR: Module load completed but symbols could not be loaded for mfeavfk.sys
    *** ERROR: Module load completed but symbols could not be loaded for mfeapfk.sys
    *** ERROR: Module load completed but symbols could not be loaded for dump_HpCISSs2.sys
    *** ERROR: Module load completed but symbols could not be loaded for mfebopk.sys
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for mfetdik.sys -
    *** ERROR: Module load completed but symbols could not be loaded for cpqteam.sys
    *** ERROR: Module load completed but symbols could not be loaded for hpqilo2.sys
    *** ERROR: Module load completed but symbols could not be loaded for ati2mtag.sys
    *** ERROR: Module load completed but symbols could not be loaded for bxvbdx.sys
    *** WARNING: Unable to verify timestamp for ati2dvag.dll
    *** ERROR: Module load completed but symbols could not be loaded for ati2dvag.dll
    *** WARNING: Unable to verify timestamp for ati2cqag.dll
    *** ERROR: Module load completed but symbols could not be loaded for ati2cqag.dll
    *** WARNING: Unable to verify timestamp for atikvmag.dll
    *** ERROR: Module load completed but symbols could not be loaded for atikvmag.dll
    *** WARNING: Unable to verify timestamp for ATMFD.DLL
    *** ERROR: Module load completed but symbols could not be loaded for ATMFD.DLL
    *** ERROR: Module load completed but symbols could not be loaded for HpCISSs2.sys
    *** ERROR: Module load completed but symbols could not be loaded for cpqcidrv.sys




    Probably caused by : netbt.sys ( netbt!DelayedWipeOutLowerconn+3a )

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 00000007, Attempt to free pool which was already freed
    Arg2: 0000121a, (reserved)
    Arg3: 00000000, Memory contents of the pool block
    Arg4: 87000380, Address of the block of pool being deallocated

    Debugging Details:
    ------------------






    POOL_ADDRESS: 87000380 Nonpaged pool

    BUGCHECK_STR: 0xc2_7

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    PROCESS_NAME: System

    CURRENT_IRQL: 0

    LAST_CONTROL_TRANSFER: from 8089c8ff to 8087c480

    STACK_TEXT:
    f78dacc0 8089c8ff 000000c2 00000007 0000121a nt!KeBugCheckEx+0x1b
    f78dad28 80820db9 87000380 00000000 87787120 nt!ExFreePoolWithTag+0x477
    f78dad3c b9fa88bc 87000380 b9fc36a8 877871a8 nt!IoFreeMdl+0x6e
    f78dad50 b9fa5c34 00000000 87787120 00000000 netbt!DelayedWipeOutLowerconn+0x3a
    f78dad80 8082db08 b9fc36bc 00000000 8a38a3f0 netbt!NTExecuteWorker+0x6a
    f78dadac 80920833 b9fc36bc 00000000 00000000 nt!ExpWorkerThread+0xeb
    f78daddc 8083fe9f 8082da4b 00000000 00000000 nt!PspSystemThreadStartup+0x2e
    00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    netbt!DelayedWipeOutLowerconn+3a
    b9fa88bc 8b3d0422fcb9 mov edi,dword ptr [netbt!_imp__ExFreePoolWithTag (b9fc2204)]

    SYMBOL_STACK_INDEX: 3

    SYMBOL_NAME: netbt!DelayedWipeOutLowerconn+3a

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: netbt

    IMAGE_NAME: netbt.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 45d6a0a9

    FAILURE_BUCKET_ID: 0xc2_7_netbt!DelayedWipeOutLowerconn+3a

    BUCKET_ID: 0xc2_7_netbt!DelayedWipeOutLowerconn+3a

    Anyone can help ?
     
  2. 2007/12/14
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Arie,
    #2

  3. to hide this advert.

  4. 2008/01/07
    cpc2004

    cpc2004 Inactive

    Joined:
    2005/07/08
    Messages:
    366
    Likes Received:
    0
    Your debug log is incomplete as it does not have module list and I don't know what software in installed/.One minidump is insufficient to diagnostic the problem. Attach 4 to 5 debug report here. Usually bugcheck code C2 is caused by faulty ram or software error (ie AntiVirus and etc).
     
    Last edited: 2008/01/07
  5. 2008/01/14
    interf

    interf Inactive Thread Starter

    Joined:
    2007/12/14
    Messages:
    2
    Likes Received:
    0
    Thanks a lot for your reply
    Up to now, I had no more crash, so no more dump to be analyzed.
    I'll try next time to be more accurate
     
  6. 2008/01/16
    cpc2004

    cpc2004 Inactive

    Joined:
    2005/07/08
    Messages:
    366
    Likes Received:
    0
    Can you attach the output of !lm tn of the last minidump here? It is very useful to find out the culprit of the problem.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.