DUMP DATA - Sever 2003

Hi All,

I'm new to this community...I don't know whether I'm posting properly or not but pls do hel me with this issue..One of my citrix presentation servers rebooted unexpectedly today morning..Here is the extract from my Memory Dump....Pls help me out...Many thanks in advance...

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\****\Desktop\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Mon Nov 30 08:09:19.871 2009 (GMT+3)
System Uptime: 0 days 6:35:49.640
Loading Kernel Symbols
.................................................................................................................
Loading User Symbols

Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {c8600000, 0, 8093084c, 0}





Probably caused by : ntkrnlmp.exe ( nt!CmpFileWrite+5d )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: c8600000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 8093084c, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------






READ_ADDRESS: c8600000

FAULTING_IP:
nt!CmpFileWrite+5d
8093084c 0fbe32 movsx esi,byte ptr [edx]

MM_INTERNAL_CODE: 0

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: System

CURRENT_IRQL: 1

TRAP_FRAME: f71d2c04 -- (.trap 0xfffffffff71d2c04)
.trap 0xfffffffff71d2c04
ErrCode = 00000000
eax=c8601000 ebx=e7291a80 ecx=00000031 edx=c8600000 esi=00000068 edi=00000000
eip=8093084c esp=f71d2c78 ebp=f71d2cd0 iopl=0 nv up ei ng nz na pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010287
nt!CmpFileWrite+0x5d:
8093084c 0fbe32 movsx esi,byte ptr [edx] ds:0023:c8600000=??
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 808689ee to 8087b6be

STACK_TEXT:
f71d2b9c 808689ee 00000050 c8600000 00000000 nt!KeBugCheckEx+0x1b
f71d2bec 80837d0a 00000000 c8600000 00000000 nt!MmAccessFault+0x813
f71d2bec 8093084c 00000000 c8600000 00000000 nt!KiTrap0E+0xdc
f71d2cd0 8093072b e7291a80 00000001 e733c000 nt!CmpFileWrite+0x5d
f71d2d28 8093043e 00000034 e7291a80 e7291d78 nt!HvpWriteLog+0x2cd
f71d2d3c 80931393 e7291a01 8ab868d0 808ad3e8 nt!HvSyncHive+0x71
f71d2d58 809314ab 00000000 e7291d78 f71d2d78 nt!CmpDoFlushNextHive+0xe1
f71d2d80 8083f72e 00000000 00000000 8ab868d0 nt!CmpLazyFlushWorker+0x7f
f71d2dac 8092ccff 00000000 00000000 00000000 nt!ExpWorkerThread+0xeb
f71d2ddc 80841a96 8083f671 00000001 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!CmpFileWrite+5d
8093084c 0fbe32 movsx esi,byte ptr [edx]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: nt!CmpFileWrite+5d

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42435e60

FAILURE_BUCKET_ID: 0x50_nt!CmpFileWrite+5d

BUCKET_ID: 0x50_nt!CmpFileWrite+5d

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000000 ecx=00000000 edx=00000001 esi=ffdff120 edi=808b4120
eip=8087b6be esp=f71d2b84 ebp=f71d2b9c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8087b6be 5d pop ebp
ChildEBP RetAddr Args to Child
f71d2b9c 808689ee 00000050 c8600000 00000000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f71d2bec 80837d0a 00000000 c8600000 00000000 nt!MmAccessFault+0x813 (FPO: [Non-Fpo])
f71d2bec 8093084c 00000000 c8600000 00000000 nt!KiTrap0E+0xdc (FPO: [0,0] TrapFrame @ f71d2c04)
f71d2cd0 8093072b e7291a80 00000001 e733c000 nt!CmpFileWrite+0x5d (FPO: [Non-Fpo])
f71d2d28 8093043e 00000034 e7291a80 e7291d78 nt!HvpWriteLog+0x2cd (FPO: [Non-Fpo])
f71d2d3c 80931393 e7291a01 8ab868d0 808ad3e8 nt!HvSyncHive+0x71 (FPO: [Non-Fpo])
f71d2d58 809314ab 00000000 e7291d78 f71d2d78 nt!CmpDoFlushNextHive+0xe1 (FPO: [Non-Fpo])
f71d2d80 8083f72e 00000000 00000000 8ab868d0 nt!CmpLazyFlushWorker+0x7f (FPO: [Non-Fpo])
f71d2dac 8092ccff 00000000 00000000 00000000 nt!ExpWorkerThread+0xeb (FPO: [Non-Fpo])
f71d2ddc 80841a96 8083f671 00000001 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a75000 nt ntkrnlmp.exe Fri Mar 25 03:42:08 2005 (42435E60)
80a75000 80aa1000 hal halmacpi.dll Fri Mar 25 03:28:37 2005 (42435B35)
bf800000 bf9cf000 win32k win32k.sys Fri Mar 25 03:40:09 2005 (42435DE9)
bf9cf000 bf9e5000 dxg dxg.sys Fri Mar 25 03:27:25 2005 (42435AED)
bf9e5000 bfa48000 ati2dvag ati2dvag.dll Wed Jan 21 06:48:31 2004 (400DF68F)
bfa48000 bfb1c420 ati3d1ag ati3d1ag.dll Wed Jan 21 06:04:17 2004 (400DEC31)
bfb1d000 bfbcdf00 vdtw30 vdtw30.dll Fri Jun 29 23:25:35 2007 (46856ABF)
bffa0000 bffea000 ATMFD ATMFD.DLL Fri Mar 25 05:30:36 2005 (424377CC)
f2b0f000 f2b57000 TmXPFlt TmXPFlt.sys Wed Sep 30 09:36:34 2009 (4AC2FC72)
f2b57000 f2c80280 VSApiNt VSApiNt.sys Wed Sep 30 09:26:01 2009 (4AC2F9F9)
f2c81000 f2ca1280 tmcomm tmcomm.sys Mon Dec 24 12:36:35 2007 (476F7DA3)
f46d2000 f46fd000 RDPWD RDPWD.SYS Fri Mar 25 03:27:16 2005 (42435AE4)
f46fd000 f4740c00 WDICA WDICA.SYS Fri Jun 29 23:26:07 2007 (46856ADF)
f4741000 f474c000 TDTCP TDTCP.SYS Fri Mar 25 03:27:15 2005 (42435AE3)
f4861000 f4864600 icareduc icareduc.sys Sat Feb 10 03:32:11 2007 (45CD128B)
f4b19000 f4b1c000 lm78_32 lm78_32.sys Fri Sep 16 18:40:51 2005 (432AE783)
f4d35000 f4d38300 pdrframe pdrframe.sys Sat Feb 10 03:33:23 2007 (45CD12D3)
f5541000 f5543300 uphcleanhlp uphcleanhlp.sys Wed Apr 27 21:58:56 2005 (426FE0F0)
f58ba000 f5926000 srv srv.sys Fri Sep 01 17:32:26 2006 (44F8447A)
f599e000 f59ee000 HTTP HTTP.sys Fri Mar 25 03:40:36 2005 (42435E04)
f5b06000 f5b5cd00 cdm cdm.sys Fri Jun 29 23:23:51 2007 (46856A57)
f5d71000 f5d73980 ctxsmcdrv ctxsmcdrv.sys Sat Feb 10 03:33:41 2007 (45CD12E5)
f5ddd000 f5de0e80 pdcrypt1 pdcrypt1.sys Sat Feb 10 03:33:28 2007 (45CD12D8)
f5f9f000 f5fc5500 CtxSbx CtxSbx.sys Fri Jun 29 23:54:25 2007 (46857181)
f614c000 f615d000 Fips Fips.SYS Fri Mar 25 03:40:33 2005 (42435E01)
f615d000 f6166000 ndisuio ndisuio.sys Fri Mar 25 03:33:16 2005 (42435C4C)
f61ad000 f61bad80 CtxAltStr CtxAltStr.sys Fri Jun 29 23:47:29 2007 (46856FE1)
f61bd000 f61ca000 TmPreFlt TmPreFlt.sys Wed Sep 30 09:36:29 2009 (4AC2FC6D)
f61fd000 f627d000 mrxsmb mrxsmb.sys Mon May 08 20:18:45 2006 (445F7D75)
f62a5000 f62de000 rdbss rdbss.sys Mon May 08 20:18:53 2006 (445F7D7D)
f62de000 f62f1380 tmtdi tmtdi.sys Tue Jan 22 12:15:50 2008 (4795B446)
f62f2000 f631c000 afd afd.sys Fri Mar 25 03:40:43 2005 (42435E0B)
f631c000 f634d000 netbt netbt.sys Fri Mar 25 03:40:31 2005 (42435DFF)
f634d000 f63ae000 tcpip tcpip.sys Wed May 24 04:02:22 2006 (4473B09E)
f63ae000 f63c7000 ipsec ipsec.sys Fri Mar 25 03:40:49 2005 (42435E11)
f6457000 f646b000 usbhub usbhub.sys Fri Mar 25 03:30:46 2005 (42435BB6)
f678a000 f678de80 ctxpidmn ctxpidmn.sys Fri Jun 29 23:53:06 2007 (46857132)
f6827000 f6831000 Dxapi Dxapi.sys Tue Mar 25 10:06:01 2003 (3E7FFFD9)
f6857000 f6865000 dump_symmpi dump_symmpi.sys Fri May 23 17:15:25 2003 (3ECE2CFD)
f6867000 f68a7000 update update.sys Fri Mar 25 03:40:27 2005 (42435DFB)
f68a7000 f68cf000 ks ks.sys Fri Mar 25 03:41:03 2005 (42435E1F)
f68f7000 f692e000 rdpdr rdpdr.sys Fri Mar 25 03:30:20 2005 (42435B9C)
f692e000 f6941000 raspptp raspptp.sys Fri Mar 25 03:40:43 2005 (42435E0B)
f6941000 f695b000 ndiswan ndiswan.sys Fri Mar 25 03:40:46 2005 (42435E0E)
f695b000 f6970000 rasl2tp rasl2tp.sys Fri Mar 25 03:40:29 2005 (42435DFD)
f6970000 f6985000 baspxp32 baspxp32.sys Thu Oct 13 19:18:28 2005 (434E88D4)
f6985000 f699a000 serial serial.sys Fri Mar 25 03:28:29 2005 (42435B2D)
f699a000 f69b5000 VIDEOPRT VIDEOPRT.SYS Fri Mar 25 03:29:53 2005 (42435B81)
f69b5000 f6a73000 ati2mtag ati2mtag.sys Wed Jan 21 06:48:06 2004 (400DF676)
f6a73000 f6a9d000 USBPORT USBPORT.SYS Fri Mar 25 03:30:43 2005 (42435BB3)
f6a9d000 f6abfd80 b57xp32 b57xp32.sys Tue Oct 18 01:31:57 2005 (4354265D)
f6b20000 f6b2e000 NDProxy NDProxy.SYS Fri Mar 25 03:34:13 2005 (42435C85)
f6b30000 f6b39000 mssmbios mssmbios.sys Fri Mar 25 03:34:14 2005 (42435C86)
f6b40000 f6b4a000 mouclass mouclass.sys Tue Mar 25 10:03:09 2003 (3E7FFF2D)
f6b50000 f6b5a000 kbdclass kbdclass.sys Tue Mar 25 10:03:10 2003 (3E7FFF2E)
f717f000 f7182ea0 cdfdrv cdfdrv.sys Mon Oct 09 19:27:49 2006 (452A7885)
f721b000 f723a000 Mup Mup.sys Fri Mar 25 03:40:49 2005 (42435E11)
f723a000 f7270000 NDIS NDIS.sys Fri Mar 25 03:40:26 2005 (42435DFA)
f7270000 f7305000 Ntfs Ntfs.sys Fri Mar 25 03:40:29 2005 (42435DFD)
f7305000 f732c000 KSecDD KSecDD.sys Fri Mar 25 03:28:53 2005 (42435B45)
f732c000 f7351000 fltMgr fltMgr.sys Fri Mar 25 03:30:25 2005 (42435BA1)
f7351000 f7364000 CLASSPNP CLASSPNP.SYS Fri Mar 25 03:40:23 2005 (42435DF7)
f7364000 f7383000 SCSIPORT SCSIPORT.SYS Fri Mar 25 03:40:26 2005 (42435DFA)
f7383000 f739f000 atapi atapi.sys Fri Mar 25 03:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Fri Mar 25 03:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Fri Mar 25 03:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Fri Mar 25 03:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Fri Mar 25 03:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Fri Mar 25 03:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 10:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 10:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Fri Mar 25 03:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Fri Mar 25 03:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Fri Mar 25 03:40:34 2005 (42435E02)
f74d7000 f74e5000 symmpi symmpi.sys Fri May 23 17:15:25 2003 (3ECE2CFD)
f74e7000 f74f7000 disk disk.sys Fri Mar 25 03:28:58 2005 (42435B4A)
f74f7000 f7503000 Dfs Dfs.sys Fri Mar 25 03:30:28 2005 (42435BA4)
f7507000 f7511000 crcdisk crcdisk.sys Fri Mar 25 03:29:40 2005 (42435B74)
f7557000 f7562000 Msfs Msfs.SYS Fri Mar 25 03:30:04 2005 (42435B8C)
f7567000 f7574000 wanarp wanarp.sys Fri Mar 25 03:34:07 2005 (42435C7F)
f7577000 f7581000 serenum serenum.sys Fri Mar 25 03:28:27 2005 (42435B2B)
f7587000 f7591000 dump_diskdump dump_diskdump.sys Fri Mar 25 03:28:56 2005 (42435B48)
f75a7000 f75b4000 netbios netbios.sys Fri Mar 25 03:33:21 2005 (42435C51)
f75b7000 f75c3000 vga vga.sys Fri Mar 25 03:29:54 2005 (42435B82)
f75c7000 f75d4000 Npfs Npfs.SYS Fri Mar 25 03:30:04 2005 (42435B8C)
f75d7000 f75e6000 raspppoe raspppoe.sys Fri Mar 25 03:34:16 2005 (42435C88)
f75e7000 f75f6000 intelppm intelppm.sys Fri Mar 25 03:28:40 2005 (42435B38)
f75f7000 f7606000 termdd termdd.sys Fri Mar 25 03:27:15 2005 (42435AE3)
f7627000 f7635000 msgpc msgpc.sys Fri Mar 25 03:33:31 2005 (42435C5B)
f7637000 f7640000 raspti raspti.sys Fri Mar 25 03:34:16 2005 (42435C88)
f7657000 f7660000 ndistapi ndistapi.sys Fri Mar 25 03:34:11 2005 (42435C83)
f7687000 f7690000 watchdog watchdog.sys Fri Mar 25 03:30:19 2005 (42435B9B)
f7697000 f76a2000 TDI TDI.SYS Fri Mar 25 03:35:34 2005 (42435CD6)
f76b7000 f76c2000 ptilink ptilink.sys Fri Mar 25 03:28:25 2005 (42435B29)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 10:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 10:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 10:04:46 2003 (3E7FFF8E)
f771f000 f7726000 intelide intelide.sys Fri Mar 25 03:28:48 2005 (42435B40)
f7727000 f772e000 dmload dmload.sys Tue Mar 25 10:08:08 2003 (3E800058)
f779f000 f77a5780 ctxrmpn ctxrmpn.sys Sat Feb 10 03:51:45 2007 (45CD1721)
f77af000 f77b4180 usbuhci usbuhci.sys Fri Mar 25 03:30:45 2005 (42435BB5)
f77b7000 f77bf000 audstub audstub.sys Tue Mar 25 10:09:12 2003 (3E800098)
f77bf000 f77c7000 Fs_Rec Fs_Rec.SYS Tue Mar 25 10:08:36 2003 (3E800074)
f77c7000 f77ce000 Null Null.SYS Tue Mar 25 10:03:05 2003 (3E7FFF29)
f77cf000 f77d6000 Beep Beep.SYS Tue Mar 25 10:03:04 2003 (3E7FFF28)
f77d7000 f77dd300 HIDPARSE HIDPARSE.SYS Fri Mar 25 03:30:36 2005 (42435BAC)
f77df000 f77e7000 mnmdd mnmdd.SYS Tue Mar 25 10:07:53 2003 (3E800049)
f77e7000 f77ef000 RDPCDD RDPCDD.sys Tue Mar 25 10:03:05 2003 (3E7FFF29)
f77ef000 f77f7000 rasacd rasacd.sys Tue Mar 25 10:11:50 2003 (3E800136)
f77f7000 f77fe000 TWGGrab TWGGrab.SYS Wed Oct 19 05:41:41 2005 (4355B265)
f7807000 f780e000 dxgthk dxgthk.sys Tue Mar 25 10:05:52 2003 (3E7FFFD0)
f7997000 f7998280 swenum swenum.sys Fri Mar 25 03:27:42 2005 (42435AFE)
f799d000 f799e580 USBD USBD.SYS Tue Mar 25 10:10:39 2003 (3E8000EF)
f7ac1000 f7ac2000 icacdd icacdd.sys Sat Feb 10 03:32:02 2007 (45CD1282)

Unloaded modules:
f5551000 f5572000 tmcomm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5e75000 f5f9f000 VSApiNt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5e05000 f5e4d000 TmXPFlt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79dd000 f79df000 pmemnt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79e7000 f79e9000 pmemnt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79df000 f79e1000 pmemnt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79c3000 f79c5000 pmemnt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79cb000 f79cd000 pmemnt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7597000 f75a5000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f62ca000 f62de000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7667000 f7670000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6422000 f6437000 cdrom.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f76a7000 f76b1000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7647000 f7652000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:debuglog.txt

 

Thanks...

Thanks for the reply..As of now the problem didnot reoccure....so I've just decided to ignore it...
Many thanks for your reply...