1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Please check this debuglog

Discussion in 'Windows Server System' started by ccieid10t, 2005/06/23.

Thread Status:
Not open for further replies.
  1. 2005/06/23
    ccieid10t

    ccieid10t Inactive Thread Starter

    Joined:
    2005/06/15
    Messages:
    5
    Likes Received:
    0
    No SP1 because of non compatibility with our software.

    4th time this server shuts down.

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.4.0007.2
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [D:\Windows_Dump_Analysis\Mini062305-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows Server 2003 Kernel Version 3790 MP (4 procs) Free x86 compatible
    Product: Server, suite: TerminalServer SingleUserTS
    Built by: 3790.srv03_gdr.040410-1234
    Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
    Debug session time: Thu Jun 23 01:17:01.145 2005 (GMT-5)
    System Uptime: 2 days 4:55:10.296
    Loading Kernel Symbols
    ..........................................................................................................
    Loading unloaded module list
    ..
    Loading User Symbols
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck A, {80ffffe8, 2, 1, 804f1918}

    Probably caused by : memory_corruption ( nt!MiRemovePageByColor+af )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: 80ffffe8, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000001, value 0 = read operation, 1 = write operation
    Arg4: 804f1918, address which referenced memory

    Debugging Details:
    ------------------


    WRITE_ADDRESS: 80ffffe8

    CURRENT_IRQL: 2

    FAULTING_IP:
    nt!MiRemovePageByColor+af
    804f1918 890cc2 mov [edx+eax*8],ecx

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

    BUGCHECK_STR: 0xA

    LAST_CONTROL_TRANSFER: from 805030bd to 804f1918

    TRAP_FRAME: f78a6788 -- (.trap fffffffff78a6788)
    .trap fffffffff78a6788
    ErrCode = 00000002
    eax=fffffffd ebx=00000007 ecx=00026d18 edx=81000000 esi=81534e28 edi=00000000
    eip=804f1918 esp=f78a67fc ebp=00037897 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
    nt!MiRemovePageByColor+0xaf:
    804f1918 890cc2 mov [edx+eax*8],ecx ds:0023:80ffffe8=????????
    .trap
    Resetting default scope

    STACK_TEXT:
    f78a6814 805030bd 00000000 00008000 f78a6d38 nt!MiRemovePageByColor+0xaf
    f78a6844 80581140 806fc6c4 865aa1f8 00000000 nt!MmZeroPageThread+0x127
    f78a684c 865aa1f8 00000000 63694d00 6f736f72 nt!PoSystemIdleTimer
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    806fc6c4 04c2c974 01006800 50510000 00000d68 0x865aa1f8
    806fc6c4 04c2c974 01006800 50510000 00000d68 0x4c2c974
    c5835b5e 00000000 00000000 00000000 00000000 0x4c2c974


    FOLLOWUP_IP:
    nt!MiRemovePageByColor+af
    804f1918 890cc2 mov [edx+eax*8],ecx

    SYMBOL_STACK_INDEX: 0

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: nt!MiRemovePageByColor+af

    MODULE_NAME: nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 40b53739

    STACK_COMMAND: .trap fffffffff78a6788 ; kb

    IMAGE_NAME: memory_corruption

    FAILURE_BUCKET_ID: 0xA_W_EAXVAL_HWERR_nt!MiRemovePageByColor+af

    BUCKET_ID: 0xA_W_EAXVAL_HWERR_nt!MiRemovePageByColor+af

    Followup: MachineOwner
    ---------

    eax=ffdff13c ebx=0000000a ecx=865aa1f8 edx=40000000 esi=ffdff120 edi=80ffffe8
    eip=80543ac9 esp=f78a6754 ebp=f78a676c iopl=0 nv up ei ng nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!KeBugCheckEx+0x19:
    80543ac9 5d pop ebp
    ChildEBP RetAddr Args to Child
    f78a676c 804e2f58 0000000a 80ffffe8 00000002 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
    f78a676c 804f1918 0000000a 80ffffe8 00000002 nt!KiTrap0E+0x224 (FPO: [0,0] TrapFrame @ f78a6788)
    f78a6814 805030bd 00000000 00008000 f78a6d38 nt!MiRemovePageByColor+0xaf (FPO: [EBP 0x815b1e98] [0,3,0])
    f78a6844 80581140 806fc6c4 865aa1f8 00000000 nt!MmZeroPageThread+0x127 (FPO: [EBP 0x815b1e98] [0,8,4])
    f78a684c 865aa1f8 00000000 63694d00 6f736f72 nt!PoSystemIdleTimer
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    806fc6c4 04c2c974 01006800 50510000 00000d68 0x865aa1f8
    806fc6c4 04c2c974 01006800 50510000 00000d68 0x4c2c974
    c5835b5e 00000000 00000000 00000000 00000000 0x4c2c974
    start end module name
    804de000 80745000 nt ntkrnlmp.exe Wed May 26 19:32:57 2004 (40B53739)
    80745000 8076d000 hal halmacpi.dll Tue Mar 25 01:07:28 2003 (3E800030)
    bf800000 bf9c7000 win32k win32k.sys Mon Aug 09 17:48:07 2004 (4117FF27)
    bf9c7000 bfa1d680 ati2drad ati2drad.dll Tue Mar 25 03:43:37 2003 (3E8024C9)
    bff60000 bff7b000 RDPDD RDPDD.dll Tue Mar 25 14:12:05 2003 (3E80B815)
    bff80000 bff96000 dxg dxg.sys Tue Mar 25 03:46:23 2003 (3E80256F)
    f53e9000 f53fd440 naiavf5x naiavf5x.sys Mon Aug 04 20:08:00 2003 (3F2F0370)
    f567e000 f56ab000 Fastfat Fastfat.SYS Tue Mar 25 02:00:16 2003 (3E800C90)
    f5903000 f5962000 srv srv.sys Tue Mar 25 02:49:51 2003 (3E80182F)
    f5f2a000 f5f4c000 RDPWD RDPWD.SYS Tue Mar 25 01:03:00 2003 (3E7FFF24)
    f60e4000 f60ee000 TDTCP TDTCP.SYS Tue Mar 25 01:02:52 2003 (3E7FFF1C)
    f63d4000 f63d5000 afd afd.sys unavailable (00000000)
    f6543000 f655b000 Cdfs Cdfs.SYS Tue Mar 25 02:17:19 2003 (3E80108F)
    f6583000 f6596000 Fips Fips.SYS Tue Mar 25 02:54:59 2003 (3E801963)
    f6596000 f6601000 mrxsmb mrxsmb.sys Mon Oct 11 19:38:12 2004 (416B2774)
    f6601000 f662c000 rdbss rdbss.sys Mon Oct 11 19:38:09 2004 (416B2771)
    f6654000 f6689000 netbt netbt.sys Fri Jul 18 12:16:03 2003 (3F182B53)
    f6689000 f66eb000 tcpip tcpip.sys Tue Mar 25 02:04:01 2003 (3E800D71)
    f66eb000 f6707000 ipsec ipsec.sys Tue Mar 25 01:55:45 2003 (3E800B81)
    f6737000 f6740000 ndisuio ndisuio.sys Tue Mar 25 01:09:47 2003 (3E8000BB)
    f67c7000 f67da000 usbhub usbhub.sys Tue Mar 25 01:10:46 2003 (3E8000F6)
    f68a2000 f68d5000 update update.sys Tue Mar 25 02:59:59 2003 (3E801A8F)
    f68d5000 f6909000 rdpdr rdpdr.sys Tue Mar 25 01:09:30 2003 (3E8000AA)
    f69a9000 f69be000 raspptp raspptp.sys Tue Mar 25 02:19:09 2003 (3E8010FD)
    f69be000 f69d9000 ndiswan ndiswan.sys Tue Mar 25 02:48:19 2003 (3E8017D3)
    f69d9000 f69f0000 rasl2tp rasl2tp.sys Tue Mar 25 01:54:46 2003 (3E800B46)
    f69f0000 f6a1da80 cpqteam cpqteam.sys Wed Oct 20 02:01:28 2004 (41760D48)
    f6a1e000 f6a4c780 q57xp32 q57xp32.sys Sat Jun 19 18:30:49 2004 (40D4CCA9)
    f6a4d000 f6a6ee80 USBPORT USBPORT.SYS Tue Mar 25 01:10:43 2003 (3E8000F3)
    f6a6f000 f6a99000 ks ks.sys Tue Mar 25 02:47:36 2003 (3E8017A8)
    f6a99000 f6aad000 redbook redbook.sys Tue Mar 25 01:04:38 2003 (3E7FFF86)
    f6aad000 f6ac1000 cdrom cdrom.sys Tue Mar 25 01:05:18 2003 (3E7FFFAE)
    f6ac1000 f6ad9000 serial serial.sys Tue Mar 25 01:40:08 2003 (3E8007D8)
    f6af0000 f6b06000 i8042prt i8042prt.sys Tue Mar 25 03:01:43 2003 (3E801AF7)
    f6b06000 f6b52000 cpqasm2 cpqasm2.sys Tue May 18 12:59:39 2004 (40AA4F0B)
    f6b52000 f6b6b000 VIDEOPRT VIDEOPRT.SYS Tue Mar 25 01:08:02 2003 (3E800052)
    f6b6b000 f6bbed80 ati2mpad ati2mpad.sys Thu Jul 18 20:13:20 2002 (3D3767B0)
    f6bc3000 f6bc6e20 dump_cpqcissm dump_cpqcissm.sys Mon Feb 02 14:01:16 2004 (401EAC8C)
    f71f4000 f7216000 Mup Mup.sys Tue Mar 25 02:55:58 2003 (3E80199E)
    f7216000 f7257000 NDIS NDIS.sys Tue Mar 25 02:45:35 2003 (3E80172F)
    f7257000 f72f4000 Ntfs Ntfs.sys Tue Mar 25 01:40:05 2003 (3E8007D5)
    f72f4000 f7315000 KSecDD KSecDD.sys Tue Mar 25 01:05:39 2003 (3E7FFFC3)
    f7315000 f732b000 CLASSPNP CLASSPNP.SYS Tue Mar 25 01:38:14 2003 (3E800766)
    f732b000 f7346000 adpu160m adpu160m.sys Mon Sep 29 13:14:03 2003 (3F78766B)
    f7346000 f736c000 SCSIPORT SCSIPORT.SYS Tue Mar 25 02:01:25 2003 (3E800CD5)
    f736c000 f7393140 LsiCsb6 LsiCsb6.sys Thu Jul 31 15:38:06 2003 (3F297E2E)
    f7394000 f73b0000 atapi atapi.sys Tue Mar 25 01:04:48 2003 (3E7FFF90)
    f73b0000 f73d1000 volsnap volsnap.sys Tue Mar 25 01:05:47 2003 (3E7FFFCB)
    f73d1000 f73fb000 dmio dmio.sys Tue Mar 25 01:08:14 2003 (3E80005E)
    f73fb000 f7420000 ftdisk ftdisk.sys Tue Mar 25 01:05:26 2003 (3E7FFFB6)
    f7420000 f7435000 pci pci.sys Tue Mar 25 01:16:40 2003 (3E800258)
    f7435000 f7466000 ACPI ACPI.sys Tue Mar 25 01:16:21 2003 (3E800245)
    f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 01:13:00 2003 (3E80017C)
    f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 01:16:35 2003 (3E800253)
    f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Tue Mar 25 01:04:44 2003 (3E7FFF8C)
    f74b7000 f74c6000 MountMgr MountMgr.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
    f74c7000 f74d5000 PartMgr PartMgr.sys Tue Mar 25 02:04:02 2003 (3E800D72)
    f74d7000 f74df080 symc8xx symc8xx.sys Tue Sep 25 13:25:49 2001 (3BB0CC2D)
    f74e7000 f74f7000 symmpi symmpi.sys Wed May 26 11:30:13 2004 (40B4C615)
    f74f7000 f7506000 disk disk.sys Tue Mar 25 01:05:20 2003 (3E7FFFB0)
    f7507000 f7513000 Dfs Dfs.sys Tue Mar 25 01:09:52 2003 (3E8000C0)
    f7517000 f7520000 crcdisk crcdisk.sys Tue Mar 25 01:07:23 2003 (3E80002B)
    f7527000 f7530000 raspti raspti.sys Tue Mar 25 01:11:36 2003 (3E800128)
    f7537000 f7546000 termdd termdd.sys Tue Mar 25 01:02:52 2003 (3E7FFF1C)
    f7557000 f7565000 NDProxy NDProxy.SYS Tue Mar 25 01:11:30 2003 (3E800122)
    f7587000 f7588000 flpydisk flpydisk.sys unavailable (00000000)
    f7597000 f75a3000 vga vga.sys Tue Mar 25 01:08:03 2003 (3E800053)
    f75a7000 f75a8000 Msfs Msfs.SYS unavailable (00000000)
    f75b7000 f75c3000 processr processr.sys Tue Mar 25 01:07:36 2003 (3E800038)
    f75c7000 f75d0000 watchdog watchdog.sys Tue Mar 25 01:09:01 2003 (3E80008D)
    f75d7000 f75e4580 CPQCISSE CPQCISSE.sys Thu Mar 11 15:50:26 2004 (4050DF22)
    f75e7000 f75f3000 Npfs Npfs.SYS Tue Mar 25 01:08:59 2003 (3E80008B)
    f75f7000 f7606000 msgpc msgpc.sys Tue Mar 25 01:10:12 2003 (3E8000D4)
    f7607000 f7614000 wanarp wanarp.sys Tue Mar 25 01:11:22 2003 (3E80011A)
    f7617000 f7624000 netbios netbios.sys Tue Mar 25 01:09:53 2003 (3E8000C1)
    f7637000 f7640000 dump_scsiport dump_scsiport.sys Tue Mar 25 01:05:15 2003 (3E7FFFAB)
    f7647000 f7651000 Dxapi Dxapi.sys Tue Mar 25 01:06:01 2003 (3E7FFFD9)
    f7687000 f7691000 kbdclass kbdclass.sys Tue Mar 25 01:03:10 2003 (3E7FFF2E)
    f7697000 f76a1000 mouclass mouclass.sys Tue Mar 25 01:03:09 2003 (3E7FFF2D)
    f76a7000 f76b1000 serenum serenum.sys Tue Mar 25 01:04:01 2003 (3E7FFF61)
    f76b7000 f76c2000 fdc fdc.sys Tue Mar 25 01:04:31 2003 (3E7FFF7F)
    f76c7000 f76d0000 ndistapi ndistapi.sys Tue Mar 25 01:11:28 2003 (3E800120)
    f76d7000 f76e5000 raspppoe raspppoe.sys Tue Mar 25 01:11:37 2003 (3E800129)
    f76e7000 f76f2000 TDI TDI.SYS Tue Mar 25 01:14:28 2003 (3E8001D4)
    f76f7000 f7702000 ptilink ptilink.sys Tue Mar 25 01:03:51 2003 (3E7FFF57)
    f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 01:08:00 2003 (3E800050)
    f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 01:07:58 2003 (3E80004E)
    f7717000 f771e000 pciide pciide.sys Tue Mar 25 01:04:46 2003 (3E7FFF8E)
    f771f000 f7720000 dmload dmload.sys unavailable (00000000)
    f7727000 f772e080 sym_hi sym_hi.sys Wed Oct 03 18:48:12 2001 (3BBBA3BC)
    f7797000 f779e000 sysmgmt sysmgmt.sys Tue May 18 12:59:41 2004 (40AA4F0D)
    f77af000 f77b7000 OPRGHDLR OPRGHDLR.SYS Tue Mar 25 01:16:25 2003 (3E800249)
    f77c7000 f77cba20 CpqCiDrv CpqCiDrv.sys Fri Jul 11 10:32:03 2003 (3F0ED873)
    f77cf000 f77d3200 usbohci usbohci.sys Tue Mar 25 01:10:41 2003 (3E8000F1)
    f77d7000 f77df000 audstub audstub.sys Tue Mar 25 01:09:12 2003 (3E800098)
    f77ef000 f77f0000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
    f77f7000 f77f8000 Null Null.SYS unavailable (00000000)
    f77ff000 f7806000 Beep Beep.SYS Tue Mar 25 01:03:04 2003 (3E7FFF28)
    f7807000 f780f000 mnmdd mnmdd.SYS Tue Mar 25 01:07:53 2003 (3E800049)
    f780f000 f7817000 RDPCDD RDPCDD.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
    f7817000 f781f000 rasacd rasacd.sys Tue Mar 25 01:11:50 2003 (3E800136)
    f781f000 f7826000 dxgthk dxgthk.sys Tue Mar 25 01:05:52 2003 (3E7FFFD0)
    f7897000 f789af80 symc810 symc810.sys Fri Dec 08 11:40:59 2000 (3A311D2B)
    f789b000 f789ee20 cpqcissm cpqcissm.sys Mon Feb 02 14:01:16 2004 (401EAC8C)
    f789f000 f78a2460 cpqarry2 cpqarry2.sys Mon Nov 05 15:47:33 2001 (3BE708F5)
    f798f000 f7990200 swenum swenum.sys Tue Mar 25 01:03:22 2003 (3E7FFF3A)
    f7991000 f7992580 USBD USBD.SYS Tue Mar 25 01:10:39 2003 (3E8000EF)

    Unloaded modules:
    f7627000 f7635000 imapi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f77e7000 f77ef000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
     
  2. 2005/06/24
    ccieid10t

    ccieid10t Inactive Thread Starter

    Joined:
    2005/06/15
    Messages:
    5
    Likes Received:
    0
    Anybody that could help me out?
     

  3. to hide this advert.

  4. 2005/06/24
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Unfortunately the one member on this Board who can interpret these logs is currently unavailable due to work committments (we are all volunteers here).

    Our current advice - taken from here is to
    There is a suggestion in your report of memory corruption - I would be inclined to run the Windows Memory Diagnostic Tool
     
  5. 2005/06/24
    JoeHobart

    JoeHobart Inactive Alumni

    Joined:
    2004/05/19
    Messages:
    919
    Likes Received:
    1
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.