The bugcheck was: 0x0000000a(0x80ffffe8, 0x00000002, 0x00000001, 0x804f1918)

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\DUMPS\Mini061505-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_gdr.040410-1234
Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
Debug session time: Wed Jun 15 06:30:34.514 2005 (GMT-5)
System Uptime: 5 days 12:49:11.921
Loading Kernel Symbols
.........................................................................................................
Loading unloaded module list
..
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {80ffffe8, 2, 1, 804f1918}

Probably caused by : memory_corruption ( nt!MiRemovePageByColor+af )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 80ffffe8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804f1918, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 80ffffe8

CURRENT_IRQL: 2

FAULTING_IP:
nt!MiRemovePageByColor+af
804f1918 890cc2 mov [edx+eax*8],ecx

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 805030bd to 804f1918

TRAP_FRAME: f78a6788 -- (.trap fffffffff78a6788)
.trap fffffffff78a6788
ErrCode = 00000002
eax=fffffffd ebx=0000000a ecx=000271cb edx=81000000 esi=8128c8f0 edi=00000000
eip=804f1918 esp=f78a67fc ebp=0001b30a iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!MiRemovePageByColor+0xaf:
804f1918 890cc2 mov [edx+eax*8],ecx ds:0023:80ffffe8=????????
.trap
Resetting default scope

STACK_TEXT:
f78a6814 805030bd 00000000 00008000 f78a6d38 nt!MiRemovePageByColor+0xaf
f78a6844 80581140 806fc6c4 865aa1f8 00000000 nt!MmZeroPageThread+0x127
f78a684c 865aa1f8 00000000 63694d00 6f736f72 nt!PoSystemIdleTimer
WARNING: Frame IP not in any known module. Following frames may be wrong.
806fc6c4 04c2c974 01006800 50510000 00000d68 0x865aa1f8
806fc6c4 04c2c974 01006800 50510000 00000d68 0x4c2c974
c5835b5e 00000000 00000000 00000000 00000000 0x4c2c974


FOLLOWUP_IP:
nt!MiRemovePageByColor+af
804f1918 890cc2 mov [edx+eax*8],ecx

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!MiRemovePageByColor+af

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 40b53739

STACK_COMMAND: .trap fffffffff78a6788 ; kb

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_W_EAXVAL_HWERR_nt!MiRemovePageByColor+af

BUCKET_ID: 0xA_W_EAXVAL_HWERR_nt!MiRemovePageByColor+af

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=865aa1f8 edx=40000000 esi=ffdff120 edi=80ffffe8
eip=80543ac9 esp=f78a6754 ebp=f78a676c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
80543ac9 5d pop ebp
ChildEBP RetAddr Args to Child
f78a676c 804e2f58 0000000a 80ffffe8 00000002 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
f78a676c 804f1918 0000000a 80ffffe8 00000002 nt!KiTrap0E+0x224 (FPO: [0,0] TrapFrame @ f78a6788)
f78a6814 805030bd 00000000 00008000 f78a6d38 nt!MiRemovePageByColor+0xaf (FPO: [EBP 0x81117c18] [0,3,0])
f78a6844 80581140 806fc6c4 865aa1f8 00000000 nt!MmZeroPageThread+0x127 (FPO: [EBP 0x81117c18] [0,8,4])
f78a684c 865aa1f8 00000000 63694d00 6f736f72 nt!PoSystemIdleTimer
WARNING: Frame IP not in any known module. Following frames may be wrong.
806fc6c4 04c2c974 01006800 50510000 00000d68 0x865aa1f8
806fc6c4 04c2c974 01006800 50510000 00000d68 0x4c2c974
c5835b5e 00000000 00000000 00000000 00000000 0x4c2c974
start end module name
804de000 80745000 nt ntkrnlmp.exe Wed May 26 19:32:57 2004 (40B53739)
80745000 8076d000 hal halmacpi.dll Tue Mar 25 01:07:28 2003 (3E800030)
bf800000 bf9c7000 win32k win32k.sys Mon Aug 09 17:48:07 2004 (4117FF27)
bf9c7000 bfa1d680 ati2drad ati2drad.dll Tue Mar 25 03:43:37 2003 (3E8024C9)
bff80000 bff96000 dxg dxg.sys Tue Mar 25 03:46:23 2003 (3E80256F)
f5873000 f5887440 naiavf5x naiavf5x.sys Mon Aug 04 20:08:00 2003 (3F2F0370)
f5a68000 f5a95000 Fastfat Fastfat.SYS Tue Mar 25 02:00:16 2003 (3E800C90)
f5f95000 f5ff4000 srv srv.sys Tue Mar 25 02:49:51 2003 (3E80182F)
f6274000 f6296000 RDPWD RDPWD.SYS Tue Mar 25 01:03:00 2003 (3E7FFF24)
f641e000 f6428000 TDTCP TDTCP.SYS Tue Mar 25 01:02:52 2003 (3E7FFF1C)
f68fe000 f68ff000 afd afd.sys unavailable (00000000)
f6a2d000 f6a36000 ndisuio ndisuio.sys Tue Mar 25 01:09:47 2003 (3E8000BB)
f6a6d000 f6a85000 Cdfs Cdfs.SYS Tue Mar 25 02:17:19 2003 (3E80108F)
f6aad000 f6ac0000 Fips Fips.SYS Tue Mar 25 02:54:59 2003 (3E801963)
f6ac0000 f6b2b000 mrxsmb mrxsmb.sys Mon Oct 11 19:38:12 2004 (416B2774)
f6b2b000 f6b56000 rdbss rdbss.sys Mon Oct 11 19:38:09 2004 (416B2771)
f6b7e000 f6bb3000 netbt netbt.sys Fri Jul 18 12:16:03 2003 (3F182B53)
f6bb3000 f6c15000 tcpip tcpip.sys Tue Mar 25 02:04:01 2003 (3E800D71)
f6c15000 f6c31000 ipsec ipsec.sys Tue Mar 25 01:55:45 2003 (3E800B81)
f6d24000 f6d37000 usbhub usbhub.sys Tue Mar 25 01:10:46 2003 (3E8000F6)
f6dff000 f6e32000 update update.sys Tue Mar 25 02:59:59 2003 (3E801A8F)
f6e4a000 f6e4de20 dump_cpqcissm dump_cpqcissm.sys Mon Feb 02 14:01:16 2004 (401EAC8C)
f6e5a000 f6e8e000 rdpdr rdpdr.sys Tue Mar 25 01:09:30 2003 (3E8000AA)
f6eee000 f6ef8000 Dxapi Dxapi.sys Tue Mar 25 01:06:01 2003 (3E7FFFD9)
f6f2e000 f6f43000 raspptp raspptp.sys Tue Mar 25 02:19:09 2003 (3E8010FD)
f6f43000 f6f5e000 ndiswan ndiswan.sys Tue Mar 25 02:48:19 2003 (3E8017D3)
f6f5e000 f6f75000 rasl2tp rasl2tp.sys Tue Mar 25 01:54:46 2003 (3E800B46)
f6f75000 f6fa2a80 cpqteam cpqteam.sys Wed Oct 20 02:01:28 2004 (41760D48)
f6fa3000 f6fd1780 q57xp32 q57xp32.sys Sat Jun 19 18:30:49 2004 (40D4CCA9)
f6fd2000 f6ff3e80 USBPORT USBPORT.SYS Tue Mar 25 01:10:43 2003 (3E8000F3)
f700b000 f7035000 ks ks.sys Tue Mar 25 02:47:36 2003 (3E8017A8)
f7035000 f7049000 redbook redbook.sys Tue Mar 25 01:04:38 2003 (3E7FFF86)
f7049000 f705d000 cdrom cdrom.sys Tue Mar 25 01:05:18 2003 (3E7FFFAE)
f705d000 f7075000 serial serial.sys Tue Mar 25 01:40:08 2003 (3E8007D8)
f7075000 f708b000 i8042prt i8042prt.sys Tue Mar 25 03:01:43 2003 (3E801AF7)
f708b000 f70d7000 cpqasm2 cpqasm2.sys Tue May 18 12:59:39 2004 (40AA4F0B)
f70d7000 f70f0000 VIDEOPRT VIDEOPRT.SYS Tue Mar 25 01:08:02 2003 (3E800052)
f70f0000 f7143d80 ati2mpad ati2mpad.sys Thu Jul 18 20:13:20 2002 (3D3767B0)
f71f4000 f7216000 Mup Mup.sys Tue Mar 25 02:55:58 2003 (3E80199E)
f7216000 f7257000 NDIS NDIS.sys Tue Mar 25 02:45:35 2003 (3E80172F)
f7257000 f72f4000 Ntfs Ntfs.sys Tue Mar 25 01:40:05 2003 (3E8007D5)
f72f4000 f7315000 KSecDD KSecDD.sys Tue Mar 25 01:05:39 2003 (3E7FFFC3)
f7315000 f732b000 CLASSPNP CLASSPNP.SYS Tue Mar 25 01:38:14 2003 (3E800766)
f732b000 f7346000 adpu160m adpu160m.sys Mon Sep 29 13:14:03 2003 (3F78766B)
f7346000 f736c000 SCSIPORT SCSIPORT.SYS Tue Mar 25 02:01:25 2003 (3E800CD5)
f736c000 f7393140 LsiCsb6 LsiCsb6.sys Thu Jul 31 15:38:06 2003 (3F297E2E)
f7394000 f73b0000 atapi atapi.sys Tue Mar 25 01:04:48 2003 (3E7FFF90)
f73b0000 f73d1000 volsnap volsnap.sys Tue Mar 25 01:05:47 2003 (3E7FFFCB)
f73d1000 f73fb000 dmio dmio.sys Tue Mar 25 01:08:14 2003 (3E80005E)
f73fb000 f7420000 ftdisk ftdisk.sys Tue Mar 25 01:05:26 2003 (3E7FFFB6)
f7420000 f7435000 pci pci.sys Tue Mar 25 01:16:40 2003 (3E800258)
f7435000 f7466000 ACPI ACPI.sys Tue Mar 25 01:16:21 2003 (3E800245)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 01:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 01:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Tue Mar 25 01:04:44 2003 (3E7FFF8C)
f74b7000 f74c6000 MountMgr MountMgr.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
f74c7000 f74d5000 PartMgr PartMgr.sys Tue Mar 25 02:04:02 2003 (3E800D72)
f74d7000 f74df080 symc8xx symc8xx.sys Tue Sep 25 13:25:49 2001 (3BB0CC2D)
f74e7000 f74f7000 symmpi symmpi.sys Wed May 26 11:30:13 2004 (40B4C615)
f74f7000 f7506000 disk disk.sys Tue Mar 25 01:05:20 2003 (3E7FFFB0)
f7507000 f7513000 Dfs Dfs.sys Tue Mar 25 01:09:52 2003 (3E8000C0)
f7517000 f7520000 crcdisk crcdisk.sys Tue Mar 25 01:07:23 2003 (3E80002B)
f7527000 f7535000 NDProxy NDProxy.SYS Tue Mar 25 01:11:30 2003 (3E800122)
f7557000 f7561000 flpydisk flpydisk.sys Tue Mar 25 01:04:32 2003 (3E7FFF80)
f7567000 f7573000 vga vga.sys Tue Mar 25 01:08:03 2003 (3E800053)
f7577000 f7578000 Msfs Msfs.SYS unavailable (00000000)
f7587000 f7593000 processr processr.sys Tue Mar 25 01:07:36 2003 (3E800038)
f7597000 f75a0000 watchdog watchdog.sys Tue Mar 25 01:09:01 2003 (3E80008D)
f75a7000 f75b4580 CPQCISSE CPQCISSE.sys Thu Mar 11 15:50:26 2004 (4050DF22)
f75b7000 f75c3000 Npfs Npfs.SYS Tue Mar 25 01:08:59 2003 (3E80008B)
f75c7000 f75d6000 msgpc msgpc.sys Tue Mar 25 01:10:12 2003 (3E8000D4)
f75d7000 f75e4000 wanarp wanarp.sys Tue Mar 25 01:11:22 2003 (3E80011A)
f75e7000 f75f4000 netbios netbios.sys Tue Mar 25 01:09:53 2003 (3E8000C1)
f7637000 f7640000 dump_scsiport dump_scsiport.sys Tue Mar 25 01:05:15 2003 (3E7FFFAB)
f7657000 f7661000 kbdclass kbdclass.sys Tue Mar 25 01:03:10 2003 (3E7FFF2E)
f7667000 f7671000 mouclass mouclass.sys Tue Mar 25 01:03:09 2003 (3E7FFF2D)
f7677000 f7681000 serenum serenum.sys Tue Mar 25 01:04:01 2003 (3E7FFF61)
f7687000 f7692000 fdc fdc.sys Tue Mar 25 01:04:31 2003 (3E7FFF7F)
f7697000 f76a0000 ndistapi ndistapi.sys Tue Mar 25 01:11:28 2003 (3E800120)
f76a7000 f76b5000 raspppoe raspppoe.sys Tue Mar 25 01:11:37 2003 (3E800129)
f76b7000 f76c2000 TDI TDI.SYS Tue Mar 25 01:14:28 2003 (3E8001D4)
f76c7000 f76d2000 ptilink ptilink.sys Tue Mar 25 01:03:51 2003 (3E7FFF57)
f76d7000 f76e0000 raspti raspti.sys Tue Mar 25 01:11:36 2003 (3E800128)
f76e7000 f76f6000 termdd termdd.sys Tue Mar 25 01:02:52 2003 (3E7FFF1C)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 01:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 01:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 01:04:46 2003 (3E7FFF8E)
f771f000 f7720000 dmload dmload.sys unavailable (00000000)
f7727000 f772e080 sym_hi sym_hi.sys Wed Oct 03 18:48:12 2001 (3BBBA3BC)
f77a7000 f77ae000 sysmgmt sysmgmt.sys Tue May 18 12:59:41 2004 (40AA4F0D)
f77bf000 f77c7000 OPRGHDLR OPRGHDLR.SYS Tue Mar 25 01:16:25 2003 (3E800249)
f77d7000 f77dba20 CpqCiDrv CpqCiDrv.sys Fri Jul 11 10:32:03 2003 (3F0ED873)
f77df000 f77e3200 usbohci usbohci.sys Tue Mar 25 01:10:41 2003 (3E8000F1)
f77e7000 f77ef000 audstub audstub.sys Tue Mar 25 01:09:12 2003 (3E800098)
f7807000 f7808000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
f780f000 f7810000 Null Null.SYS unavailable (00000000)
f7817000 f781e000 Beep Beep.SYS Tue Mar 25 01:03:04 2003 (3E7FFF28)
f781f000 f7827000 mnmdd mnmdd.SYS Tue Mar 25 01:07:53 2003 (3E800049)
f7827000 f782f000 RDPCDD RDPCDD.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
f782f000 f7837000 rasacd rasacd.sys Tue Mar 25 01:11:50 2003 (3E800136)
f7857000 f785e000 dxgthk dxgthk.sys Tue Mar 25 01:05:52 2003 (3E7FFFD0)
f7897000 f789af80 symc810 symc810.sys Fri Dec 08 11:40:59 2000 (3A311D2B)
f789b000 f789ee20 cpqcissm cpqcissm.sys Mon Feb 02 14:01:16 2004 (401EAC8C)
f789f000 f78a2460 cpqarry2 cpqarry2.sys Mon Nov 05 15:47:33 2001 (3BE708F5)
f7999000 f799a200 swenum swenum.sys Tue Mar 25 01:03:22 2003 (3E7FFF3A)
f79a1000 f79a2580 USBD USBD.SYS Tue Mar 25 01:10:39 2003 (3E8000EF)

Unloaded modules:
f75f7000 f7605000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77ff000 f7807000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

I htink this is a drivers software problem.
Did you change anything before that?!

 

Thanks for the quick reply. I'll check up with microsoft.

To answer the other questions if I have installed any drivers? No, this is a production server that monitors our customers network.

It didn't have service pack 1 loaded until today. That could be the reason.

 

Where on the ms site does it have the open a ticket link?