Windows 2003 server System Errors = reboot

I just noticed that a server I maintain has been rebooting. When I checked the logs, I found this:

Type Date Time Source Category Event User Computer
Error 4/27/2007 9:53:23 AM System Error (102) 1003 N/A

Description:
Error code 100000d1, parameter1 00000008, parameter2 00000009, parameter3 00000000, parameter4 f7369866.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

So I set the computer to perform a minidump and analyzed the dump with debugwiz.exe found on this site. Here is the debuglog.txt:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [E:\WINDOWS\Minidump\Mini042707-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: E:\WINDOWS;E:\WINDOWS\system32;E:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_gdr.070304-2232
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Fri Apr 27 08:17:09.609 2007 (GMT-7)
System Uptime: 0 days 2:52:59.343
Loading Kernel Symbols
..................................................................................................................
Loading User Symbols
Loading unloaded module list
..
*** ERROR: Module load completed but symbols could not be loaded for aarich.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000D1, {8, 9, 0, f7369866}

Probably caused by : aarich.sys ( aarich+1d866 )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000008, memory referenced
Arg2: 00000009, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: f7369866, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 00000008

CURRENT_IRQL: 9

FAULTING_IP:
aarich+1d866
f7369866 8b6b08 mov ebp,dword ptr [ebx+8]

CUSTOMER_CRASH_COUNT: 3

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xD1

PROCESS_NAME: Idle

LAST_CONTROL_TRANSFER: from f7368d19 to f7369866

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
808a3484 f7368d19 866decc8 8671b450 86716004 aarich+0x1d866
00000000 00000000 00000000 00000000 00000000 aarich+0x1cd19


STACK_COMMAND: kb

FOLLOWUP_IP:
aarich+1d866
f7369866 8b6b08 mov ebp,dword ptr [ebx+8]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: aarich

IMAGE_NAME: aarich.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3f1ee8c8

SYMBOL_NAME: aarich+1d866

FAILURE_BUCKET_ID: 0xD1_aarich+1d866

BUCKET_ID: 0xD1_aarich+1d866

Followup: MachineOwner
---------

eax=00000000 ebx=00000000 ecx=00000001 edx=0000000a esi=866decc8 edi=866decc8
eip=f7369866 esp=808a3474 ebp=866af2b8 iopl=0 nv up ei pl nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010203
aarich+0x1d866:
f7369866 8b6b08 mov ebp,dword ptr [ebx+8] ds:0023:00000008=????????
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
808a3484 f7368d19 866decc8 8671b450 86716004 aarich+0x1d866
00000000 00000000 00000000 00000000 00000000 aarich+0x1cd19
start end module name
80800000 80a75000 nt ntkrnlmp.exe Mon Mar 05 01:39:30 2007 (45EBE552)
80a75000 80aa1000 hal halmacpi.dll Thu Mar 24 17:28:37 2005 (42435B35)
bf800000 bf9d1000 win32k win32k.sys Thu Mar 01 04:33:30 2007 (45E6C81A)
bf9d1000 bf9e7000 dxg dxg.sys Thu Mar 24 17:27:25 2005 (42435AED)
bf9e7000 bfa3d680 ati2drad ati2drad.dll Thu Mar 24 19:30:34 2005 (424377CA)
f49fa000 f4a27000 RDPWD RDPWD.SYS Wed Jun 15 08:33:14 2005 (42B04A3A)
f4f9f000 f4fc9000 Fastfat Fastfat.SYS Thu Mar 24 17:40:20 2005 (42435DF4)
f5181000 f51a8800 mfehidk mfehidk.sys Wed Nov 22 14:53:25 2006 (4564D4E5)
f51f9000 f5204000 TDTCP TDTCP.SYS Thu Mar 24 17:27:15 2005 (42435AE3)
f5569000 f55b9000 HTTP HTTP.sys Thu Mar 24 17:40:36 2005 (42435E04)
f56d1000 f573d000 srv srv.sys Fri Sep 01 07:32:26 2006 (44F8447A)
f58a5000 f58d0000 dump_fasttx2k dump_fasttx2k.sys Wed Jun 04 10:19:32 2003 (3EDE2A24)
f58d0000 f58e5000 Cdfs Cdfs.SYS Thu Mar 24 17:40:55 2005 (42435E17)
f621a000 f6221000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
f636a000 f6379f00 mfeavfk mfeavfk.sys Wed Nov 22 14:55:05 2006 (4564D549)
f647a000 f648b000 Fips Fips.SYS Thu Mar 24 17:40:33 2005 (42435E01)
f648b000 f650b000 mrxsmb mrxsmb.sys Mon May 08 10:18:45 2006 (445F7D75)
f650b000 f6544000 rdbss rdbss.sys Mon May 08 10:18:53 2006 (445F7D7D)
f6544000 f6545000 afd afd.sys unavailable (00000000)
f656e000 f659f000 netbt netbt.sys Thu Mar 24 17:40:31 2005 (42435DFF)
f65df000 f65e9000 dump_scsiport dump_scsiport.sys Thu Mar 24 17:28:56 2005 (42435B48)
f661f000 f6629000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
f662f000 f6638000 ndisuio ndisuio.sys Thu Mar 24 17:33:16 2005 (42435C4C)
f663f000 f66a0000 tcpip tcpip.sys Tue May 23 18:02:22 2006 (4473B09E)
f66a0000 f66b9000 ipsec ipsec.sys Thu Mar 24 17:40:49 2005 (42435E11)
f6701000 f6713000 mozypro mozypro.sys Mon Apr 16 08:28:10 2007 (4623960A)
f673b000 f6741300 HIDPARSE HIDPARSE.SYS Thu Mar 24 17:30:36 2005 (42435BAC)
f6773000 f6781020 mfeapfk mfeapfk.sys Wed Nov 22 14:54:19 2006 (4564D51B)
f67b3000 f67c1000 HIDCLASS HIDCLASS.SYS Tue Mar 25 00:10:17 2003 (3E8000D9)
f684b000 f6856060 mfetdik mfetdik.sys Wed Nov 22 14:54:10 2006 (4564D512)
f68ab000 f68ac000 flpydisk flpydisk.sys unavailable (00000000)
f68eb000 f68f4000 hidusb hidusb.sys Tue Mar 25 00:10:17 2003 (3E8000D9)
f690b000 f690c000 Msfs Msfs.SYS unavailable (00000000)
f692b000 f6938000 wanarp wanarp.sys Thu Mar 24 17:34:07 2005 (42435C7F)
f696b000 f6979000 msgpc msgpc.sys Thu Mar 24 17:33:31 2005 (42435C5B)
f698b000 f699f000 usbhub usbhub.sys Thu Mar 24 17:30:46 2005 (42435BB6)
f69ba000 f69fa000 update update.sys Thu Mar 24 17:40:27 2005 (42435DFB)
f69fa000 f6a31000 rdpdr rdpdr.sys Thu Mar 24 17:30:20 2005 (42435B9C)
f6a31000 f6a44000 raspptp raspptp.sys Thu Mar 24 17:40:43 2005 (42435E0B)
f6a44000 f6a5e000 ndiswan ndiswan.sys Thu Mar 24 17:40:46 2005 (42435E0E)
f6a5e000 f6a73000 rasl2tp rasl2tp.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f6a73000 f6a9b000 ks ks.sys Thu Mar 24 17:41:03 2005 (42435E1F)
f6a9b000 f6aaf000 redbook redbook.sys Thu Mar 24 17:28:46 2005 (42435B3E)
f6aaf000 f6ac4000 cdrom cdrom.sys Thu Mar 24 17:28:57 2005 (42435B49)
f6ac4000 f6adc000 parport parport.sys Thu Mar 24 17:28:25 2005 (42435B29)
f6adc000 f6af1000 serial serial.sys Thu Mar 24 17:28:29 2005 (42435B2D)
f6af1000 f6b04000 i8042prt i8042prt.sys Thu Mar 24 17:41:05 2005 (42435E21)
f6b04000 f6b27800 e100b325 e100b325.sys Tue Mar 04 11:56:25 2003 (3E6504E9)
f6b28000 f6b43000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 17:29:53 2005 (42435B81)
f6b43000 f6b96d80 ati2mpad ati2mpad.sys Thu Jul 18 18:13:20 2002 (3D3767B0)
f6b97000 f6bc1000 USBPORT USBPORT.SYS Thu Mar 24 17:30:43 2005 (42435BB3)
f6c21000 f6c2a000 raspti raspti.sys Thu Mar 24 17:34:16 2005 (42435C88)
f6c31000 f6c40000 intelppm intelppm.sys Thu Mar 24 17:28:40 2005 (42435B38)
f6c41000 f6c50000 termdd termdd.sys Thu Mar 24 17:27:15 2005 (42435AE3)
f6c61000 f6c6e000 Npfs Npfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
f6c91000 f6c9f000 NDProxy NDProxy.SYS Thu Mar 24 17:34:13 2005 (42435C85)
f71b9000 f71d8000 Mup Mup.sys Thu Mar 24 17:40:49 2005 (42435E11)
f71d8000 f720e000 NDIS NDIS.sys Thu Mar 24 17:40:26 2005 (42435DFA)
f720e000 f72a3000 Ntfs Ntfs.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f72a3000 f72ca000 KSecDD KSecDD.sys Thu Mar 24 17:28:53 2005 (42435B45)
f72ca000 f72ef000 fltmgr fltmgr.sys Mon Aug 21 02:59:45 2006 (44E98411)
f72ef000 f7302000 CLASSPNP CLASSPNP.SYS Thu Mar 24 17:40:23 2005 (42435DF7)
f7302000 f732d000 fasttx2k fasttx2k.sys Wed Jun 04 10:19:32 2003 (3EDE2A24)
f732d000 f734c000 SCSIPORT SCSIPORT.SYS Thu Mar 24 17:40:26 2005 (42435DFA)
f734c000 f7382a00 aarich aarich.sys Wed Jul 23 12:58:00 2003 (3F1EE8C8)
f7383000 f739f000 atapi atapi.sys Thu Mar 24 17:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 17:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 17:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 17:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 17:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 17:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 17:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 17:40:34 2005 (42435E02)
f74d7000 f74e7000 disk disk.sys Thu Mar 24 17:28:58 2005 (42435B4A)
f74e7000 f74f3000 Dfs Dfs.sys Thu Mar 24 17:30:28 2005 (42435BA4)
f74f7000 f7501000 crcdisk crcdisk.sys Thu Mar 24 17:29:40 2005 (42435B74)
f7507000 f7517000 agp440 agp440.sys Thu Mar 24 17:34:11 2005 (42435C83)
f7527000 f7528000 fdc fdc.sys unavailable (00000000)
f7557000 f7560000 watchdog watchdog.sys Thu Mar 24 17:30:19 2005 (42435B9B)
f7567000 f7571000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f7577000 f7581000 serenum serenum.sys Thu Mar 24 17:28:27 2005 (42435B2B)
f7587000 f7591000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f75c7000 f75d2000 ptilink ptilink.sys Thu Mar 24 17:28:25 2005 (42435B29)
f7637000 f7640000 mssmbios mssmbios.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7647000 f7653000 vga vga.sys Thu Mar 24 17:29:54 2005 (42435B82)
f7677000 f7686000 raspppoe raspppoe.sys Thu Mar 24 17:34:16 2005 (42435C88)
f76a7000 f76b4000 netbios netbios.sys Thu Mar 24 17:33:21 2005 (42435C51)
f76c7000 f76d5000 imapi imapi.sys Thu Mar 24 17:29:10 2005 (42435B56)
f76d7000 f76e2000 TDI TDI.SYS Thu Mar 24 17:35:34 2005 (42435CD6)
f76e7000 f76f0000 ndistapi ndistapi.sys Thu Mar 24 17:34:11 2005 (42435C83)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 00:04:46 2003 (3E7FFF8E)
f771f000 f7726000 intelide intelide.sys Thu Mar 24 17:28:48 2005 (42435B40)
f7727000 f7728000 dmload dmload.sys unavailable (00000000)
f7737000 f773da00 usbehci usbehci.sys Thu Mar 24 17:30:43 2005 (42435BB3)
f776f000 f7777000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f7777000 f7778000 Null Null.SYS unavailable (00000000)
f77a7000 f77ae000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
f77af000 f77b7000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
f77b7000 f77be000 parvdm parvdm.sys Tue Mar 25 00:03:49 2003 (3E7FFF55)
f7817000 f781f000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f782f000 f7837000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
f783f000 f7840000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
f784f000 f7855a20 mfebopk mfebopk.sys Wed Nov 22 14:55:32 2006 (4564D564)
f788f000 f7894180 usbuhci usbuhci.sys Thu Mar 24 17:30:45 2005 (42435BB5)
f7897000 f7899800 compbatt compbatt.sys Tue Mar 25 00:16:28 2003 (3E80024C)
f789b000 f789e900 BATTC BATTC.SYS Thu Mar 24 17:34:07 2005 (42435C7F)
f798f000 f7990780 vnccom vnccom.SYS Sat Jun 26 04:22:24 2004 (40DD5C70)
f7a05000 f7a06280 vncdrv vncdrv.sys Sat Jun 26 04:22:17 2004 (40DD5C69)
f7a07000 f7a08280 swenum swenum.sys Thu Mar 24 17:27:42 2005 (42435AFE)
f7a09000 f7a0a580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)

Unloaded modules:
f7bd8000 f7bd9000 FTEVTBDG.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7807000 f780f000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

I'm not sure if the computer has a bluescreen but I do know that it is sporadically rebooting around 6 times a day.

This started happening on 4/23/07. The first error log was at 9:20 AM. No new hardware has been added. However Microsoft updates are done on a regular basis. I did install MozyPro backup software on 4/25/07, but I doubt thats the problem, as it was after the problems started happening.

Any help in figuring out what is causing this would be greatly appreciated.

Joe

 

Arie,

Thank you for your reply. I found that link earlier, but wanted a second opinion, especially since the server in question is NOT a Dell. It is a custom built (not by me), with a drive controller that seems to be similar to to what Dell used.

After reading on the Microsoft site about the hotfix, I decided to give it a shot. I have installed and rebooted the machine, with no problems so far. I will continue to monitor the server for the next few days. Hopefully this fixed the problem.

Again, thank you for your reply, I really appreciate it.

Joe

 

Well, seems like the hotfix did NOT solve the problem. The server rebooted itself just before 5:14am this morning.

Any other suggestions on troubleshooting this?

Todays dumplog looks similar to yesterdays, and still points that that aarich.sys.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [E:\WINDOWS\Minidump\Mini042807-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: E:\WINDOWS;E:\WINDOWS\system32;E:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_qfe.070304-2232
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af928
Debug session time: Sat Apr 28 05:13:55.656 2007 (GMT-7)
System Uptime: 0 days 10:20:39.406
Loading Kernel Symbols
.....................................................................................................................
Loading User Symbols
Loading unloaded module list
..
*** ERROR: Module load completed but symbols could not be loaded for aarich.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000D1, {8, 9, 0, f7369866}

Probably caused by : aarich.sys ( aarich+1d866 )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000008, memory referenced
Arg2: 00000009, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: f7369866, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 00000008

CURRENT_IRQL: 9

FAULTING_IP:
aarich+1d866
f7369866 8b6b08 mov ebp,dword ptr [ebx+8]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xD1

PROCESS_NAME: Idle

LAST_CONTROL_TRANSFER: from f7368d19 to f7369866

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
808a3484 f7368d19 866e1ae4 86747bf8 86725004 aarich+0x1d866
00000000 00000000 00000000 00000000 00000000 aarich+0x1cd19


STACK_COMMAND: kb

FOLLOWUP_IP:
aarich+1d866
f7369866 8b6b08 mov ebp,dword ptr [ebx+8]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: aarich

IMAGE_NAME: aarich.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3f1ee8c8

SYMBOL_NAME: aarich+1d866

FAILURE_BUCKET_ID: 0xD1_aarich+1d866

BUCKET_ID: 0xD1_aarich+1d866

Followup: MachineOwner
---------

eax=00000000 ebx=00000000 ecx=00000001 edx=0000000a esi=866e1ae4 edi=866e1ae4
eip=f7369866 esp=808a3474 ebp=866af2b8 iopl=0 nv up ei pl nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010203
aarich+0x1d866:
f7369866 8b6b08 mov ebp,dword ptr [ebx+8] ds:0023:00000008=????????
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
808a3484 f7368d19 866e1ae4 86747bf8 86725004 aarich+0x1d866
00000000 00000000 00000000 00000000 00000000 aarich+0x1cd19
start end module name
80800000 80a77000 nt ntkrnlmp.exe Mon Mar 05 01:55:35 2007 (45EBE917)
80a77000 80aa3000 hal halmacpi.dll Thu Mar 24 17:28:37 2005 (42435B35)
bf800000 bf9d1000 win32k win32k.sys Thu Mar 01 04:33:30 2007 (45E6C81A)
bf9d1000 bf9e7000 dxg dxg.sys Thu Mar 24 17:27:25 2005 (42435AED)
bf9e7000 bfa3d680 ati2drad ati2drad.dll Thu Mar 24 19:30:34 2005 (424377CA)
bfa3e000 bfa41200 vncdrv_bfa3e000 vncdrv.dll Fri Jun 10 13:02:13 2005 (42A9F1C5)
bfa42000 bfa43680 vnchelp vnchelp.dll Sat Jun 26 04:21:04 2004 (40DD5C20)
bff60000 bff7e000 RDPDD RDPDD.dll Thu Mar 24 19:30:48 2005 (424377D8)
f48e1000 f490e000 RDPWD RDPWD.SYS Wed Jun 15 08:33:14 2005 (42B04A3A)
f490e000 f4919000 TDTCP TDTCP.SYS Thu Mar 24 17:27:15 2005 (42435AE3)
f5016000 f5040000 Fastfat Fastfat.SYS Thu Mar 24 17:40:20 2005 (42435DF4)
f5068000 f508f800 mfehidk mfehidk.sys Wed Nov 22 14:53:25 2006 (4564D4E5)
f50f0000 f50fe020 mfeapfk mfeapfk.sys Wed Nov 22 14:54:19 2006 (4564D51B)
f5518000 f5568000 HTTP HTTP.sys Thu Mar 24 17:40:36 2005 (42435E04)
f5680000 f56ec000 srv srv.sys Fri Sep 01 07:32:26 2006 (44F8447A)
f582c000 f5857000 dump_fasttx2k dump_fasttx2k.sys Wed Jun 04 10:19:32 2003 (3EDE2A24)
f5857000 f586c000 Cdfs Cdfs.SYS Thu Mar 24 17:40:55 2005 (42435E17)
f597e000 f597f000 parvdm parvdm.sys unavailable (00000000)
f59b6000 f59bca20 mfebopk mfebopk.sys Wed Nov 22 14:55:32 2006 (4564D564)
f5b00000 f5b07000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
f5b7c000 f5b85000 ndisuio ndisuio.sys Thu Mar 24 17:33:16 2005 (42435C4C)
f5d56000 f5d65f00 mfeavfk mfeavfk.sys Wed Nov 22 14:55:05 2006 (4564D549)
f5e8e000 f5e9f000 Fips Fips.SYS Thu Mar 24 17:40:33 2005 (42435E01)
f5e9f000 f5f1f000 mrxsmb mrxsmb.sys Mon May 08 10:18:45 2006 (445F7D75)
f5fbf000 f5ff8000 rdbss rdbss.sys Mon May 08 10:18:53 2006 (445F7D7D)
f5ff8000 f5ff9000 afd afd.sys unavailable (00000000)
f6022000 f6053000 netbt netbt.sys Thu Mar 24 17:40:31 2005 (42435DFF)
f607b000 f60dc000 tcpip tcpip.sys Tue May 23 18:02:22 2006 (4473B09E)
f60dc000 f60f5000 ipsec ipsec.sys Thu Mar 24 17:40:49 2005 (42435E11)
f6115000 f6127000 mozypro mozypro.sys Mon Apr 16 08:28:10 2007 (4623960A)
f616f000 f6175300 HIDPARSE HIDPARSE.SYS Thu Mar 24 17:30:36 2005 (42435BAC)
f6177000 f6185000 msgpc msgpc.sys Thu Mar 24 17:33:31 2005 (42435C5B)
f6197000 f61a2060 mfetdik mfetdik.sys Wed Nov 22 14:54:10 2006 (4564D512)
f61a7000 f61b4000 netbios netbios.sys Thu Mar 24 17:33:21 2005 (42435C51)
f61d7000 f61e4000 wanarp wanarp.sys Thu Mar 24 17:34:07 2005 (42435C7F)
f61e7000 f61f3000 vga vga.sys Thu Mar 24 17:29:54 2005 (42435B82)
f62ef000 f62f0000 flpydisk flpydisk.sys unavailable (00000000)
f631a000 f631b000 Msfs Msfs.SYS unavailable (00000000)
f632a000 f6334000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
f63aa000 f63b8000 HIDCLASS HIDCLASS.SYS Tue Mar 25 00:10:17 2003 (3E8000D9)
f63ba000 f63ce000 usbhub usbhub.sys Thu Mar 24 17:30:46 2005 (42435BB6)
f63ce000 f640e000 update update.sys Thu Mar 24 17:40:27 2005 (42435DFB)
f640e000 f6445000 rdpdr rdpdr.sys Thu Mar 24 17:30:20 2005 (42435B9C)
f6445000 f6458000 raspptp raspptp.sys Thu Mar 24 17:40:43 2005 (42435E0B)
f6458000 f6472000 ndiswan ndiswan.sys Thu Mar 24 17:40:46 2005 (42435E0E)
f6472000 f6487000 rasl2tp rasl2tp.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f6487000 f64af000 ks ks.sys Thu Mar 24 17:41:03 2005 (42435E1F)
f64af000 f64c3000 redbook redbook.sys Thu Mar 24 17:28:46 2005 (42435B3E)
f64c3000 f64d8000 cdrom cdrom.sys Thu Mar 24 17:28:57 2005 (42435B49)
f64d8000 f64f0000 parport parport.sys Thu Mar 24 17:28:25 2005 (42435B29)
f64f0000 f6505000 serial serial.sys Thu Mar 24 17:28:29 2005 (42435B2D)
f6505000 f6518000 i8042prt i8042prt.sys Thu Mar 24 17:41:05 2005 (42435E21)
f6518000 f653b800 e100b325 e100b325.sys Tue Mar 04 11:56:25 2003 (3E6504E9)
f653c000 f6557000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 17:29:53 2005 (42435B81)
f6557000 f65aad80 ati2mpad ati2mpad.sys Thu Jul 18 18:13:20 2002 (3D3767B0)
f65ab000 f65d5000 USBPORT USBPORT.SYS Thu Mar 24 17:30:43 2005 (42435BB3)
f6c7d000 f6c8b000 NDProxy NDProxy.SYS Thu Mar 24 17:34:13 2005 (42435C85)
f71b9000 f71d8000 Mup Mup.sys Thu Mar 24 17:40:49 2005 (42435E11)
f71d8000 f720e000 NDIS NDIS.sys Thu Mar 24 17:40:26 2005 (42435DFA)
f720e000 f72a3000 Ntfs Ntfs.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f72a3000 f72ca000 KSecDD KSecDD.sys Thu Mar 24 17:28:53 2005 (42435B45)
f72ca000 f72ef000 fltmgr fltmgr.sys Mon Aug 21 02:59:45 2006 (44E98411)
f72ef000 f7302000 CLASSPNP CLASSPNP.SYS Thu Mar 24 17:40:23 2005 (42435DF7)
f7302000 f732d000 fasttx2k fasttx2k.sys Wed Jun 04 10:19:32 2003 (3EDE2A24)
f732d000 f734c000 SCSIPORT SCSIPORT.SYS Thu Mar 24 17:40:26 2005 (42435DFA)
f734c000 f7382a00 aarich aarich.sys Wed Jul 23 12:58:00 2003 (3F1EE8C8)
f7383000 f739f000 atapi atapi.sys Thu Mar 24 17:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 17:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 17:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 17:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 17:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 17:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 17:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 17:40:34 2005 (42435E02)
f74d7000 f74e7000 disk disk.sys Thu Mar 24 17:28:58 2005 (42435B4A)
f74e7000 f74f3000 Dfs Dfs.sys Thu Mar 24 17:30:28 2005 (42435BA4)
f74f7000 f7501000 crcdisk crcdisk.sys Thu Mar 24 17:29:40 2005 (42435B74)
f7507000 f7517000 agp440 agp440.sys Thu Mar 24 17:34:11 2005 (42435C83)
f7557000 f7561000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f7567000 f7571000 dump_scsiport dump_scsiport.sys Thu Mar 24 17:28:56 2005 (42435B48)
f7577000 f7586000 raspppoe raspppoe.sys Thu Mar 24 17:34:16 2005 (42435C88)
f7587000 f7588000 fdc fdc.sys unavailable (00000000)
f7597000 f75a1000 serenum serenum.sys Thu Mar 24 17:28:27 2005 (42435B2B)
f75a7000 f75b5000 imapi imapi.sys Thu Mar 24 17:29:10 2005 (42435B56)
f75b7000 f75c0000 ndistapi ndistapi.sys Thu Mar 24 17:34:11 2005 (42435C83)
f75c7000 f75d0000 hidusb hidusb.sys Tue Mar 25 00:10:17 2003 (3E8000D9)
f75d7000 f75e1000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f75e7000 f75f0000 raspti raspti.sys Thu Mar 24 17:34:16 2005 (42435C88)
f7637000 f7640000 mssmbios mssmbios.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7657000 f7666000 termdd termdd.sys Thu Mar 24 17:27:15 2005 (42435AE3)
f7667000 f7674000 Npfs Npfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
f76b7000 f76c2000 TDI TDI.SYS Thu Mar 24 17:35:34 2005 (42435CD6)
f76c7000 f76d2000 ptilink ptilink.sys Thu Mar 24 17:28:25 2005 (42435B29)
f76d7000 f76e0000 watchdog watchdog.sys Thu Mar 24 17:30:19 2005 (42435B9B)
f76f7000 f7706000 intelppm intelppm.sys Thu Mar 24 17:28:40 2005 (42435B38)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 00:04:46 2003 (3E7FFF8E)
f771f000 f7726000 intelide intelide.sys Thu Mar 24 17:28:48 2005 (42435B40)
f7727000 f7728000 dmload dmload.sys unavailable (00000000)
f7737000 f773c180 usbuhci usbuhci.sys Thu Mar 24 17:30:45 2005 (42435BB5)
f773f000 f7745a00 usbehci usbehci.sys Thu Mar 24 17:30:43 2005 (42435BB3)
f774f000 f7757000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
f7777000 f7778000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
f777f000 f7787000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f780f000 f7817000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f7857000 f785f000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
f7867000 f7868000 Null Null.SYS unavailable (00000000)
f7877000 f787e000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
f7897000 f7899800 compbatt compbatt.sys Tue Mar 25 00:16:28 2003 (3E80024C)
f789b000 f789e900 BATTC BATTC.SYS Thu Mar 24 17:34:07 2005 (42435C7F)
f79b1000 f79b2780 vnccom vnccom.SYS Sat Jun 26 04:22:24 2004 (40DD5C70)
f7a0d000 f7a0e280 vncdrv vncdrv.sys Sat Jun 26 04:22:17 2004 (40DD5C69)
f7a0f000 f7a10280 swenum swenum.sys Thu Mar 24 17:27:42 2005 (42435AFE)
f7a13000 f7a14580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)

Unloaded modules:
f7a98000 f7a99000 FTEVTBDG.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77ff000 f7807000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Do you have any idea what the cost would be to contact MS? I'd like to have some idea of how much this is going to set me back. Thanks.

 

Thank you so much for the link.

After I posted here last night, I went and installed the latest RAID controller drivers. I just checked on the server this morning, and so far (knock on wood) it has NOT rebooted. So that may have been the culprit. I will continue to check on it.

Hopefully I found the solution! If not, I will be contacting microsoft when I get back to the server.

Thanks for the help.