1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Windows Server 2003 Standard - intermittent crashes

Discussion in 'Windows Server System' started by ynot2k, 2008/02/04.

  1. 2008/02/04
    ynot2k

    ynot2k Inactive Thread Starter

    Joined:
    2008/02/04
    Messages:
    21
    Likes Received:
    0
    Howdy,

    First - thanks in advance for any/all help. I am posting my latest mini-dump. We have been experiencing some intermittent crashes with our newest Windows server and are very nervous to bring it up live at this point.

    All the other crashes (5 in total since installation 4 weeks ago) were the same bugcheck EXCEPT for one, which was a BugCheck 50 (PAGE_FAULT_IN_NONPAGED_AREA). All dump reports identify ntkrpamp.exe as probable cause.

    Again, any advice would be extremely helpful. i am planning on going over there to rum memtest86 for a while to see if it turns anything up.

    cheers, ynot2k

    Hardware:
    =======
    Intel Pentium Dual-Core E2160
    Mobo: Biostar P4M900-M7 SE
    2 GB Kingston NON-ECC DDR2 RAM (2 x 1GB sticks)
    2 x 250GB SATA HDD RAID 1 configuration (H/W RAID)

    LATEST MINI-DUMP FROM THIS MORNING:
    ===============================
    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini020408-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: Server, suite: TerminalServer SingleUserTS
    Built by: 3790.srv03_sp2_gdr.070304-2240
    Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
    Debug session time: Mon Feb 4 00:43:21.125 2008 (GMT-5)
    System Uptime: 4 days 11:11:18.836
    Loading Kernel Symbols
    ........................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ......................................
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000008E, {c0000005, 808d82f5, b974da30, 0}



    Probably caused by : ntkrpamp.exe ( nt!CmpGetNextName+19 )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 808d82f5, The address that the exception occurred at
    Arg3: b974da30, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------




    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

    FAULTING_IP:
    nt!CmpGetNextName+19
    808d82f5 668b12 mov dx,word ptr [edx]

    TRAP_FRAME: b974da30 -- (.trap 0xffffffffb974da30)
    .trap 0xffffffffb974da30
    ErrCode = 00000000
    eax=b974db01 ebx=00000000 ecx=b974db58 edx=20000000 esi=00000200 edi=00000005
    eip=808d82f5 esp=b974daa4 ebp=b974daa8 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
    nt!CmpGetNextName+0x19:
    808d82f5 668b12 mov dx,word ptr [edx] ds:0023:20000000=????
    .trap
    Resetting default scope

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

    BUGCHECK_STR: 0x8E

    CURRENT_IRQL: 0

    LAST_CONTROL_TRANSFER: from 808da2b4 to 808d82f5

    STACK_TEXT:
    b974daa8 808da2b4 b974db58 b974db88 b974dbb3 nt!CmpGetNextName+0x19
    b974db90 809374b1 e1bd15b8 00000000 892beef8 nt!CmpParseKey+0x270
    b974dc10 80933a76 00000038 b974dc50 00000040 nt!ObpLookupObjectName+0x11f
    b974dc64 808bb471 00000000 8a18e780 80934601 nt!ObOpenObjectByName+0xea
    b974dd50 8088978c 006cfe04 00020019 006cfd5c nt!NtOpenKey+0x1ad
    b974dd50 7c8285ec 006cfe04 00020019 006cfd5c nt!KiFastCallEntry+0xfc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    006cfd9c 00000000 00000000 00000000 00000000 0x7c8285ec


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!CmpGetNextName+19
    808d82f5 668b12 mov dx,word ptr [edx]

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: nt!CmpGetNextName+19

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntkrpamp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 45ec0a19

    FAILURE_BUCKET_ID: 0x8E_nt!CmpGetNextName+19

    BUCKET_ID: 0x8E_nt!CmpGetNextName+19

    Followup: MachineOwner
    ---------

    eax=b974db01 ebx=00000000 ecx=b974db58 edx=20000000 esi=00000200 edi=00000005
    eip=808d82f5 esp=b974daa4 ebp=b974daa8 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
    nt!CmpGetNextName+0x19:
    808d82f5 668b12 mov dx,word ptr [edx] ds:0023:20000000=????
    ChildEBP RetAddr Args to Child
    b974daa8 808da2b4 b974db58 b974db88 b974dbb3 nt!CmpGetNextName+0x19 (FPO: [Non-Fpo])
    b974db90 809374b1 e1bd15b8 00000000 892beef8 nt!CmpParseKey+0x270 (FPO: [Non-Fpo])
    b974dc10 80933a76 00000038 b974dc50 00000040 nt!ObpLookupObjectName+0x11f (FPO: [Non-Fpo])
    b974dc64 808bb471 00000000 8a18e780 80934601 nt!ObOpenObjectByName+0xea (FPO: [Non-Fpo])
    b974dd50 8088978c 006cfe04 00020019 006cfd5c nt!NtOpenKey+0x1ad (FPO: [Non-Fpo])
    b974dd50 7c8285ec 006cfe04 00020019 006cfd5c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b974dd64)
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    006cfd9c 00000000 00000000 00000000 00000000 0x7c8285ec
    start end module name
    80800000 80a56000 nt ntkrpamp.exe Mon Mar 05 07:16:25 2007 (45EC0A19)
    80a56000 80a82000 hal halmacpi.dll Sat Feb 17 00:48:26 2007 (45D6972A)
    afc00000 afc2a000 Fastfat Fastfat.SYS Sat Feb 17 01:27:55 2007 (45D6A06B)
    b01c2000 b01ed000 RDPWD RDPWD.SYS Sat Feb 17 00:44:38 2007 (45D69646)
    b03a5000 b0402000 srv srv.sys Sat Feb 17 01:27:20 2007 (45D6A048)
    b0452000 b04a2000 HTTP HTTP.sys Sat Feb 17 01:28:12 2007 (45D6A07C)
    b9812000 b982b680 dump_viamraid dump_viamraid.sys Mon Mar 19 04:18:13 2007 (45FE4745)
    b982c000 b9841000 Cdfs Cdfs.SYS Sat Feb 17 01:27:08 2007 (45D6A03C)
    b9841000 b9852000 Fips Fips.SYS Sat Feb 17 01:26:33 2007 (45D6A019)
    b9852000 b98c8000 mrxsmb mrxsmb.sys Sat Feb 17 01:28:15 2007 (45D6A07F)
    b98c8000 b98f8000 rdbss rdbss.sys Sat Feb 17 01:27:37 2007 (45D6A059)
    b98f8000 b9922000 afd afd.sys Sat Feb 17 01:28:16 2007 (45D6A080)
    b9922000 b9953000 netbt netbt.sys Sat Feb 17 01:28:57 2007 (45D6A0A9)
    b9953000 b99e3000 tcpip tcpip.sys Tue Oct 30 13:34:10 2007 (47276B12)
    b99e3000 b99fc000 ipsec ipsec.sys Sat Feb 17 01:29:28 2007 (45D6A0C8)
    b9a04000 b9a07580 BIOS BIOS.sys Wed Mar 16 02:23:52 2005 (4237D0F8)
    b9b49000 b9b5c000 i8042prt i8042prt.sys Sat Feb 17 01:30:40 2007 (45D6A110)
    b9b7e000 b9b93000 usbhub usbhub.sys Sat Feb 17 01:13:05 2007 (45D69CF1)
    b9bdd000 b9bf2000 drmk drmk.sys Sat Feb 17 01:12:29 2007 (45D69CCD)
    b9bf2000 b9c1b000 portcls portcls.sys Sat Feb 17 01:30:03 2007 (45D6A0EB)
    b9c1b000 ba076000 RtkHDAud RtkHDAud.sys Thu May 10 06:28:03 2007 (4642F3B3)
    ba076000 ba0d5000 update update.sys Mon May 28 08:15:16 2007 (465AC7D4)
    ba0d5000 ba10c000 rdpdr rdpdr.sys Sat Feb 17 00:51:00 2007 (45D697C4)
    ba163000 ba177000 psched psched.sys Sat Feb 17 00:58:47 2007 (45D69997)
    ba177000 ba189000 raspptp raspptp.sys Sat Feb 17 01:29:20 2007 (45D6A0C0)
    ba189000 ba1a2000 ndiswan ndiswan.sys Sat Feb 17 01:29:22 2007 (45D6A0C2)
    ba1aa000 ba1b2000 Fs_Rec Fs_Rec.SYS Tue Mar 25 03:08:36 2003 (3E800074)
    ba1f2000 ba1fd000 ptilink ptilink.sys Sat Feb 17 01:06:38 2007 (45D69B6E)
    ba202000 ba210000 msgpc msgpc.sys Sat Feb 17 00:58:37 2007 (45D6998D)
    ba252000 ba25d000 TDTCP TDTCP.SYS Sat Feb 17 00:44:32 2007 (45D69640)
    ba2d2000 ba2da000 mnmdd mnmdd.SYS Tue Mar 25 03:07:53 2003 (3E800049)
    ba31b000 ba32f000 rasl2tp rasl2tp.sys Sat Feb 17 01:29:02 2007 (45D6A0AE)
    ba32f000 ba357000 HDAudBus HDAudBus.sys Thu May 26 11:46:29 2005 (4295EF55)
    ba36a000 ba394000 USBPORT USBPORT.SYS Sat Feb 17 01:12:59 2007 (45D69CEB)
    ba394000 ba3bb000 ks ks.sys Sat Feb 17 01:30:40 2007 (45D6A110)
    ba3bb000 ba3cf000 redbook redbook.sys Sat Feb 17 01:07:26 2007 (45D69B9E)
    ba3cf000 ba3e4000 cdrom cdrom.sys Sat Feb 17 01:07:48 2007 (45D69BB4)
    ba3e4000 ba400000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 01:10:30 2007 (45D69C56)
    ba400000 ba4b4000 S3gIGPm S3gIGPm.sys Sun Mar 04 20:54:55 2007 (45EB786F)
    ba4be000 ba4bf280 swenum swenum.sys Sat Feb 17 01:05:56 2007 (45D69B44)
    ba63a000 ba642000 audstub audstub.sys Tue Mar 25 03:09:12 2003 (3E800098)
    ba642000 ba648b80 usbehci usbehci.sys Sat Feb 17 01:12:56 2007 (45D69CE8)
    ba64a000 ba64f180 usbuhci usbuhci.sys Sat Feb 17 01:13:02 2007 (45D69CEE)
    ba65a000 ba661000 Null Null.SYS Tue Mar 25 03:03:05 2003 (3E7FFF29)
    ba67a000 ba683000 watchdog watchdog.sys Sat Feb 17 01:11:45 2007 (45D69CA1)
    ba68a000 ba699000 intelppm intelppm.sys Sat Feb 17 00:48:30 2007 (45D6972E)
    ba70a000 ba715000 Msfs Msfs.SYS Sat Feb 17 00:50:33 2007 (45D697A9)
    ba73b000 ba745000 flpydisk flpydisk.sys Tue Mar 25 03:04:32 2003 (3E7FFF80)
    ba78b000 ba795000 dump_diskdump dump_diskdump.sys Sat Feb 17 01:07:44 2007 (45D69BB0)
    ba79b000 ba7a7000 vga vga.sys Sat Feb 17 01:10:30 2007 (45D69C56)
    ba7ab000 ba7b8000 Npfs Npfs.SYS Sat Feb 17 00:50:36 2007 (45D697AC)
    ba7bb000 ba7c8000 netbios netbios.sys Sat Feb 17 00:58:29 2007 (45D69985)
    bf800000 bf9cf000 win32k win32k.sys Thu Mar 01 09:59:28 2007 (45E6EA50)
    bf9cf000 bf9e6000 dxg dxg.sys Sat Feb 17 01:14:39 2007 (45D69D4F)
    bf9e6000 bfac4000 S3gIGP S3gIGP.dll Sun Mar 04 21:08:16 2007 (45EB7B90)
    bfac4000 bfd63000 s3ginv s3ginv.dll Sun Mar 04 20:59:00 2007 (45EB7964)
    bffa0000 bffea000 ATMFD ATMFD.DLL Sat Feb 17 08:59:31 2007 (45D70A43)
    f720b000 f7231000 KSecDD KSecDD.sys Sat Feb 17 00:46:32 2007 (45D696B8)
    f7231000 f7256000 fltmgr fltmgr.sys Sat Feb 17 00:51:08 2007 (45D697CC)
    f7256000 f7269000 CLASSPNP CLASSPNP.SYS Sat Feb 17 01:28:16 2007 (45D6A080)
    f7269000 f7288000 SCSIPORT SCSIPORT.SYS Sat Feb 17 01:28:41 2007 (45D6A099)
    f7288000 f72a1680 viamraid viamraid.sys Mon Mar 19 04:18:13 2007 (45FE4745)
    f72a2000 f72bf000 atapi atapi.sys Sat Feb 17 01:07:34 2007 (45D69BA6)
    f72bf000 f72e9000 volsnap volsnap.sys Sat Feb 17 01:08:23 2007 (45D69BD7)
    f72e9000 f7315000 dmio dmio.sys Sat Feb 17 01:10:44 2007 (45D69C64)
    f7315000 f733c000 ftdisk ftdisk.sys Sat Feb 17 01:08:05 2007 (45D69BC5)
    f733c000 f7352000 pci pci.sys Sat Feb 17 00:59:03 2007 (45D699A7)
    f7352000 f7386000 ACPI ACPI.sys Sat Feb 17 00:58:47 2007 (45D69997)
    f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 03:13:00 2003 (3E80017C)
    f7497000 f74a6000 isapnp isapnp.sys Sat Feb 17 00:58:57 2007 (45D699A1)
    f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 01:07:32 2007 (45D69BA4)
    f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 01:05:35 2007 (45D69B2F)
    f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 01:29:25 2007 (45D6A0C5)
    f74d7000 f74e7000 disk disk.sys Sat Feb 17 01:07:51 2007 (45D69BB7)
    f74e7000 f74f3000 Dfs Dfs.sys Sat Feb 17 00:51:17 2007 (45D697D5)
    f74f7000 f7501000 crcdisk crcdisk.sys Sat Feb 17 01:09:50 2007 (45D69C2E)
    f7527000 f7536000 termdd termdd.sys Sat Feb 17 00:44:32 2007 (45D69640)
    f7537000 f7541000 Dxapi Dxapi.sys Tue Mar 25 03:06:01 2003 (3E7FFFD9)
    f7557000 f7560000 mssmbios mssmbios.sys Sat Feb 17 00:59:12 2007 (45D699B0)
    f75b7000 f75c2000 TDI TDI.SYS Sat Feb 17 01:01:19 2007 (45D69A2F)
    f75d7000 f75e5000 NDProxy NDProxy.SYS Sat Feb 17 00:59:21 2007 (45D699B9)
    f75f7000 f7606000 raspppoe raspppoe.sys Sat Feb 17 00:59:23 2007 (45D699BB)
    f7617000 f7622000 kbdclass kbdclass.sys Sat Feb 17 01:05:39 2007 (45D69B33)
    f7627000 f7632000 fdc fdc.sys Sat Feb 17 01:07:16 2007 (45D69B94)
    f7687000 f7694000 wanarp wanarp.sys Sat Feb 17 00:59:17 2007 (45D699B5)
    f7697000 f76a0000 ndistapi ndistapi.sys Sat Feb 17 00:59:19 2007 (45D699B7)
    f76a7000 f76b1600 fetnd5bv fetnd5bv.sys Tue Feb 27 03:16:14 2007 (45E3E8CE)
    f76b7000 f76c1000 mouclass mouclass.sys Tue Mar 25 03:03:09 2003 (3E7FFF2D)
    f76c8000 f7707000 NDIS NDIS.sys Sat Feb 17 01:28:49 2007 (45D6A0A1)
    f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 03:08:00 2003 (3E800050)
    f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 03:07:58 2003 (3E80004E)
    f7717000 f771e000 viaide viaide.sys Tue Mar 25 03:04:49 2003 (3E7FFF91)
    f771f000 f7726000 dmload dmload.sys Tue Mar 25 03:08:08 2003 (3E800058)
    f7727000 f772f000 videX32 videX32.sys Wed Mar 28 23:36:47 2007 (460B344F)
    f772f000 f7737000 wd wd.sys Tue Mar 25 03:09:12 2003 (3E800098)
    f7737000 f773dd00 viaagp1 viaagp1.sys Wed Jul 02 06:08:01 2003 (3F02AF01)
    f777f000 f7785300 HIDPARSE HIDPARSE.SYS Sat Feb 17 01:12:35 2007 (45D69CD3)
    f7787000 f778e000 Beep Beep.SYS Tue Mar 25 03:03:04 2003 (3E7FFF28)
    f779f000 f77a6000 dxgthk dxgthk.sys Tue Mar 25 03:05:52 2003 (3E7FFFD0)
    f77af000 f77b7000 rasacd rasacd.sys Tue Mar 25 03:11:50 2003 (3E800136)
    f77b7000 f77bf000 RDPCDD RDPCDD.sys Tue Mar 25 03:03:05 2003 (3E7FFF29)
    f7878000 f7897000 Mup Mup.sys Sat Feb 17 01:27:41 2007 (45D6A05D)
    f79d5000 f79d6580 USBD USBD.SYS Tue Mar 25 03:10:39 2003 (3E8000EF)
    f79eb000 f79ec280 vncdrv vncdrv.sys Sat Jun 26 07:22:17 2004 (40DD5C69)
    f7b4a000 f7bdf000 Ntfs Ntfs.sys Sat Feb 17 01:27:23 2007 (45D6A04B)

    Unloaded modules:
    ba62a000 ba632000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afacf000 afaff000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afaff000 afb11000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb11000 afb25000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb25000 afb4d000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba57b000 ba57d000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb4d000 afb60000 sysaudio.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba7eb000 ba7f3000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afacf000 afaff000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afaff000 afb11000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb11000 afb25000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb25000 afb4d000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7a05000 f7a07000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb4d000 afb60000 sysaudio.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba4c0000 ba4c2000 vnccom.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba2ca000 ba2d2000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afacf000 afaff000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afaff000 afb11000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb11000 afb25000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb25000 afb4d000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb4d000 afb60000 sysaudio.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f79cb000 f79cd000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afb48000 afb60000 parport.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba69a000 ba6a3000 raspti.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba75b000 ba765000 Sandra.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b96d8000 b96e0000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afde9000 afe19000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afe19000 afe2b000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afe2b000 afe3f000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afe3f000 afe67000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    afe67000 afe7a000 sysaudio.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba4b4000 ba4b6000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b052a000 b0542000 parport.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba252000 ba260000 imapi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b98e3000 b98f8000 serial.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7537000 f7540000 kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba1b2000 ba1ba000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba357000 ba36a000 i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
     
    ynot2k,
    #1
  2. 2008/02/04
    ynot2k

    ynot2k Inactive Thread Starter

    Joined:
    2008/02/04
    Messages:
    21
    Likes Received:
    0
    all debuglogs attached

    please find th elink for all debug logs for all the crashes so far. note that 4 of them happened on the same day - mostly while i was VNCd into the machine going through the event logs...

    http://gwc.ca/debuglog.zip

    thanks,ynot2k
     
    ynot2k,
    #2


  3. to hide this advert.

  4. 2008/02/04
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    Hi ynot2k

    Welcome to the Best the WindowsBBS!

    You say this server is not live yet.

    So lets do a couple of things first.

    Let us have more info!

    1. Go here http://www.windowsbbs.com/announcement.php?f=41 read and download Deckard DSS
    Run DSS and post back all logs. Do this first before proceeding.

    Start-run
    type
    chkdsk /r <enter> or click OK
    it will want to proceed on next restart answer Y to allow it.

    Then shutdown.

    2. Remove one stick of memory.

    Power on.
    It will do the Chkdsk before loading Windows. Watch for and report any errors.

    3. Now run your memory tests.

    If the tests themselves do not incur a crash then leave up, and do the things you were doing before when it crashed. Try to get another crash with this 1 stick of memory. Leave up long enough to see if you will get a crash.

    4. If you do get a crash switch memory and do the same procedure except Chkdsk.

    5. If you do not get a crash with this second stick of memory you may have a bad memory stick

    6. then shutdown and reinstall both sticks of memory but reverse the slots so that this time the memory that was originally in slot 1 is now in slot 2.

    Only thing you can do here is retest again.

    If this test does not fail then perhaps it was the chkdsk.

    I hope you have not cleared the event logs since the last crash. The DSS will show me some of these.

    While you do this we will evaluate the DSS logs and perhaps find somethig there.

    Mike
     
    Last edited: 2008/02/04
    mflynn,
    #3
  5. 2008/02/04
    ynot2k

    ynot2k Inactive Thread Starter

    Joined:
    2008/02/04
    Messages:
    21
    Likes Received:
    0
    dss scan results

    Hi Mike - here are the scan results. i am going into the NOC to work on the box tomorrow and try some of your suggestions. will try chkdsk now...

    Deckard's System Scanner v20071014.68
    Run by Administrator on 2008-02-04 17:01:27
    Computer is in Normal Mode.
    --------------------------------------------------------------------------------

    Backed up registry hives.
    Performed disk cleanup.



    -- HijackThis Clone ------------------------------------------------------------


    Emulating logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 2008-02-04 17:02:19
    Platform: Windows 2003 Service Pack 2 (5.02.3790)
    MSIE: Internet Explorer (7.00.6000.16574)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\system32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\FileZilla Server\FileZilla server.exe
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
    C:\Program Files\RealVNC\VNC4\winvnc4.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\RTHDCPL.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Documents and Settings\Administrator\Desktop\dss.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://shdoclc.dll/softAdmin.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.ca/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1200503503869
    O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
    O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{2277CC2B-E9A7-4B81-B9F5-7083CC95F6B9}: NameServer = 66.207.192.4,206.223.173.5
    O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla server.exe
    O23 - Service: MySQL - Unknown owner - C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld
    O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\winvnc4.exe


    --
    End of file - 3506 bytes

    -- File Associations -----------------------------------------------------------

    .cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1 ",%*


    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

    R1 BIOS - c:\windows\system32\drivers\bios.sys <Not Verified; BIOSTAR Group; BIOSTAR I/O driver fle>

    S3 IpInIp (IP in IP Tunnel Driver) - c:\windows\system32\drivers\ipinip.sys (file missing)


    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

    R2 FileZilla Server (FileZilla Server FTP server) - c:\program files\filezilla server\filezilla server.exe <Not Verified; FileZilla Project; FileZilla Server>
    R2 MySQL - "c:\program files\mysql\mysql server 5.1\bin\mysqld" --defaults-file= "c:\program files\mysql\mysql server 5.1\my.ini" mysql (file missing)


    -- Device Manager: Disabled ----------------------------------------------------

    Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}
    Description: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
    Device ID: ACPI\PNP0303\3&2411E6FE&0
    Manufacturer: (Standard keyboards)
    Name: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
    PNP Device ID: ACPI\PNP0303\3&2411E6FE&0
    Service: i8042prt

    Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    Description: Realtek High Definition Audio
    Device ID: HDAUDIO\FUNC_01&VEN_10EC&DEV_0662&SUBSYS_15650000&REV_1001\4&2F11E50A&0&0001
    Manufacturer: Realtek
    Name: Realtek High Definition Audio
    PNP Device ID: HDAUDIO\FUNC_01&VEN_10EC&DEV_0662&SUBSYS_15650000&REV_1001\4&2F11E50A&0&0001
    Service: IntcAzAudAddService

    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description: Direct Parallel
    Device ID: ROOT\MS_PTIMINIPORT\0000
    Manufacturer: Microsoft
    Name: Direct Parallel
    PNP Device ID: ROOT\MS_PTIMINIPORT\0000
    Service: Raspti


    -- Files created between 2008-01-04 and 2008-02-04 -----------------------------

    2008-01-31 14:20:54 0 d-------- C:\Program Files\MSXML 6.0
    2008-01-30 15:36:01 0 d-------- C:\WINDOWS\symbols
    2008-01-30 15:25:54 0 d-------- C:\symbols
    2008-01-30 15:22:49 0 d-------- C:\Program Files\Debugging Tools for Windows
    2008-01-30 15:12:53 0 d-------- C:\Program Files\FileZilla Server
    2008-01-30 14:51:44 137 --a------ C:\WINDOWS\system32\'
    2008-01-30 14:50:27 5760 --a------ C:\WINDOWS\system32\vnchelp.dll <Not Verified; RDV Soft; UltraVnc Kernel>
    2008-01-30 14:50:27 0 d-------- C:\Program Files\UltraVNC
    2008-01-30 13:53:50 0 d-------- C:\Program Files\7-Zip
    2008-01-30 13:23:55 0 d-------- C:\Documents and Settings\Administrator\Application Data\Macromedia
    2008-01-30 13:23:55 0 d-------- C:\Documents and Settings\Administrator\Application Data\Adobe
    2008-01-30 13:23:51 0 d-------- C:\WINDOWS\system32\Macromed
    2008-01-30 12:44:51 0 d-------- C:\Program Files\MSBuild
    2008-01-30 12:42:21 0 d-------- C:\WINDOWS\system32\XPSViewer
    2008-01-30 12:42:03 0 d-------- C:\Program Files\Reference Assemblies
    2008-01-30 12:39:44 0 d-------- C:\WINDOWS\RegisteredPackages
    2008-01-30 12:35:13 0 d-------- C:\Program Files\EditPlus 2
    2008-01-30 12:35:13 0 d-------- C:\Documents and Settings\Administrator\Application Data\EditPlus 2
    2008-01-17 19:46:09 0 d-------- C:\Program Files\HeidiSQL
    2008-01-17 19:46:09 0 d-------- C:\Documents and Settings\All Users\Application Data\HeidiSQL
    2008-01-17 19:43:04 0 d-------- C:\Program Files\MySQL
    2008-01-17 15:21:46 0 d-------- C:\Documents and Settings\Administrator\Application Data\Help
    2008-01-17 11:58:07 0 d-------- C:\Documents and Settings\Administrator\Application Data\FileZilla
    2008-01-17 11:57:57 0 d-------- C:\Program Files\FileZilla FTP Client
    2008-01-17 00:05:34 306688 --a------ C:\WINDOWS\IsUninst.exe <Not Verified; InstallShield Software Corporation; InstallShield unInstaller>
    2008-01-17 00:05:20 0 d-------- C:\Program Files\S3
    2008-01-17 00:05:15 0 d--h----- C:\Program Files\InstallShield Installation Information
    2008-01-17 00:04:32 0 d-------- C:\WINDOWS\system32\ReinstallBackups
    2008-01-17 00:04:17 0 d-------- C:\Program Files\VIA
    2008-01-17 00:04:13 0 d-------- C:\Program Files\Common Files\InstallShield
    2008-01-17 00:03:37 0 d-------- C:\WINDOWS\vnDrvBas
    2008-01-16 16:15:15 0 d-------- C:\WINDOWS\IIS Temporary Compressed Files
    2008-01-16 16:15:12 0 d-------- C:\WINDOWS\system32\Cache
    2008-01-16 12:55:07 0 d-------- C:\Inetpub
    2008-01-16 12:50:12 0 d--h----- C:\WINDOWS\system32\GroupPolicy
    2008-01-16 12:33:55 0 d--h----- C:\WINDOWS\$hf_mig$
    2008-01-16 12:32:39 0 d-------- C:\WINDOWS\system32\Lang
    2008-01-16 12:28:30 0 d-------- C:\WINDOWS\adam
    2008-01-16 12:28:29 0 d-------- C:\WINDOWS\system32\ipmi
    2008-01-16 12:28:28 0 d-------- C:\WINDOWS\system32\en
    2008-01-16 12:28:28 0 d-------- C:\WINDOWS\adfs
    2008-01-16 12:28:24 0 d-------- C:\WINDOWS\provisioning
    2008-01-16 12:28:24 0 d-------- C:\Program Files\cmak
    2008-01-16 12:27:20 0 d-------- C:\WINDOWS\ServicePackFiles
    2008-01-16 12:25:40 0 d-a------ C:\WINDOWS\PolicyBackup
    2008-01-16 12:22:42 0 d-------- C:\Program Files\RealVNC
    2008-01-16 12:12:15 49152 --a------ C:\WINDOWS\system32\ChCfg.exe
    2008-01-16 12:11:56 0 d-------- C:\WINDOWS\system32\RTCOM
    2008-01-16 12:11:48 0 d-------- C:\WINDOWS\SoftwareDistribution
    2008-01-16 12:11:38 0 d-------- C:\WUTemp
    2008-01-16 12:11:27 0 d-------- C:\Program Files\Realtek
    2008-01-16 12:11:19 0 d--hs---- C:\Documents and Settings\Administrator\UserData
    2008-01-16 12:11:00 520192 --a------ C:\WINDOWS\RtlExUpd.dll <Not Verified; Realtek Semiconductor Corp.; RtlExUpd Dynamic Link Library>
    2008-01-16 12:11:00 315392 --a------ C:\WINDOWS\HideWin.exe <Not Verified; Realtek Semiconductor Corp.; HD Audio Hide windows program>


    -- Find3M Report ---------------------------------------------------------------

    2008-01-17 00:04:13 0 d-------- C:\Program Files\Common Files
    2008-01-16 12:12:07 0 d--h----- C:\Program Files\WindowsUpdate
    2008-01-03 05:26:18 0 d-------- C:\Documents and Settings\Administrator\Application Data\Identities
    2008-01-03 05:22:45 0 -rahs---- C:\MSDOS.SYS
    2008-01-03 05:22:45 0 -rahs---- C:\IO.SYS
    2008-01-03 05:22:45 0 --a------ C:\CONFIG.SYS
    2008-01-03 05:22:45 0 --a------ C:\AUTOEXEC.BAT
    2008-01-03 05:21:46 0 d-------- C:\Program Files\Online Services
    2008-01-03 05:20:11 21160 --a------ C:\WINDOWS\system32\emptyregdb.dat
    2008-01-03 05:19:28 0 d-------- C:\Program Files\Windows NT
    2008-01-03 00:11:00 0 d-------- C:\Program Files\Common Files\ODBC
    2008-01-03 00:10:58 0 d-------- C:\Program Files\Common Files\SpeechEngines


    -- Registry Dump ---------------------------------------------------------------

    *Note* empty entries & legit default entries are not shown


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "VTTimer "= "VTTimer.exe" [21/09/2006 04:36 PM C:\WINDOWS\system32\VTTimer.exe]
    "S3Trayp "= "S3trayp.exe" [06/02/2007 07:30 AM C:\WINDOWS\system32\S3Trayp.exe]
    "RTHDCPL "= "RTHDCPL.EXE" [10/05/2007 06:08 PM C:\WINDOWS\RTHDCPL.exe]
    "SkyTel "= "SkyTel.EXE" [07/05/2007 06:51 PM C:\WINDOWS\SkyTel.exe]
    "Alcmtr "= "ALCMTR.EXE" [03/05/2005 06:43 PM C:\WINDOWS\Alcmtr.exe]
    "KernelFaultCheck "= "C:\WINDOWS\system32\dumprep 0 -k" []

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE "= "C:\WINDOWS\system32\ctfmon.exe" [17/02/2007 02:38 AM]

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
    "tscuninstall "=%systemroot%\system32\tscupgrd.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "disablecad "=0 (0x0)
    "DontDisplayLockedUserId "=2 (0x2)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
    "ShowSuperHidden "=1 (0x1)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
    dimsntfy.dll 17/02/2007 02:50 AM 19456 C:\WINDOWS\system32\dimsntfy.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    "Notification Packages "= RASSFM KDCSVC WDIGEST scecli

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
    @= "Service "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
    @= "Service "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wd.sys]
    @= "Driver "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
    @= "Volume shadow copy "

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    LocalService Alerter WebClient LmHosts WinHttpAutoProxySvc W32Time
    NetworkService 6to4 DHCP DnsCache
    WinErr ERsvc
    tapisrv Tapisrv
    regsvc RemoteRegistry
    swprv swprv
    DcomLaunch DcomLaunch
    iissvcs w3svc

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
    AppMgmt
    AudioSrv
    Browser
    CryptSvc
    DMServer
    HidServ
    LanmanServer
    LanmanWorkstation
    Messenger
    Nla
    NWCWorkstation
    Sacsvr
    Schedule
    Seclogon
    Themes
    TrkWks
    TrkSvr
    W32Time
    Wmi
    WmdmPmSp
    winmgmt
    wuauserv
    BITS
    ShellHWDetection
    uploadmgr
    xmlprov
    AeLookupSvc
    helpsvc


    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36BBA8D2-CA5C-4847-81CC-4F807DD86C91}]
    %SystemRoot%\system32\regsvr32.exe /s /n /i:IEUpdateUser urlmon.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6D69F546-C1AF-4049-AE9E-28627B91D3F5}]
    %SystemRoot%\system32\regsvr32.exe /s /n /i:IEUpdateAdmin urlmon.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}]
    %SystemRoot%\system32\rundll32.exe iesetup.dll,IEHardenAdmin

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}]
    %SystemRoot%\system32\rundll32.exe iesetup.dll,IEHardenUser



    -- End of Deckard's System Scanner: finished at 2008-02-04 17:03:10 ------------
     
    ynot2k,
    #4
  6. 2008/02/04
    ynot2k

    ynot2k Inactive Thread Starter

    Joined:
    2008/02/04
    Messages:
    21
    Likes Received:
    0
    this is the extra log file:

    Deckard's System Scanner v20071014.68
    Extra logfile - please post this as an attachment with your post.
    --------------------------------------------------------------------------------

    -- System Information ----------------------------------------------------------

    Microsoft(R) Windows(R) Server 2003, Standard Edition (build 3790) SP 2.0
    Architecture: X86; Language: English

    CPU 0: Intel(R) Pentium(R) Dual CPU E2160 @ 1.80GHz
    CPU 1: Intel(R) Pentium(R) Dual CPU E2160 @ 1.80GHz
    Percentage of Memory in Use: 18%
    Physical Memory (total/avail): 1918.37 MiB / 1553.95 MiB
    Pagefile Memory (total/avail): 3817.06 MiB / 3258.91 MiB
    Virtual Memory (total/avail): 2047.88 MiB / 1905.55 MiB

    A: is Removable (No Media)
    C: is Fixed (NTFS) - 39.06 GiB total, 31.54 GiB free.
    D: is Fixed (NTFS) - 193.82 GiB total, 192.59 GiB free.
    E: is CDROM (No Media)

    \\.\PHYSICALDRIVE0 - VIA SATA RAID 1 SCSI Disk Device - 232.88 GiB - 2 partitions
    \PARTITION0 (bootable) - Installable File System - 39.06 GiB - C:
    \PARTITION1 - Extended w/Extended Int 13 - 193.82 GiB - D:



    -- Security Center -------------------------------------------------------------

    AUOptions is set to notify before download.
    Windows Internal Firewall is disabled.

    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


    -- Environment Variables -------------------------------------------------------

    ALLUSERSPROFILE=C:\Documents and Settings\All Users
    APPDATA=C:\Documents and Settings\Administrator\Application Data
    ClusterLog=C:\WINDOWS\Cluster\cluster.log
    CommonProgramFiles=C:\Program Files\Common Files
    COMPUTERNAME=COACH
    ComSpec=C:\WINDOWS\system32\cmd.exe
    FP_NO_HOST_CHECK=NO
    HOMEDRIVE=C:
    HOMEPATH=\Documents and Settings\Administrator
    LOGONSERVER=\\COACH
    NUMBER_OF_PROCESSORS=2
    OS=Windows_NT
    Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\MySQL\MySQL Server 5.1\bin
    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    PROCESSOR_ARCHITECTURE=x86
    PROCESSOR_IDENTIFIER=x86 Family 6 Model 15 Stepping 13, GenuineIntel
    PROCESSOR_LEVEL=6
    PROCESSOR_REVISION=0f0d
    ProgramFiles=C:\Program Files
    PROMPT=$P$G
    SESSIONNAME=Console
    SystemDrive=C:
    SystemRoot=C:\WINDOWS
    TEMP=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
    TMP=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
    USERDOMAIN=COACH
    USERNAME=Administrator
    USERPROFILE=C:\Documents and Settings\Administrator
    windir=C:\WINDOWS


    -- User Profiles ---------------------------------------------------------------

    Administrator (admin)


    -- Add/Remove Programs ---------------------------------------------------------

    --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    7-Zip 4.57 --> "C:\Program Files\7-Zip\Uninstall.exe "
    Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Debugging Tools for Windows --> MsiExec.exe /I{F3ECED46-91CC-4F44-9917-9A20085D5D26}
    EditPlus 2 --> C:\Program Files\EditPlus 2\remove.exe
    FileZilla Client 3.0.5.2 --> C:\Program Files\FileZilla FTP Client\uninstall.exe
    FileZilla Server (remove only) --> "C:\Program Files\FileZilla Server\uninstall.exe "
    HeidiSQL 3.2 --> "C:\Program Files\HeidiSQL\unins000.exe "
    Microsoft .NET Framework 2.0 Service Pack 1 --> MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
    Microsoft .NET Framework 3.0 Service Pack 1 --> MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
    MSXML 6.0 Parser (KB933579) --> MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
    MySQL Connector/ODBC 5.1 --> MsiExec.exe /I{29042B1C-0713-4575-B7CA-5C8E7B0899D4}
    MySQL Server 5.1 --> MsiExec.exe /I{8D12E93E-5847-4985-90F0-36C5DE8F8B8C}
    Realtek High Definition Audio Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x9 -removeonly
    VIA Platform Device Manager --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
    VIA Rhine-Family Fast-Ethernet Adapter --> Rundll32.exe vuins32.dll,vuins32Ex $Rhine $VIA
    VIA/S3G Display Driver 6.14.10.0086 --> C:\PROGRA~1\S3\UChromeP\s3minset.exe /u UChromeP.uns
    VNC Free Edition 4.1.2 --> "C:\Program Files\RealVNC\VNC4\unins000.exe "
    Windows Imaging Component --> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe "
    Windows Presentation Foundation --> MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
    Windows Server 2003 Service Pack 2 --> "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe "
    XML Paper Specification Shared Components Pack 1.0 -->


    -- Application Event Log -------------------------------------------------------

    Event Record #/Type495 / Error
    Event Submitted/Written: 02/04/2008 03:37:22 PM
    Event ID/Source: 100 / MySQL
    Event Description:
    Can't open and lock privilege tables: Table 'mysql.servers' doesn't exist

    For more information, see Help and Support Center at http://www.mysql.com.

    Event Record #/Type490 / Error
    Event Submitted/Written: 02/04/2008 03:27:38 PM
    Event ID/Source: 1 / WinVNC4
    Event Description:
    DeviceFrameBuffer: BitBlt failed:6

    Event Record #/Type484 / Error
    Event Submitted/Written: 02/04/2008 10:23:33 AM
    Event ID/Source: 1 / WinVNC4
    Event Description:
    DeviceFrameBuffer: BitBlt failed:6

    Event Record #/Type476 / Error
    Event Submitted/Written: 02/04/2008 00:44:03 AM
    Event ID/Source: 100 / MySQL
    Event Description:
    Can't open and lock privilege tables: Table 'mysql.servers' doesn't exist

    For more information, see Help and Support Center at http://www.mysql.com.

    Event Record #/Type472 / Error
    Event Submitted/Written: 02/04/2008 00:13:58 AM
    Event ID/Source: 1 / WinVNC4
    Event Description:
    SocketManager: unknown listener event: 0



    -- Security Event Log ----------------------------------------------------------

    No Errors/Warnings found.


    -- System Event Log ------------------------------------------------------------

    Event Record #/Type912 / Warning
    Event Submitted/Written: 02/04/2008 01:25:25 PM
    Event ID/Source: 1114 / TermServDevices
    Event Description:
    Error communicating with the Spooler system service. Open the Services snap-in and confirm that the Print Spooler service is running.

    Event Record #/Type903 / Warning
    Event Submitted/Written: 02/04/2008 10:23:46 AM
    Event ID/Source: 1076 / USER32
    Event Description:
    The reason supplied by user COACH\Administrator for the last unexpected shutdown of this computer is: System Failure: Stop error

    Reason Code: 0x805000f

    Bug ID: ***?!

    Bugcheck String: 0x0000008e (0xc0000005, 0x808d82f5, 0xb974da30, 0x00000000)

    Comment: 0x0000008e (0xc0000005, 0x808d82f5, 0xb974da30, 0x00000000)

    Event Record #/Type893 / Error
    Event Submitted/Written: 02/04/2008 00:44:01 AM
    Event ID/Source: 6008 / EventLog
    Event Description:
    The previous system shutdown at 12:42:21 AM on 2/4/2008 was unexpected.

    Event Record #/Type821 / Warning
    Event Submitted/Written: 01/31/2008 01:32:19 PM
    Event ID/Source: 36 / W32Time
    Event Description:
    The time service has not synchronized the system time for 86400 seconds
    because none of the time service providers provided a usable time
    stamp. The time service is no longer synchronized and cannot provide
    the time to other clients or update the system clock. Monitor the
    system events displayed in the Event Viewer to make sure that a more
    serious problem does not exist.

    Event Record #/Type820 / Warning
    Event Submitted/Written: 01/30/2008 04:09:00 PM
    Event ID/Source: 1114 / TermServDevices
    Event Description:
    Error communicating with the Spooler system service. Open the Services snap-in and confirm that the Print Spooler service is running.



    -- End of Deckard's System Scanner: finished at 2008-02-04 17:03:10 ------------
     
    ynot2k,
    #5
  7. 2008/02/04
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    OK!

    Why do you have 2 versions of VNC?

    I would uninstall both and go back with the newest ver of which ever you chose. I reccomend UltraVNC.

    Is there a reason you have remote Registry enabled, if there is no reason it should be disabled not even set to manual.

    I have seen Google references to Audio cards causing similar issues.

    If the memory tests do produce results then in device mgr disable the audio card. Then go to Services and disable any services related to Audio or Windows media player. This is a server!

    The exact job this Terninal server is configed for is unclear. Why FileZilla on a server?

    Have you considered removing any unnessesary software if any?

    Also have you cleared unnessesary windows componets in add/remove?

    This file ' is in system32 what is it >2008-01-30 14:51:44 137 --a------ C:\WINDOWS\system32\'

    Copy the next 2 lines and paste to cmd prompt

    %SystemRoot%\system32\cmd.exe /c %windir%\system32\tasklist.exe /svc > "%USERPROFILE% "\Desktop\Tasklist.txt

    %SystemRoot%\system32\cmd.exe /c %windir%\system32\sc query type= service > "%USERPROFILE% "\Desktop\ScQuery.txt

    Look on desktop and post the results from the files created.

    Mike
     
    mflynn,
    #6
  8. 2008/02/04
    ynot2k

    ynot2k Inactive Thread Starter

    Joined:
    2008/02/04
    Messages:
    21
    Likes Received:
    0
    VNC: i have always relied on realVNC in the past. when the 4 crashes happened, i was VNCd to the machine on the first 3. So, i tried to install UltraVNC (i removed realVNC first). i had a lot of difficulty installing UltraVNC and configuring it properly, so i reversed that and went back to the way it was before. Since reinstalling and using realVNC i have spent lots of time on the server (via vnc), and have seen 2 crashes outside of that time, so i have ruled out VNC being the problem. I thought i had uninstalled Ultra so i will go back and make sure that has happened.

    as per the VNC issue, i thought that i was going to have difficulty with getting access to the machine remotely. hence i enabled the remote registry just in case. i was going to shut it off before going live, obviously.

    i have disabled the audio card in device manager -- the parallel port, serial port and other non-essential hardware are disabled in the BIOS. Tomorrow when i visit the machine i will desable the audio (it's built-in to the mobo).

    as above, i have every intention of disabling the audio card fully ... tomorrow i will do so in the BIOS to make sure.

    This will be a standalone web & database server. FileZilla is there to update web pages & scripts. Terminal services is currently there in case we need to vpn and/or remote desktop in.

    done both!

    good question, i will look into it.

    TASK LIST:
    Image Name PID Services
    ========================= ======== ============================================
    System Idle Process 0 N/A
    System 4 N/A
    smss.exe 288 N/A
    csrss.exe 336 N/A
    winlogon.exe 360 N/A
    services.exe 408 Eventlog, PlugPlay
    lsass.exe 420 HTTPFilter, PolicyAgent, ProtectedStorage,
    SamSs
    svchost.exe 596 DcomLaunch
    svchost.exe 660 RpcSs
    svchost.exe 728 Dnscache
    svchost.exe 752 LmHosts, W32Time
    svchost.exe 780 AeLookupSvc, BITS, Browser, CryptSvc,
    dmserver, EventSystem, lanmanserver,
    lanmanworkstation, Netman, Nla, RasMan,
    Schedule, seclogon, SENS, ShellHWDetection,
    TrkWks, winmgmt, wuauserv
    msdtc.exe 852 MSDTC
    FileZilla server.exe 1016 FileZilla Server
    inetinfo.exe 1068 IISADMIN
    mysqld.exe 1092 MySQL
    winvnc4.exe 1252 WinVNC4
    svchost.exe 1416 W3SVC
    svchost.exe 1540 TermService
    wmiprvse.exe 1808 N/A
    svchost.exe 520 TapiSrv
    logon.scr 992 N/A
    csrss.exe 636 N/A
    winlogon.exe 1008 N/A
    rdpclip.exe 1780 N/A
    ctfmon.exe 1952 N/A
    explorer.exe 2104 N/A
    VTTimer.exe 2156 N/A
    RTHDCPL.exe 588 N/A
    iexplore.exe 2256 N/A
    cmd.exe 2380 N/A
    cmd.exe 2340 N/A
    tasklist.exe 2404 N/A
    wmiprvse.exe 2408 N/A

    SCQUERY:

    SERVICE_NAME: AeLookupSvc
    DISPLAY_NAME: Application Experience Lookup Service
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: BITS
    DISPLAY_NAME: Background Intelligent Transfer Service
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: Browser
    DISPLAY_NAME: Computer Browser
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: CryptSvc
    DISPLAY_NAME: Cryptographic Services
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: DcomLaunch
    DISPLAY_NAME: DCOM Server Process Launcher
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: dmserver
    DISPLAY_NAME: Logical Disk Manager
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: Dnscache
    DISPLAY_NAME: DNS Client
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: Eventlog
    DISPLAY_NAME: Event Log
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (NOT_STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: EventSystem
    DISPLAY_NAME: COM+ Event System
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: FileZilla Server
    DISPLAY_NAME: FileZilla Server FTP server
    TYPE : 110 WIN32_OWN_PROCESS (interactive)
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: HTTPFilter
    DISPLAY_NAME: HTTP SSL
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: IISADMIN
    DISPLAY_NAME: IIS Admin Service
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: lanmanserver
    DISPLAY_NAME: Server
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: lanmanworkstation
    DISPLAY_NAME: Workstation
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: LmHosts
    DISPLAY_NAME: TCP/IP NetBIOS Helper
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: MSDTC
    DISPLAY_NAME: Distributed Transaction Coordinator
    TYPE : 10 WIN32_OWN_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: MySQL
    DISPLAY_NAME: MySQL
    TYPE : 10 WIN32_OWN_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: Netman
    DISPLAY_NAME: Network Connections
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: Nla
    DISPLAY_NAME: Network Location Awareness (NLA)
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: PlugPlay
    DISPLAY_NAME: Plug and Play
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (NOT_STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: PolicyAgent
    DISPLAY_NAME: IPSEC Services
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: ProtectedStorage
    DISPLAY_NAME: Protected Storage
    TYPE : 120 WIN32_SHARE_PROCESS (interactive)
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: RasMan
    DISPLAY_NAME: Remote Access Connection Manager
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: RpcSs
    DISPLAY_NAME: Remote Procedure Call (RPC)
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: SamSs
    DISPLAY_NAME: Security Accounts Manager
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: Schedule
    DISPLAY_NAME: Task Scheduler
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: seclogon
    DISPLAY_NAME: Secondary Logon
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: SENS
    DISPLAY_NAME: System Event Notification
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: ShellHWDetection
    DISPLAY_NAME: Shell Hardware Detection
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: TapiSrv
    DISPLAY_NAME: Telephony
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: TermService
    DISPLAY_NAME: Terminal Services
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN))
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: TrkWks
    DISPLAY_NAME: Distributed Link Tracking Client
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: W32Time
    DISPLAY_NAME: Windows Time
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: W3SVC
    DISPLAY_NAME: World Wide Web Publishing Service
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: winmgmt
    DISPLAY_NAME: Windows Management Instrumentation
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: WinVNC4
    DISPLAY_NAME: VNC Server Version 4
    TYPE : 110 WIN32_OWN_PROCESS (interactive)
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0

    SERVICE_NAME: wuauserv
    DISPLAY_NAME: Automatic Updates
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0


    thanks again for all your help, mike!!!
    if you have anything to add before i go in to the visit the machine, that would be helpful.

    What my game plan is:
    run as much memtest on each individual stick of memory as time permits. (probably only 4 hours or so total).
    revisit the BIOS settings and disable as much as possible.
    revisit the services to see if there are any additional services i can disable
    i have also looked into upgrading the ntkrpamp.exe file according to this kb:
    http://support.microsoft.com/kb/942486/ what do you think?

    thanks again, ynot2k
     
    ynot2k,
    #7
  9. 2008/02/04
    ynot2k

    ynot2k Inactive Thread Starter

    Joined:
    2008/02/04
    Messages:
    21
    Likes Received:
    0
    PS: contents of that ' file

    [Setup]
    Tasks=installservice,startservice,properties
    PropertiesFile=..\..\..\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\is-Q9UK7.tmp\props.reg


    i'm thinking it's a left over installation file from UltraVNC, RealVNC or a Windows Update...

    ynot2k
     
    ynot2k,
    #8
  10. 2008/02/05
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    Yes that is what it is!

    Delete the file. Don't need files named like that!

    Mike
     
    mflynn,
    #9
  11. 2008/02/06
    ynot2k

    ynot2k Inactive Thread Starter

    Joined:
    2008/02/04
    Messages:
    21
    Likes Received:
    0
    another crash

    ok - so here we are with another crash last night at 11:30pm.

    here is the minidump (debuglog for memory.dmp follows):

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini020508-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: Server, suite: TerminalServer SingleUserTS
    Built by: 3790.srv03_sp2_gdr.070304-2240
    Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
    Debug session time: Tue Feb 5 23:28:27.671 2008 (GMT-5)
    System Uptime: 0 days 6:48:16.359
    Loading Kernel Symbols
    ...............................................................................................
    Loading User Symbols
    Loading unloaded module list
    ........
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 50, {80000000, 0, 808d82f5, 0}


    Could not read faulting driver name


    Probably caused by : ntkrpamp.exe ( nt!CmpGetNextName+19 )

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    PAGE_FAULT_IN_NONPAGED_AREA (50)
    Invalid system memory was referenced. This cannot be protected by try-except,
    it must be protected by a Probe. Typically the address is just plain bad or it
    is pointing at freed memory.
    Arguments:
    Arg1: 80000000, memory referenced.
    Arg2: 00000000, value 0 = read operation, 1 = write operation.
    Arg3: 808d82f5, If non-zero, the instruction address which referenced the bad memory
    address.
    Arg4: 00000000, (reserved)

    Debugging Details:
    ------------------


    Could not read faulting driver name



    READ_ADDRESS: 80000000

    FAULTING_IP:
    nt!CmpGetNextName+19
    808d82f5 668b12 mov dx,word ptr [edx]

    MM_INTERNAL_CODE: 0

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

    BUGCHECK_STR: 0x50

    PROCESS_NAME: services.exe

    CURRENT_IRQL: 1

    TRAP_FRAME: baf71a30 -- (.trap 0xffffffffbaf71a30)
    .trap 0xffffffffbaf71a30
    ErrCode = 00000000
    eax=baf71b01 ebx=00000000 ecx=baf71b58 edx=80000000 esi=00000200 edi=00000005
    eip=808d82f5 esp=baf71aa4 ebp=baf71aa8 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
    nt!CmpGetNextName+0x19:
    808d82f5 668b12 mov dx,word ptr [edx] ds:0023:80000000=????
    .trap
    Resetting default scope

    LAST_CONTROL_TRANSFER: from 8085eced to 80827c63

    STACK_TEXT:
    baf719a0 8085eced 00000050 80000000 00000000 nt!KeBugCheckEx+0x1b
    baf71a18 8088c798 00000000 80000000 00000000 nt!MmAccessFault+0xb25
    baf71a18 808d82f5 00000000 80000000 00000000 nt!KiTrap0E+0xdc
    baf71aa8 808da2b4 baf71b58 baf71b88 baf71bb3 nt!CmpGetNextName+0x19
    baf71b90 809374b1 e2187348 00000000 89e8f288 nt!CmpParseKey+0x270
    baf71c10 80933a76 00000038 baf71c50 00000040 nt!ObpLookupObjectName+0x11f
    baf71c64 808bb471 00000000 8a18e780 80934601 nt!ObOpenObjectByName+0xea
    baf71d50 8088978c 006cfe04 00020019 006cfd5c nt!NtOpenKey+0x1ad
    baf71d50 7c8285ec 006cfe04 00020019 006cfd5c nt!KiFastCallEntry+0xfc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    006cfd9c 00000000 00000000 00000000 00000000 0x7c8285ec


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!CmpGetNextName+19
    808d82f5 668b12 mov dx,word ptr [edx]

    SYMBOL_STACK_INDEX: 3

    SYMBOL_NAME: nt!CmpGetNextName+19

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntkrpamp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 45ec0a19

    FAILURE_BUCKET_ID: 0x50_nt!CmpGetNextName+19

    BUCKET_ID: 0x50_nt!CmpGetNextName+19

    Followup: MachineOwner
    ---------

    eax=f773f13c ebx=00000000 ecx=00000000 edx=000003e0 esi=f773f120 edi=c0400000
    eip=80827c63 esp=baf71988 ebp=baf719a0 iopl=0 nv up ei ng nz na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!KeBugCheckEx+0x1b:
    80827c63 5d pop ebp
    ChildEBP RetAddr Args to Child
    baf719a0 8085eced 00000050 80000000 00000000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
    baf71a18 8088c798 00000000 80000000 00000000 nt!MmAccessFault+0xb25 (FPO: [Non-Fpo])
    baf71a18 808d82f5 00000000 80000000 00000000 nt!KiTrap0E+0xdc (FPO: [0,0] TrapFrame @ baf71a30)
    baf71aa8 808da2b4 baf71b58 baf71b88 baf71bb3 nt!CmpGetNextName+0x19 (FPO: [Non-Fpo])
    baf71b90 809374b1 e2187348 00000000 89e8f288 nt!CmpParseKey+0x270 (FPO: [Non-Fpo])
    baf71c10 80933a76 00000038 baf71c50 00000040 nt!ObpLookupObjectName+0x11f (FPO: [Non-Fpo])
    baf71c64 808bb471 00000000 8a18e780 80934601 nt!ObOpenObjectByName+0xea (FPO: [Non-Fpo])
    baf71d50 8088978c 006cfe04 00020019 006cfd5c nt!NtOpenKey+0x1ad (FPO: [Non-Fpo])
    baf71d50 7c8285ec 006cfe04 00020019 006cfd5c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ baf71d64)
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    006cfd9c 00000000 00000000 00000000 00000000 0x7c8285ec
    start end module name
    80800000 80a56000 nt ntkrpamp.exe Mon Mar 05 07:16:25 2007 (45EC0A19)
    80a56000 80a82000 hal halmacpi.dll Sat Feb 17 00:48:26 2007 (45D6972A)
    b0798000 b07c3000 RDPWD RDPWD.SYS Sat Feb 17 00:44:38 2007 (45D69646)
    b09a3000 b0a00000 srv srv.sys Sat Feb 17 01:27:20 2007 (45D6A048)
    b0af0000 b0b40000 HTTP HTTP.sys Sat Feb 17 01:28:12 2007 (45D6A07C)
    b9ed7000 b9ef0680 dump_viamraid dump_viamraid.sys Mon Mar 19 04:18:13 2007 (45FE4745)
    b9ef1000 b9f06000 Cdfs Cdfs.SYS Sat Feb 17 01:27:08 2007 (45D6A03C)
    b9f06000 b9f17000 Fips Fips.SYS Sat Feb 17 01:26:33 2007 (45D6A019)
    b9f17000 b9f8d000 mrxsmb mrxsmb.sys Sat Feb 17 01:28:15 2007 (45D6A07F)
    b9f8d000 b9fbd000 rdbss rdbss.sys Sat Feb 17 01:27:37 2007 (45D6A059)
    b9fbd000 b9fe7000 afd afd.sys Sat Feb 17 01:28:16 2007 (45D6A080)
    b9fe7000 ba018000 netbt netbt.sys Sat Feb 17 01:28:57 2007 (45D6A0A9)
    ba018000 ba0a8000 tcpip tcpip.sys Tue Oct 30 13:34:10 2007 (47276B12)
    ba0a8000 ba0c1000 ipsec ipsec.sys Sat Feb 17 01:29:28 2007 (45D6A0C8)
    ba109000 ba11c000 i8042prt i8042prt.sys Sat Feb 17 01:30:40 2007 (45D6A110)
    ba11c000 ba131000 usbhub usbhub.sys Sat Feb 17 01:13:05 2007 (45D69CF1)
    ba131000 ba190000 update update.sys Mon May 28 08:15:16 2007 (465AC7D4)
    ba190000 ba1c7000 rdpdr rdpdr.sys Sat Feb 17 00:51:00 2007 (45D697C4)
    ba1f5000 ba1ff000 Dxapi Dxapi.sys Tue Mar 25 03:06:01 2003 (3E7FFFD9)
    ba225000 ba230000 TDTCP TDTCP.SYS Sat Feb 17 00:44:32 2007 (45D69640)
    ba235000 ba242000 netbios netbios.sys Sat Feb 17 00:58:29 2007 (45D69985)
    ba2b4000 ba2c8000 psched psched.sys Sat Feb 17 00:58:47 2007 (45D69997)
    ba2c8000 ba2da000 raspptp raspptp.sys Sat Feb 17 01:29:20 2007 (45D6A0C0)
    ba2da000 ba2f3000 ndiswan ndiswan.sys Sat Feb 17 01:29:22 2007 (45D6A0C2)
    ba2fd000 ba305000 RDPCDD RDPCDD.sys Tue Mar 25 03:03:05 2003 (3E7FFF29)
    ba335000 ba33d000 mnmdd mnmdd.SYS Tue Mar 25 03:07:53 2003 (3E800049)
    ba33d000 ba343300 HIDPARSE HIDPARSE.SYS Sat Feb 17 01:12:35 2007 (45D69CD3)
    ba345000 ba34c000 Beep Beep.SYS Tue Mar 25 03:03:04 2003 (3E7FFF28)
    ba34d000 ba357000 mouclass mouclass.sys Tue Mar 25 03:03:09 2003 (3E7FFF2D)
    ba35d000 ba36c000 termdd termdd.sys Sat Feb 17 00:44:32 2007 (45D69640)
    ba36d000 ba37b000 msgpc msgpc.sys Sat Feb 17 00:58:37 2007 (45D6998D)
    ba3dd000 ba3ea000 Npfs Npfs.SYS Sat Feb 17 00:50:36 2007 (45D697AC)
    ba415000 ba429000 rasl2tp rasl2tp.sys Sat Feb 17 01:29:02 2007 (45D6A0AE)
    ba43c000 ba466000 USBPORT USBPORT.SYS Sat Feb 17 01:12:59 2007 (45D69CEB)
    ba466000 ba48d000 ks ks.sys Sat Feb 17 01:30:40 2007 (45D6A110)
    ba49e000 ba4b2000 redbook redbook.sys Sat Feb 17 01:07:26 2007 (45D69B9E)
    ba4b2000 ba4c7000 cdrom cdrom.sys Sat Feb 17 01:07:48 2007 (45D69BB4)
    ba4c7000 ba4e3000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 01:10:30 2007 (45D69C56)
    ba4e3000 ba597000 S3gIGPm S3gIGPm.sys Sun Mar 04 20:54:55 2007 (45EB786F)
    ba60d000 ba610580 BIOS BIOS.sys Wed Mar 16 02:23:52 2005 (4237D0F8)
    ba635000 ba63c000 dxgthk dxgthk.sys Tue Mar 25 03:05:52 2003 (3E7FFFD0)
    ba6a1000 ba6a2580 USBD USBD.SYS Tue Mar 25 03:10:39 2003 (3E8000EF)
    ba6a3000 ba6a4280 swenum swenum.sys Sat Feb 17 01:05:56 2007 (45D69B44)
    ba74c000 ba756600 fetnd5bv fetnd5bv.sys Tue Feb 27 03:16:14 2007 (45E3E8CE)
    ba75c000 ba765000 watchdog watchdog.sys Sat Feb 17 01:11:45 2007 (45D69CA1)
    ba76c000 ba77b000 intelppm intelppm.sys Sat Feb 17 00:48:30 2007 (45D6972E)
    ba77c000 ba785000 mssmbios mssmbios.sys Sat Feb 17 00:59:12 2007 (45D699B0)
    ba79c000 ba7ab000 raspppoe raspppoe.sys Sat Feb 17 00:59:23 2007 (45D699BB)
    ba7ac000 ba7b8000 vga vga.sys Sat Feb 17 01:10:30 2007 (45D69C56)
    ba7bc000 ba7c9000 wanarp wanarp.sys Sat Feb 17 00:59:17 2007 (45D699B5)
    ba814000 ba81c000 Fs_Rec Fs_Rec.SYS Tue Mar 25 03:08:36 2003 (3E800074)
    bf800000 bf9cf000 win32k win32k.sys Thu Mar 01 09:59:28 2007 (45E6EA50)
    bf9cf000 bf9e6000 dxg dxg.sys Sat Feb 17 01:14:39 2007 (45D69D4F)
    bf9e6000 bfac4000 S3gIGP S3gIGP.dll Sun Mar 04 21:08:16 2007 (45EB7B90)
    bfac4000 bfd63000 s3ginv s3ginv.dll Sun Mar 04 20:59:00 2007 (45EB7964)
    bffa0000 bffea000 ATMFD ATMFD.DLL Sat Feb 17 08:59:31 2007 (45D70A43)
    f720b000 f7231000 KSecDD KSecDD.sys Sat Feb 17 00:46:32 2007 (45D696B8)
    f7231000 f7256000 fltmgr fltmgr.sys Sat Feb 17 00:51:08 2007 (45D697CC)
    f7256000 f7269000 CLASSPNP CLASSPNP.SYS Sat Feb 17 01:28:16 2007 (45D6A080)
    f7269000 f7288000 SCSIPORT SCSIPORT.SYS Sat Feb 17 01:28:41 2007 (45D6A099)
    f7288000 f72a1680 viamraid viamraid.sys Mon Mar 19 04:18:13 2007 (45FE4745)
    f72a2000 f72bf000 atapi atapi.sys Sat Feb 17 01:07:34 2007 (45D69BA6)
    f72bf000 f72e9000 volsnap volsnap.sys Sat Feb 17 01:08:23 2007 (45D69BD7)
    f72e9000 f7315000 dmio dmio.sys Sat Feb 17 01:10:44 2007 (45D69C64)
    f7315000 f733c000 ftdisk ftdisk.sys Sat Feb 17 01:08:05 2007 (45D69BC5)
    f733c000 f7352000 pci pci.sys Sat Feb 17 00:59:03 2007 (45D699A7)
    f7352000 f7386000 ACPI ACPI.sys Sat Feb 17 00:58:47 2007 (45D69997)
    f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 03:13:00 2003 (3E80017C)
    f7497000 f74a6000 isapnp isapnp.sys Sat Feb 17 00:58:57 2007 (45D699A1)
    f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 01:07:32 2007 (45D69BA4)
    f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 01:05:35 2007 (45D69B2F)
    f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 01:29:25 2007 (45D6A0C5)
    f74d7000 f74e7000 disk disk.sys Sat Feb 17 01:07:51 2007 (45D69BB7)
    f74e7000 f74f3000 Dfs Dfs.sys Sat Feb 17 00:51:17 2007 (45D697D5)
    f74f7000 f7501000 crcdisk crcdisk.sys Sat Feb 17 01:09:50 2007 (45D69C2E)
    f7517000 f7522000 kbdclass kbdclass.sys Sat Feb 17 01:05:39 2007 (45D69B33)
    f7537000 f7540000 ndistapi ndistapi.sys Sat Feb 17 00:59:19 2007 (45D699B7)
    f75e7000 f75f2000 TDI TDI.SYS Sat Feb 17 01:01:19 2007 (45D69A2F)
    f7667000 f7675000 NDProxy NDProxy.SYS Sat Feb 17 00:59:21 2007 (45D699B9)
    f7697000 f76a2000 Msfs Msfs.SYS Sat Feb 17 00:50:33 2007 (45D697A9)
    f76a7000 f76b1000 dump_diskdump dump_diskdump.sys Sat Feb 17 01:07:44 2007 (45D69BB0)
    f76c8000 f7707000 NDIS NDIS.sys Sat Feb 17 01:28:49 2007 (45D6A0A1)
    f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 03:08:00 2003 (3E800050)
    f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 03:07:58 2003 (3E80004E)
    f7717000 f771e000 viaide viaide.sys Tue Mar 25 03:04:49 2003 (3E7FFF91)
    f771f000 f7726000 dmload dmload.sys Tue Mar 25 03:08:08 2003 (3E800058)
    f7727000 f772f000 videX32 videX32.sys Wed Mar 28 23:36:47 2007 (460B344F)
    f772f000 f7737000 wd wd.sys Tue Mar 25 03:09:12 2003 (3E800098)
    f7737000 f773dd00 viaagp1 viaagp1.sys Wed Jul 02 06:08:01 2003 (3F02AF01)
    f7747000 f774f000 rasacd rasacd.sys Tue Mar 25 03:11:50 2003 (3E800136)
    f77a7000 f77ae000 Null Null.SYS Tue Mar 25 03:03:05 2003 (3E7FFF29)
    f77b7000 f77bc180 usbuhci usbuhci.sys Sat Feb 17 01:13:02 2007 (45D69CEE)
    f77bf000 f77c5b80 usbehci usbehci.sys Sat Feb 17 01:12:56 2007 (45D69CE8)
    f77cf000 f77d7000 audstub audstub.sys Tue Mar 25 03:09:12 2003 (3E800098)
    f7878000 f7897000 Mup Mup.sys Sat Feb 17 01:27:41 2007 (45D6A05D)
    f7b4a000 f7bdf000 Ntfs Ntfs.sys Sat Feb 17 01:27:23 2007 (45D6A04B)

    Unloaded modules:
    ba64d000 ba655000 usbccgp.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7647000 f7655000 imapi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba1e5000 ba1f3000 HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba7cc000 ba7d5000 hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b9fa8000 b9fbd000 serial.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7587000 f7590000 kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f777f000 f7787000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba429000 ba43c000 i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt



    ***************************************
    ***************************************
    ***************************************
    MEMORY.DMP:

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\MEMORY.DMP]
    Kernel Summary Dump File: Only kernel address space is available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible
    Product: Server, suite: TerminalServer SingleUserTS
    Built by: 3790.srv03_sp2_gdr.070304-2240
    Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
    Debug session time: Tue Feb 5 23:28:27.671 2008 (GMT-5)
    System Uptime: 0 days 6:48:16.359
    Loading Kernel Symbols
    ...............................................................................................
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 7ffde00c). Type ".hh dbgerr001" for details
    Loading unloaded module list
    ........
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 50, {80000000, 0, 808d82f5, 0}

    Page 74c68 not present in the dump file. Type ".hh dbgerr004" for details
    Page 74dcb not present in the dump file. Type ".hh dbgerr004" for details

    PEB is paged out (Peb.Ldr = 7ffde00c). Type ".hh dbgerr001" for details

    PEB is paged out (Peb.Ldr = 7ffde00c). Type ".hh dbgerr001" for details
    Probably caused by : ntkrpamp.exe ( nt!CmpGetNextName+19 )

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    PAGE_FAULT_IN_NONPAGED_AREA (50)
    Invalid system memory was referenced. This cannot be protected by try-except,
    it must be protected by a Probe. Typically the address is just plain bad or it
    is pointing at freed memory.
    Arguments:
    Arg1: 80000000, memory referenced.
    Arg2: 00000000, value 0 = read operation, 1 = write operation.
    Arg3: 808d82f5, If non-zero, the instruction address which referenced the bad memory
    address.
    Arg4: 00000000, (reserved)

    Debugging Details:
    ------------------

    Page 74c68 not present in the dump file. Type ".hh dbgerr004" for details
    Page 74dcb not present in the dump file. Type ".hh dbgerr004" for details

    PEB is paged out (Peb.Ldr = 7ffde00c). Type ".hh dbgerr001" for details

    PEB is paged out (Peb.Ldr = 7ffde00c). Type ".hh dbgerr001" for details

    READ_ADDRESS: 80000000

    FAULTING_IP:
    nt!CmpGetNextName+19
    808d82f5 668b12 mov dx,word ptr [edx]

    MM_INTERNAL_CODE: 0

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x50

    PROCESS_NAME: services.exe

    CURRENT_IRQL: 1

    TRAP_FRAME: baf71a30 -- (.trap 0xffffffffbaf71a30)
    .trap 0xffffffffbaf71a30
    ErrCode = 00000000
    eax=baf71b01 ebx=00000000 ecx=baf71b58 edx=80000000 esi=00000200 edi=00000005
    eip=808d82f5 esp=baf71aa4 ebp=baf71aa8 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
    nt!CmpGetNextName+0x19:
    808d82f5 668b12 mov dx,word ptr [edx] ds:0023:80000000=????
    .trap
    Resetting default scope

    LAST_CONTROL_TRANSFER: from 8085eced to 80827c63

    STACK_TEXT:
    baf719a0 8085eced 00000050 80000000 00000000 nt!KeBugCheckEx+0x1b
    baf71a18 8088c798 00000000 80000000 00000000 nt!MmAccessFault+0xb25
    baf71a18 808d82f5 00000000 80000000 00000000 nt!KiTrap0E+0xdc
    baf71aa8 808da2b4 baf71b58 baf71b88 baf71bb3 nt!CmpGetNextName+0x19
    baf71b90 809374b1 e2187348 00000000 89e8f288 nt!CmpParseKey+0x270
    baf71c10 80933a76 00000038 baf71c50 00000040 nt!ObpLookupObjectName+0x11f
    baf71c64 808bb471 00000000 8a18e780 80934601 nt!ObOpenObjectByName+0xea
    baf71d50 8088978c 006cfe04 00020019 006cfd5c nt!NtOpenKey+0x1ad
    baf71d50 7c8285ec 006cfe04 00020019 006cfd5c nt!KiFastCallEntry+0xfc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    006cfd9c 00000000 00000000 00000000 00000000 0x7c8285ec


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!CmpGetNextName+19
    808d82f5 668b12 mov dx,word ptr [edx]

    SYMBOL_STACK_INDEX: 3

    SYMBOL_NAME: nt!CmpGetNextName+19

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntkrpamp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 45ec0a19

    FAILURE_BUCKET_ID: 0x50_nt!CmpGetNextName+19

    BUCKET_ID: 0x50_nt!CmpGetNextName+19

    Followup: MachineOwner
    ---------

    eax=f773f13c ebx=00000000 ecx=00000000 edx=000003e0 esi=f773f120 edi=c0400000
    eip=80827c63 esp=baf71988 ebp=baf719a0 iopl=0 nv up ei ng nz na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!KeBugCheckEx+0x1b:
    80827c63 5d pop ebp
    ChildEBP RetAddr Args to Child
    baf719a0 8085eced 00000050 80000000 00000000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
    baf71a18 8088c798 00000000 80000000 00000000 nt!MmAccessFault+0xb25 (FPO: [Non-Fpo])
    baf71a18 808d82f5 00000000 80000000 00000000 nt!KiTrap0E+0xdc (FPO: [0,0] TrapFrame @ baf71a30)
    baf71aa8 808da2b4 baf71b58 baf71b88 baf71bb3 nt!CmpGetNextName+0x19 (FPO: [Non-Fpo])
    baf71b90 809374b1 e2187348 00000000 89e8f288 nt!CmpParseKey+0x270 (FPO: [Non-Fpo])
    baf71c10 80933a76 00000038 baf71c50 00000040 nt!ObpLookupObjectName+0x11f (FPO: [Non-Fpo])
    baf71c64 808bb471 00000000 8a18e780 80934601 nt!ObOpenObjectByName+0xea (FPO: [Non-Fpo])
    baf71d50 8088978c 006cfe04 00020019 006cfd5c nt!NtOpenKey+0x1ad (FPO: [Non-Fpo])
    baf71d50 7c8285ec 006cfe04 00020019 006cfd5c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ baf71d64)
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    006cfd9c 00000000 00000000 00000000 00000000 0x7c8285ec
    start end module name
    80800000 80a56000 nt ntkrpamp.exe Mon Mar 05 07:16:25 2007 (45EC0A19)
    80a56000 80a82000 hal halmacpi.dll Sat Feb 17 00:48:26 2007 (45D6972A)
    b0798000 b07c3000 RDPWD RDPWD.SYS Sat Feb 17 00:44:38 2007 (45D69646)
    b09a3000 b0a00000 srv srv.sys Sat Feb 17 01:27:20 2007 (45D6A048)
    b0af0000 b0b40000 HTTP HTTP.sys Sat Feb 17 01:28:12 2007 (45D6A07C)
    b9ed7000 b9ef0680 dump_viamraid dump_viamraid.sys Mon Mar 19 04:18:13 2007 (45FE4745)
    b9ef1000 b9f06000 Cdfs Cdfs.SYS Sat Feb 17 01:27:08 2007 (45D6A03C)
    b9f06000 b9f17000 Fips Fips.SYS Sat Feb 17 01:26:33 2007 (45D6A019)
    b9f17000 b9f8d000 mrxsmb mrxsmb.sys Sat Feb 17 01:28:15 2007 (45D6A07F)
    b9f8d000 b9fbd000 rdbss rdbss.sys Sat Feb 17 01:27:37 2007 (45D6A059)
    b9fbd000 b9fe7000 afd afd.sys Sat Feb 17 01:28:16 2007 (45D6A080)
    b9fe7000 ba018000 netbt netbt.sys Sat Feb 17 01:28:57 2007 (45D6A0A9)
    ba018000 ba0a8000 tcpip tcpip.sys Tue Oct 30 13:34:10 2007 (47276B12)
    ba0a8000 ba0c1000 ipsec ipsec.sys Sat Feb 17 01:29:28 2007 (45D6A0C8)
    ba109000 ba11c000 i8042prt i8042prt.sys Sat Feb 17 01:30:40 2007 (45D6A110)
    ba11c000 ba131000 usbhub usbhub.sys Sat Feb 17 01:13:05 2007 (45D69CF1)
    ba131000 ba190000 update update.sys Mon May 28 08:15:16 2007 (465AC7D4)
    ba190000 ba1c7000 rdpdr rdpdr.sys Sat Feb 17 00:51:00 2007 (45D697C4)
    ba1f5000 ba1ff000 Dxapi Dxapi.sys Tue Mar 25 03:06:01 2003 (3E7FFFD9)
    ba225000 ba230000 TDTCP TDTCP.SYS Sat Feb 17 00:44:32 2007 (45D69640)
    ba235000 ba242000 netbios netbios.sys Sat Feb 17 00:58:29 2007 (45D69985)
    ba2b4000 ba2c8000 psched psched.sys Sat Feb 17 00:58:47 2007 (45D69997)
    ba2c8000 ba2da000 raspptp raspptp.sys Sat Feb 17 01:29:20 2007 (45D6A0C0)
    ba2da000 ba2f3000 ndiswan ndiswan.sys Sat Feb 17 01:29:22 2007 (45D6A0C2)
    ba2fd000 ba305000 RDPCDD RDPCDD.sys Tue Mar 25 03:03:05 2003 (3E7FFF29)
    ba335000 ba33d000 mnmdd mnmdd.SYS Tue Mar 25 03:07:53 2003 (3E800049)
    ba33d000 ba343300 HIDPARSE HIDPARSE.SYS Sat Feb 17 01:12:35 2007 (45D69CD3)
    ba345000 ba34c000 Beep Beep.SYS Tue Mar 25 03:03:04 2003 (3E7FFF28)
    ba34d000 ba357000 mouclass mouclass.sys Tue Mar 25 03:03:09 2003 (3E7FFF2D)
    ba35d000 ba36c000 termdd termdd.sys Sat Feb 17 00:44:32 2007 (45D69640)
    ba36d000 ba37b000 msgpc msgpc.sys Sat Feb 17 00:58:37 2007 (45D6998D)
    ba3dd000 ba3ea000 Npfs Npfs.SYS Sat Feb 17 00:50:36 2007 (45D697AC)
    ba415000 ba429000 rasl2tp rasl2tp.sys Sat Feb 17 01:29:02 2007 (45D6A0AE)
    ba43c000 ba466000 USBPORT USBPORT.SYS Sat Feb 17 01:12:59 2007 (45D69CEB)
    ba466000 ba48d000 ks ks.sys Sat Feb 17 01:30:40 2007 (45D6A110)
    ba49e000 ba4b2000 redbook redbook.sys Sat Feb 17 01:07:26 2007 (45D69B9E)
    ba4b2000 ba4c7000 cdrom cdrom.sys Sat Feb 17 01:07:48 2007 (45D69BB4)
    ba4c7000 ba4e3000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 01:10:30 2007 (45D69C56)
    ba4e3000 ba597000 S3gIGPm S3gIGPm.sys Sun Mar 04 20:54:55 2007 (45EB786F)
    ba60d000 ba610580 BIOS BIOS.sys Wed Mar 16 02:23:52 2005 (4237D0F8)
    ba635000 ba63c000 dxgthk dxgthk.sys Tue Mar 25 03:05:52 2003 (3E7FFFD0)
    ba6a1000 ba6a2580 USBD USBD.SYS Tue Mar 25 03:10:39 2003 (3E8000EF)
    ba6a3000 ba6a4280 swenum swenum.sys Sat Feb 17 01:05:56 2007 (45D69B44)
    ba74c000 ba756600 fetnd5bv fetnd5bv.sys Tue Feb 27 03:16:14 2007 (45E3E8CE)
    ba75c000 ba765000 watchdog watchdog.sys Sat Feb 17 01:11:45 2007 (45D69CA1)
    ba76c000 ba77b000 intelppm intelppm.sys Sat Feb 17 00:48:30 2007 (45D6972E)
    ba77c000 ba785000 mssmbios mssmbios.sys Sat Feb 17 00:59:12 2007 (45D699B0)
    ba79c000 ba7ab000 raspppoe raspppoe.sys Sat Feb 17 00:59:23 2007 (45D699BB)
    ba7ac000 ba7b8000 vga vga.sys Sat Feb 17 01:10:30 2007 (45D69C56)
    ba7bc000 ba7c9000 wanarp wanarp.sys Sat Feb 17 00:59:17 2007 (45D699B5)
    ba814000 ba81c000 Fs_Rec Fs_Rec.SYS Tue Mar 25 03:08:36 2003 (3E800074)
    bf800000 bf9cf000 win32k win32k.sys Thu Mar 01 09:59:28 2007 (45E6EA50)
    bf9cf000 bf9e6000 dxg dxg.sys Sat Feb 17 01:14:39 2007 (45D69D4F)
    bf9e6000 bfac4000 S3gIGP S3gIGP.dll Sun Mar 04 21:08:16 2007 (45EB7B90)
    bfac4000 bfd63000 s3ginv s3ginv.dll Sun Mar 04 20:59:00 2007 (45EB7964)
    bffa0000 bffea000 ATMFD ATMFD.DLL Sat Feb 17 08:59:31 2007 (45D70A43)
    f720b000 f7231000 KSecDD KSecDD.sys Sat Feb 17 00:46:32 2007 (45D696B8)
    f7231000 f7256000 fltmgr fltmgr.sys Sat Feb 17 00:51:08 2007 (45D697CC)
    f7256000 f7269000 CLASSPNP CLASSPNP.SYS Sat Feb 17 01:28:16 2007 (45D6A080)
    f7269000 f7288000 SCSIPORT SCSIPORT.SYS Sat Feb 17 01:28:41 2007 (45D6A099)
    f7288000 f72a1680 viamraid viamraid.sys Mon Mar 19 04:18:13 2007 (45FE4745)
    f72a2000 f72bf000 atapi atapi.sys Sat Feb 17 01:07:34 2007 (45D69BA6)
    f72bf000 f72e9000 volsnap volsnap.sys Sat Feb 17 01:08:23 2007 (45D69BD7)
    f72e9000 f7315000 dmio dmio.sys Sat Feb 17 01:10:44 2007 (45D69C64)
    f7315000 f733c000 ftdisk ftdisk.sys Sat Feb 17 01:08:05 2007 (45D69BC5)
    f733c000 f7352000 pci pci.sys Sat Feb 17 00:59:03 2007 (45D699A7)
    f7352000 f7386000 ACPI ACPI.sys Sat Feb 17 00:58:47 2007 (45D69997)
    f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 03:13:00 2003 (3E80017C)
    f7497000 f74a6000 isapnp isapnp.sys Sat Feb 17 00:58:57 2007 (45D699A1)
    f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 01:07:32 2007 (45D69BA4)
    f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 01:05:35 2007 (45D69B2F)
    f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 01:29:25 2007 (45D6A0C5)
    f74d7000 f74e7000 disk disk.sys Sat Feb 17 01:07:51 2007 (45D69BB7)
    f74e7000 f74f3000 Dfs Dfs.sys Sat Feb 17 00:51:17 2007 (45D697D5)
    f74f7000 f7501000 crcdisk crcdisk.sys Sat Feb 17 01:09:50 2007 (45D69C2E)
    f7517000 f7522000 kbdclass kbdclass.sys Sat Feb 17 01:05:39 2007 (45D69B33)
    f7537000 f7540000 ndistapi ndistapi.sys Sat Feb 17 00:59:19 2007 (45D699B7)
    f75e7000 f75f2000 TDI TDI.SYS Sat Feb 17 01:01:19 2007 (45D69A2F)
    f7667000 f7675000 NDProxy NDProxy.SYS Sat Feb 17 00:59:21 2007 (45D699B9)
    f7697000 f76a2000 Msfs Msfs.SYS Sat Feb 17 00:50:33 2007 (45D697A9)
    f76a7000 f76b1000 dump_diskdump dump_diskdump.sys Sat Feb 17 01:07:44 2007 (45D69BB0)
    f76c8000 f7707000 NDIS NDIS.sys Sat Feb 17 01:28:49 2007 (45D6A0A1)
    f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 03:08:00 2003 (3E800050)
    f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 03:07:58 2003 (3E80004E)
    f7717000 f771e000 viaide viaide.sys Tue Mar 25 03:04:49 2003 (3E7FFF91)
    f771f000 f7726000 dmload dmload.sys Tue Mar 25 03:08:08 2003 (3E800058)
    f7727000 f772f000 videX32 videX32.sys Wed Mar 28 23:36:47 2007 (460B344F)
    f772f000 f7737000 wd wd.sys Tue Mar 25 03:09:12 2003 (3E800098)
    f7737000 f773dd00 viaagp1 viaagp1.sys Wed Jul 02 06:08:01 2003 (3F02AF01)
    f7747000 f774f000 rasacd rasacd.sys Tue Mar 25 03:11:50 2003 (3E800136)
    f77a7000 f77ae000 Null Null.SYS Tue Mar 25 03:03:05 2003 (3E7FFF29)
    f77b7000 f77bc180 usbuhci usbuhci.sys Sat Feb 17 01:13:02 2007 (45D69CEE)
    f77bf000 f77c5b80 usbehci usbehci.sys Sat Feb 17 01:12:56 2007 (45D69CE8)
    f77cf000 f77d7000 audstub audstub.sys Tue Mar 25 03:09:12 2003 (3E800098)
    f7878000 f7897000 Mup Mup.sys Sat Feb 17 01:27:41 2007 (45D6A05D)
    f7b4a000 f7bdf000 Ntfs Ntfs.sys Sat Feb 17 01:27:23 2007 (45D6A04B)

    Unloaded modules:
    ba64d000 ba655000 usbccgp.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7647000 f7655000 imapi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba1e5000 ba1f3000 HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba7cc000 ba7d5000 hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b9fa8000 b9fbd000 serial.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7587000 f7590000 kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f777f000 f7787000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba429000 ba43c000 i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt


    didn't get a chance to run memtest, but i was in the bios disabling more hardware. i guess i'll run memtest...

    ynot2k
     
    ynot2k,
    #10
  12. 2008/02/06
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    Same dump as the first!

    Points to memory!

    I am awaiting the results of the rest of my post. Removing memory, disabling audio device, results of memory tests you where going to perform.

    You need to clear the Ram by testing each stick individually.

    There is no magic shortcut.

    Mike
     
    mflynn,
    #11
  13. 2008/02/06
    ynot2k

    ynot2k Inactive Thread Starter

    Joined:
    2008/02/04
    Messages:
    21
    Likes Received:
    0

    begrudgingly, i am beginning to think the same thing. as an added bonus i happen to have a duplicate server here in my lab to test some things out, so i am delaying launching this server live. access to it is limited -- particularly with regards to cracking the case. so i am trying to avoid memtesting it until it's a last resort test (it was supposed to have been done before being shipped, but you never know what happens during shipping i guess).

    in your opinion, is ecc memory worth the extra $?

    thanks again for your time, mike.
     
    ynot2k,
    #12
  14. 2008/02/06
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    Espicially on a server.

    Mike
     
    mflynn,
    #13
  15. 2008/02/07
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    Espicially:eek:

    Don i spel goode!

    Any new info?

    Mike
     
    mflynn,
    #14
  16. 2008/02/07
    ynot2k

    ynot2k Inactive Thread Starter

    Joined:
    2008/02/04
    Messages:
    21
    Likes Received:
    0
    Hi mike --

    not much to report. we postponed the launch of the migration for a week. i installed the os on the backup machine here in the lab ... only in slightly different order (ie. disabling h/w in the bios first). Further, instead of using the driver CD that came with the mobo, i downloaded the latest versions of the chipset, raid controller, video and lan drivers from the website and installed those. then downloaded and installed SP2. things seem to be stable on this machine, so i plan on moving that to the NOC, bringing the sick machine back to the lab for memtesting and/or a fresh install of the o/s with updated drivers and disabled h/w.

    other than that, not much to report. thanks for your interest. either way, i'll keep you posted.

    ynot2k
     
    ynot2k,
    #15
  17. 2008/02/07
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    10-4

    Mike
     
    mflynn,
    #16

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...