Server randomly rebooting due to bugcheck
- From: Andy Desborough <AndyDesborough@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 23 Jun 2006 02:09:01 -0700
Hi there,
I have a SBS2003 SP1 server which reboots at various times of day and shows
this entry in the event log:
The reason supplied by user xxxxx\Administrator for the last unexpected
shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x000000f4 (0x00000003, 0x89f041f0, 0x89f04354, 0x8094b734)
Comment: 0x000000f4 (0x00000003, 0x89f041f0, 0x89f04354, 0x8094b734)
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
To my knowledge nothing has changed in the time it has been happening.
Sometimes it also BSOD's when rebooting with an error:
"Process thread crucial to system operation has unexpectedly exited or been
terminated - restart your computer again & if this message appears again
contact your support company"
I have run the Microsoft debugger tool as detailed on Petergal's SBS blog
which produced the following output:
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is:
SRV*e:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free
x86 compatible
Product: LanManNt, suite: SmallBusiness TerminalServer
SmallBusinessRestricted SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Fri Jun 23 07:34:09.455 2006 (GMT+1)
System Uptime: 0 days 0:06:25.644
Loading Kernel Symbols
.............................................................................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, 89f041f0, 89f04354, 8094b734}
Probably caused by : csrss.exe
Followup: MachineOwner
---------
1: kd> .reload
Loading Kernel Symbols
.............................................................................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
1: kd> .reload
Loading Kernel Symbols
.............................................................................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
So then I searched around for the csrss.exe which I find "Csrss.exe is a
Microsoft client server runtime which generates worker threads for client
requests" and some references to virus/trojan activity but a virus scan on
the file comes up clean.
Any suggestions please?
TIA
Andy.
.
- Follow-Ups:
- Re: Server randomly rebooting due to bugcheck
- From: Dave Nickason [SBS MVP]
- Re: Server randomly rebooting due to bugcheck
- From: Al Williams
- Re: Server randomly rebooting due to bugcheck
- From: Cris Hanna \(SBS-MVP\)
- Re: Server randomly rebooting due to bugcheck
- Prev by Date: RE: ISA server basic
- Next by Date: RE: ISA Server Management console fails to load
- Previous by thread: Different email addresses - Name resolution
- Next by thread: Re: Server randomly rebooting due to bugcheck
- Index(es):
Relevant Pages
|
