RE: Server rebooting - MiniDump queries - New memory

Hi

I am wondering if you are receiving any event id 2019 's in event viewer?

James Frederickson - (MSFT)
jamesfre@xxxxxxxxxxxxxxxxxxxx
Microsoft Corporation



--------------------
| From: "Blue Wezza" <blue-wezza@xxxxxxxxxxxxxxxx>
| Subject: Server rebooting - MiniDump queries - New memory
| Date: Mon, 19 Feb 2007 09:42:39 -0000
| Lines: 139
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
| X-RFC2646: Format=Flowed; Original
| Message-ID: <#St8MpAVHHA.1212@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: i-194-106-45-207.freedom2surf.net 194.106.45.207
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:17959
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi,
|
| Hi,
|
| I have had a 2003 sbs server which has degenerated in stability over a
| period. I added an adaptec 2420sa raid adapter and put 3 x 250Gb wd caviar
| raid drives in, RAID5, then installed the operating system again - all
user
| settings added afterwards (no disaster recovery) - only old work and data
| added.
|
| Approx 3 times per day the server reboots, leaving a mini dump behind. I
| interpreted these minidump which all led to memory corruption, so i have
| just swapped out the 2x1Gb RAM. However the server has just rebooted
again,
| here is the minidump:
|
|
| Microsoft (R) Windows Debugger Version 6.6.0007.5
| Copyright (c) Microsoft Corporation. All rights reserved.
|
|
| Loading Dump File [C:\Mini021907-01.dmp]
| Mini Kernel Dump File: Only registers and stack trace are available
|
| Symbol search path is:
|
C:\Symbols;C:\symcache;srv*c:\symcache*http://msdl.microsoft.com/download/sy
mbols
| Executable search path is:
| Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (2 procs)
Free
| x86 compatible
| Product: LanManNt, suite: SmallBusiness TerminalServer
| SmallBusinessRestricted SingleUserTS
| Built by: 3790.srv03_sp1_rtm.050324-1447
| Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
| Debug session time: Mon Feb 19 09:21:07.610 2007 (GMT+0)
| System Uptime: 1 days 0:57:53.453
| Loading Kernel Symbols
|
............................................................................
..................................................
| Loading User Symbols
| Loading unloaded module list
| ....
|
****************************************************************************
***
| *
| *
| * Bugcheck Analysis
| *
| *
| *
|
****************************************************************************
***
|
| Use !analyze -v to get detailed debugging information.
|
| BugCheck 1A, {3452, fc0201, c0884f68, 80}
|
| Probably caused by : memory_corruption (
| nt!MiDeleteAddressesInWorkingSet+155 )
|
| Followup: MachineOwner
| ---------
|
| 1: kd> !analyze -v
|
****************************************************************************
***
| *
| *
| * Bugcheck Analysis
| *
| *
| *
|
****************************************************************************
***
|
| MEMORY_MANAGEMENT (1a)
| # Any other values for parameter 1 must be individually examined.
| Arguments:
| Arg1: 00003452, The subtype of the bugcheck.
| Arg2: 00fc0201
| Arg3: c0884f68
| Arg4: 00000080
|
| Debugging Details:
| ------------------
|
|
| BUGCHECK_STR: 0x1a_3452
|
| CUSTOMER_CRASH_COUNT: 1
|
| DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP
|
| PROCESS_NAME: spoolsv.exe
|
| CURRENT_IRQL: 0
|
| LAST_CONTROL_TRANSFER: from 8084c103 to 80827451
|
| STACK_TEXT:
| ba516a8c 8084c103 0000001a 00003452 00fc0201 nt!KeBugCheckEx+0x1b
| ba516c48 8084c24d 88f8d7d8 88f8d7d8 00000000
| nt!MiDeleteAddressesInWorkingSet+0x155
| ba516c68 8094b539 88f8da00 885206f0 00000080
| nt!MmCleanProcessAddressSpace+0x111
| ba516cf0 8094b5b7 00000080 ba516d4c 8082d8b8 nt!PspExitThread+0x5f1
| ba516cfc 8082d8b8 885206f0 ba516d48 ba516d3c nt!PsExitSpecialApc+0x1d
| ba516d4c 80888cd4 00000001 00000000 ba516d64 nt!KiDeliverApc+0x1ae
| ba516d4c 7c82ed54 00000001 00000000 ba516d64 nt!KiServiceExit+0x56
| WARNING: Frame IP not in any known module. Following frames may be wrong.
| 0087ffb8 00000000 00000000 00000000 00000000 0x7c82ed54
|
|
| STACK_COMMAND: kb
|
| FOLLOWUP_IP:
| nt!MiDeleteAddressesInWorkingSet+155
| 8084c103 cc int 3
|
| SYMBOL_STACK_INDEX: 1
|
| SYMBOL_NAME: nt!MiDeleteAddressesInWorkingSet+155
|
| FOLLOWUP_NAME: MachineOwner
|
| MODULE_NAME: nt
|
| DEBUG_FLR_IMAGE_TIMESTAMP: 42435b14
|
| IMAGE_NAME: memory_corruption
|
| FAILURE_BUCKET_ID: 0x1a_3452_nt!MiDeleteAddressesInWorkingSet+155
|
| BUCKET_ID: 0x1a_3452_nt!MiDeleteAddressesInWorkingSet+155
|
| Followup: MachineOwner
| ---------
|
| Does anyone have ideas that they can throw to me - im sinking!
|
| Thanks
|
| Wes
|
|
|
|

<EMAILSUBJECT>Newsgroup Message Response to IssueID:
<ISSUEID></EMAILSUBJECT>
Hi <NAME>,

I wanted to inform you that I have replied to your thread in <NEWSGROUP>
titled: <NEWSGROUPSUBJECT> with IssueID: <ISSUEID>.
<a href="http://wwww.microsoft.com>
Please reply directly to the thread with any updates. You may receive this
email notification before you are able to view my reply in the newsgroup.
If you are unable to view the reply to your thread, please send me an email
with a description of the problem and what newsreader you are using.
Regards,


.

Loading