I have a HP DL370 G6 Server, Dual Procs, 96GB RAM. This server has Win2K8 R2 SP1 installed and has about 60-70 RemoteDesktop users logged into daily. My problem is about every 7-10 days the server reboots with Stop Error 0x0000003b and creates the below minidump. I can't seem to figure out what is causing this error. I'm hoping that someone with a little more experience looking over these .dmp analysis can tell me more. Thanks. 21: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* SYSTEM_SERVICE_EXCEPTION (3b) An exception happened while executing a system service routine. Arguments: Arg1: 00000000c0000005, Exception code that caused the bugcheck Arg2: fffff960001441b8, Address of the instruction which caused the bugcheck Arg3: fffff88028a57da0, Address of the context record for the exception that caused the bugcheck Arg4: 0000000000000000, zero. Debugging Details: ------------------ ***** Kernel symbols are WRONG. Please fix symbols to do analysis. ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ADDITIONAL_DEBUG_TEXT: Use '!findthebuild' command to search for the target build information. If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols. MODULE_NAME: win32k FAULTING_MODULE: fffff80001c67000 nt DEBUG_FLR_IMAGE_TIMESTAMP: 4ecdcd5a EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. FAULTING_IP: win32k+1241b8 fffff960`001441b8 3b4134 cmp eax,dword ptr [rcx+34h] CONTEXT: fffff88028a57da0 -- (.cxr 0xfffff88028a57da0) rax=0000000000000000 rbx=fffff96000305420 rcx=0000000000000000 rdx=0000000000000004 rsi=0000000000010385 rdi=fffff900c2a7ac20 rip=fffff960001441b8 rsp=fffff88028a58780 rbp=fffff96000305380 r8=fffff880026f7440 r9=fffff88028a591b0 r10=fffff900c2a7ac20 r11=fffff88028a58750 r12=0000000000000000 r13=0000000000000001 r14=fffff96000305380 r15=0000000000000000 iopl=0 nv up ei pl nz na pe nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202 win32k+0x1241b8: fffff960`001441b8 3b4134 cmp eax,dword ptr [rcx+34h] ds:002b:00000000`00000034=???????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP BUGCHECK_STR: 0x3B CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff960001441b8 STACK_TEXT: fffff880`28a58780 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k+0x1241b8 FOLLOWUP_IP: win32k+1241b8 fffff960`001441b8 3b4134 cmp eax,dword ptr [rcx+34h] SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: win32k+1241b8 FOLLOWUP_NAME: MachineOwner IMAGE_NAME: win32k.sys STACK_COMMAND: .cxr 0xfffff88028a57da0 ; kb BUCKET_ID: WRONG_SYMBOLS Followup: MachineOwner ---------

1. http://msdn.microsoft.com/en-us/library/ff558949%28VS.85%29.aspx which may be caused by driver (video?) 2. "Your debugger is not using the correct symbols" it seems you have not joined the correct symbols. Regards Milos

Thanks for the info. I will try reinstalling the video drivers. Can you explain to me how to fix the "incorrect symbols" problem. I didn't fully understand what that referred to or how to fix it.

Hello! Please have a look at the following article for assistance on getting the symbols setup correctly: http://msdn.microsoft.com/en-us/windows/hardware/gg462988 Get the proper symbols downloaded and then re-run the debug analysis.

Hello, Bug Check Code 0x3B: http://msdn.microsoft.com/en-us/library/windows/hardware/ff558949(v=vs.85).aspx This error has been linked to excessive paged pool usage and may occur due to user-mode graphics drivers crossing over and passing bad data to the kernel code. Start by updating your graphic card driver and check results. To read dump files: http://support.microsoft.com/kb/315263 This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer

Hi, You may also try to perform a clean boot to troubleshoot this issue. Refer to:http://support.microsoft.com/kb/929135 If you need further assistance, please understand forum is not the best place for analyzing dump. It’s suggested to contact Microsoft Customer Support Services (CSS). http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS If you are outside the US please see http://support.microsoft.com for regional support phone numbers. TechNet