Hi all I have been getting random shutdown and restarts on my two Windows Server 2003 R2 x64 which run Citrix PS4.5.The HP logs logged: Blue Screen Trap (BugCheck, STOP: 0x000000C5 (0x0000000000000000, 0x0000000000000002, 0x0000000000000001, 0xFFFFF800011A9EBA)) 6/19/2009 12:31AM 6/19/2009 12:31AM 1 2 Blue Screen Trap (BugCheck, STOP: 0x0000003B (0x00000000C0000005, 0xFFFFFADEBFD722CE, 0xFFFFFADEC1A4C620, 0x0000000000000000)) The minidump file logged:Microsoft (R) Windows Debugger Version 6.11.0001.404 X86Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Documents and Settings\myusername\Desktop\Mini061909-01.dmp]Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbolsExecutable search path is: Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x64Product: Server, suite: TerminalServerBuilt by: 3790.srv03_sp2_gdr.070321-2337Machine Name:Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011d4140Debug session time: Fri Jun 19 12:31:14.264 2009 (GMT+1)System Uptime: 1 days 3:13:42.125Loading Kernel Symbols............................................................................................................................... Loading User SymbolsLoading unloaded module list..................******************************************************************************** ** Bugcheck Analysis ** ******************************************************************************** Use !analyze -v to get detailed debugging information. BugCheck C5, {0, 2, 1, fffff800011a9eba} Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for mfehidk.sys*** ERROR: Module load completed but symbols could not be loaded for mfehidk.sysProbably caused by : Pool_Corruption ( nt!ExDeferredFreePool+33c ) Followup: Pool_corruption--------- 2: kd> !analyze -v******************************************************************************** ** Bugcheck Analysis ** ******************************************************************************** DRIVER_CORRUPTED_EXPOOL (c5)An attempt was made to access a pageable (or completely invalid) address at aninterrupt request level (IRQL) that is too high. This iscaused by drivers that have corrupted the system pool. Run the driververifier against any new (or suspect) drivers, and if that doesn't turn upthe culprit, then use gflags to enable special pool.Arguments:Arg1: 0000000000000000, memory referencedArg2: 0000000000000002, IRQLArg3: 0000000000000001, value 0 = read operation, 1 = write operationArg4: fffff800011a9eba, address which referenced memory Debugging Details:------------------ BUGCHECK_STR: 0xC5_2 CURRENT_IRQL: 2 FAULTING_IP: nt!ExDeferredFreePool+33cfffff800`011a9eba 488908 mov qword ptr [rax],rcx CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP PROCESS_NAME: CIPHR.exe TRAP_FRAME: fffffadea4ca5600 -- (.trap 0xfffffadea4ca5600)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=fffffadfff189000 rsi=0000000000000000 rdi=0000000000000000rip=fffff800011a9eba rsp=fffffadea4ca5790 rbp=fffff800011ce1c0r8=fffffadfff189450 r9=0000000000000001 r10=fffffadffec8db50r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0 nv up ei ng nz ac po cynt!ExDeferredFreePool+0x33c:fffff800`011a9eba 488908 mov qword ptr [rax],rcx ds:4630:00000000`00000000=????????????????Resetting default scope LAST_CONTROL_TRANSFER: from fffff8000102e5b4 to fffff8000102e890 STACK_TEXT: fffffade`a4ca5478 fffff800`0102e5b4 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckExfffffade`a4ca5480 fffff800`0102d547 : 00000000`00000096 00000000`00000010 00000000`00000000 fffffade`bd1c4740 : nt!KiBugCheckDispatch+0x74fffffade`a4ca5600 fffff800`011a9eba : 00000698`00000595 0000078e`000001ae 00000234`00000718 0000017e`000004b5 : nt!KiPageFault+0x207fffffade`a4ca5790 fffff800`011aa03d : fffffadf`feb4c010 00000000`0000014f fffffadf`feb4c000 fffff800`011ce1c0 : nt!ExDeferredFreePool+0x33cfffffade`a4ca5800 fffffade`bd1bfd76 : fffffade`cdae4900 fffffade`cdae4970 00000000`00000001 00000000`00006fe4 : nt!ExFreePoolWithTag+0x759fffffade`a4ca58c0 fffffade`cdae4900 : fffffade`cdae4970 00000000`00000001 00000000`00006fe4 00000000`00000001 : mfehidk+0x1ed76fffffade`a4ca58c8 fffffade`cdae4970 : 00000000`00000001 00000000`00006fe4 00000000`00000001 fffffade`bd1b2b9d : 0xfffffade`cdae4900fffffade`a4ca58d0 00000000`00000001 : 00000000`00006fe4 00000000`00000001 fffffade`bd1b2b9d 00000000`00000000 : 0xfffffade`cdae4970fffffade`a4ca58d8 00000000`00006fe4 : 00000000`00000001 fffffade`bd1b2b9d 00000000`00000000 00000000`00000002 : 0x1fffffade`a4ca58e0 00000000`00000001 : fffffade`bd1b2b9d 00000000`00000000 00000000`00000002 00000000`00000000 : 0x6fe4fffffade`a4ca58e8 fffffade`bd1b2b9d : 00000000`00000000 00000000`00000002 00000000`00000000 fffffade`cdae4970 : 0x1fffffade`a4ca58f0 00000000`00000000 : 00000000`00000002 00000000`00000000 fffffade`cdae4970 fffffade`a4ca5d38 : mfehidk+0x11b9d STACK_COMMAND: kb FOLLOWUP_IP: nt!ExDeferredFreePool+33cfffff800`011a9eba 488908 mov qword ptr [rax],rcx SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: nt!ExDeferredFreePool+33c FOLLOWUP_NAME: Pool_corruption IMAGE_NAME: Pool_Corruption DEBUG_FLR_IMAGE_TIMESTAMP: 0 MODULE_NAME: Pool_Corruption FAILURE_BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+33c BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+33c Followup: Pool_corruption--------- Could someone pls help me in reading this dump file?ThanksMaelitoismael

Hi Totally forgot to come back to this. The solution was to run a full HP Firmware update and this resolved the issue. I did end up logged in a call with MS who just advised to update my device drivers. MaelitoMaelito

can you explain..."Full Firmware Update'? Array, network, BIOS...everything? thannksTony Parker, MSCE . MCTP. MCITP "Anything worth doing, is worth doing right"