Hi all I have been getting random shutdown and restarts on my two Windows Server 2003 R2 x64 which run Citrix PS4.5.The HP logs logged: Blue Screen Trap (BugCheck, STOP: 0x000000C5 (0x0000000000000000, 0x0000000000000002, 0x0000000000000001, 0xFFFFF800011A9EBA)) 6/19/2009 12:31AM 6/19/2009 12:31AM 1 2 Blue Screen Trap (BugCheck, STOP: 0x0000003B (0x00000000C0000005, 0xFFFFFADEBFD722CE, 0xFFFFFADEC1A4C620, 0x0000000000000000)) The minidump file logged:Microsoft (R) Windows Debugger Version 6.11.0001.404 X86Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Documents and Settings\myusername\Desktop\Mini061909-01.dmp]Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbolsExecutable search path is: Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x64Product: Server, suite: TerminalServerBuilt by: 3790.srv03_sp2_gdr.070321-2337Machine Name:Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011d4140Debug session time: Fri Jun 19 12:31:14.264 2009 (GMT+1)System Uptime: 1 days 3:13:42.125Loading Kernel Symbols............................................................................................................................... Loading User SymbolsLoading unloaded module list..................******************************************************************************** ** Bugcheck Analysis ** ******************************************************************************** Use !analyze -v to get detailed debugging information. BugCheck C5, {0, 2, 1, fffff800011a9eba} Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for mfehidk.sys*** ERROR: Module load completed but symbols could not be loaded for mfehidk.sysProbably caused by : Pool_Corruption ( nt!ExDeferredFreePool+33c ) Followup: Pool_corruption--------- 2: kd> !analyze -v******************************************************************************** ** Bugcheck Analysis ** ******************************************************************************** DRIVER_CORRUPTED_EXPOOL (c5)An attempt was made to access a pageable (or completely invalid) address at aninterrupt request level (IRQL) that is too high. This iscaused by drivers that have corrupted the system pool. Run the driververifier against any new (or suspect) drivers, and if that doesn't turn upthe culprit, then use gflags to enable special pool.Arguments:Arg1: 0000000000000000, memory referencedArg2: 0000000000000002, IRQLArg3: 0000000000000001, value 0 = read operation, 1 = write operationArg4: fffff800011a9eba, address which referenced memory Debugging Details:------------------ BUGCHECK_STR: 0xC5_2 CURRENT_IRQL: 2 FAULTING_IP: nt!ExDeferredFreePool+33cfffff800`011a9eba 488908 mov qword ptr [rax],rcx CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP PROCESS_NAME: CIPHR.exe TRAP_FRAME: fffffadea4ca5600 -- (.trap 0xfffffadea4ca5600)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=fffffadfff189000 rsi=0000000000000000 rdi=0000000000000000rip=fffff800011a9eba rsp=fffffadea4ca5790 rbp=fffff800011ce1c0r8=fffffadfff189450 r9=0000000000000001 r10=fffffadffec8db50r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0 nv up ei ng nz ac po cynt!ExDeferredFreePool+0x33c:fffff800`011a9eba 488908 mov qword ptr [rax],rcx ds:4630:00000000`00000000=????????????????Resetting default scope LAST_CONTROL_TRANSFER: from fffff8000102e5b4 to fffff8000102e890 STACK_TEXT: fffffade`a4ca5478 fffff800`0102e5b4 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckExfffffade`a4ca5480 fffff800`0102d547 : 00000000`00000096 00000000`00000010 00000000`00000000 fffffade`bd1c4740 : nt!KiBugCheckDispatch+0x74fffffade`a4ca5600 fffff800`011a9eba : 00000698`00000595 0000078e`000001ae 00000234`00000718 0000017e`000004b5 : nt!KiPageFault+0x207fffffade`a4ca5790 fffff800`011aa03d : fffffadf`feb4c010 00000000`0000014f fffffadf`feb4c000 fffff800`011ce1c0 : nt!ExDeferredFreePool+0x33cfffffade`a4ca5800 fffffade`bd1bfd76 : fffffade`cdae4900 fffffade`cdae4970 00000000`00000001 00000000`00006fe4 : nt!ExFreePoolWithTag+0x759fffffade`a4ca58c0 fffffade`cdae4900 : fffffade`cdae4970 00000000`00000001 00000000`00006fe4 00000000`00000001 : mfehidk+0x1ed76fffffade`a4ca58c8 fffffade`cdae4970 : 00000000`00000001 00000000`00006fe4 00000000`00000001 fffffade`bd1b2b9d : 0xfffffade`cdae4900fffffade`a4ca58d0 00000000`00000001 : 00000000`00006fe4 00000000`00000001 fffffade`bd1b2b9d 00000000`00000000 : 0xfffffade`cdae4970fffffade`a4ca58d8 00000000`00006fe4 : 00000000`00000001 fffffade`bd1b2b9d 00000000`00000000 00000000`00000002 : 0x1fffffade`a4ca58e0 00000000`00000001 : fffffade`bd1b2b9d 00000000`00000000 00000000`00000002 00000000`00000000 : 0x6fe4fffffade`a4ca58e8 fffffade`bd1b2b9d : 00000000`00000000 00000000`00000002 00000000`00000000 fffffade`cdae4970 : 0x1fffffade`a4ca58f0 00000000`00000000 : 00000000`00000002 00000000`00000000 fffffade`cdae4970 fffffade`a4ca5d38 : mfehidk+0x11b9d STACK_COMMAND: kb FOLLOWUP_IP: nt!ExDeferredFreePool+33cfffff800`011a9eba 488908 mov qword ptr [rax],rcx SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: nt!ExDeferredFreePool+33c FOLLOWUP_NAME: Pool_corruption IMAGE_NAME: Pool_Corruption DEBUG_FLR_IMAGE_TIMESTAMP: 0 MODULE_NAME: Pool_Corruption FAILURE_BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+33c BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+33c Followup: Pool_corruption--------- Could someone pls help me in reading this dump file?ThanksMaelitoismael

hi there, According to the description, it seems to be server crash issue, we may need to analyze the crash dump file to analysis the root cause of the issue. Please contact Microsoft Customer Service directly so that the memory dump file can be analyzed and this issue can be resolved efficiently. You may obtain the phone numbers for specific technology request please take a look at the web site listed below: https://support.microsoft.com/common/international.aspx?iid=174859&iguid=56907522-6886-4238-a70f-a1d06a4473c7_2_2&rdpath=1 For your reference: Here are some steps to temporally to make the system not automatically restart when the issue occurs. Steps. 1. Right-click "My Computer" and select "Properties" on the desktop 2. Click on the "Advanced" 3. Click "Settings" in the area of "Startup and Recovery" 4. In the prompt dialog box, uncheck the "Automatically restart" in the area of "System failure" 5. Click OK.thanks for understanding.sainath !analyze

Did you find a solution to this problem? I have the same issue using the same os and citrix versionThanksAndrew