Server 2003 BlueScreen Memory Dump analysis
We have a 2003 Server that is bluescreening about once a week. We've updated all drivers etc..., but it continues to happen. The output of the dump file is this:
BugCheck A, {4, d000001b, 1, 8083d262}
Probably caused by : ntkrnlmp.exe ( nt!KeDelayExecutionThread+4d5 )
Followup: MachineOwner
---------
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000004, memory referenced
Arg2: d000001b, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8083d262, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: 00000004
CURRENT_IRQL: 1b
FAULTING_IP:
nt!KiTimerExpiration+11e
8083d262 894804 mov dword ptr [eax+4],ecx
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: Idle
TRAP_FRAME: 808a3488 -- (.trap 0xffffffff808a3488)
ErrCode = 00000002
eax=00000000 ebx=00000000 ecx=808a8450 edx=00000000 esi=84e78dc8 edi=ffdff5f0
eip=8083d262 esp=808a34fc ebp=808a35a8 iopl=0 nv up ei pl nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010203
nt!KiTimerExpiration+0x11e:
8083d262 894804 mov dword ptr [eax+4],ecx ds:0023:00000004=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 8083d262 to 80836df5
STACK_TEXT:
808a3488 8083d262 badb0d00 00000000 8a4d8da8 nt!KiTrap0E+0x2a7
808a35a8 8083d47c 00000000 00000000 0284bf69 nt!KiTimerExpiration+0x11e
808a3600 80839b3f 00000000 0000000e 00000000 nt!KiRetireDpcList+0x65
808a3604 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x37
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiTimerExpiration+11e
8083d262 894804 mov dword ptr [eax+4],ecx
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!KiTimerExpiration+11e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 48a2bc85
FAILURE_BUCKET_ID: 0xA_nt!KiTimerExpiration+11e
BUCKET_ID: 0xA_nt!KiTimerExpiration+11e
Followup: MachineOwner
---------
I've done some searching online, but I can't figure pinpoint it down since there are a few instances, but no clear cut indication of what is causing it. I'm guessing hardware, but I really don't know what.
March 1st, 2011 6:26pm
Hi,
Please check the following KB to see whether you can resolve the sisue.
http://support.microsoft.com/kb/910835
If the issue continues, I would like to suggest that you contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support
Professional can assist with your request because we find it seems to be system crash issue and we need to analyze the crash dump file to narrow down the root cause of the issue. Unfortunately, it is not effective for us to debug the crash dump file here in
the forum.
To obtain the phone numbers for specific technology request please take a look at the web site listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
Hope the issue will be resolved soon.
Best Regards,
Vincent Hu
Free Windows Admin Tool Kit Click here and download it now
March 1st, 2011 10:06pm
I have a case open, but I thought I would go both routes to cover every possible angle. I've found some other sites with the same exact blue screen since it's a HP Proliant DL 360 G4.
March 2nd, 2011 9:41am