Windows Server 2008 R2 Standard 32bit Blue Screen Crash
Hi,
Please first make sure the system is up to date with the latest security patches and service pack.
If you need further assistance, please understand that to troubleshoot the blue screen issues, we usually need to perform
debugging. However, forum is not the best place for analyzing dump. It’s suggested to contact Microsoft Customer Support Services (CSS) so that a dedicated Support Professional can help you on this issue.
To obtain the phone numbers for specific technology request, please refer to the website listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS
If you are outside the US, please refer to http://support.microsoft.com for regional support phone numbers.
Regards,
Bruce
September 19th, 2011 11:04am
Hi,
Our company have been using a server Windows Server 2008 Standard 32 bit R2 as a Database and Web Server from late of 2009. It was working fine until recently. Within the last 6 months, we experience blue screen error and the system crash. It
happens randomly may be one or twice a day or it just does not happen at all for 2 or 3 weeks.
The last blue screen was on Sept 14 at around 7:30 AM, i catch the Memory.Dmp file with Windbg and here is the content:
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols;srv*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Built by: 6002.18484.x86fre.vistasp2_gdr.110617-0336
Machine Name:
Kernel base = 0x81a1d000 PsLoadedModuleList = 0x81b34c70
Debug session time: Wed Sep 14 07:32:17.377 2011 (UTC - 4:00)
System Uptime: 0 days 10:37:36.088
Loading Kernel Symbols
...............................................................
................................................................
........
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*
*
* Bugcheck Analysis *
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {10, 5, 0, 8bf70422}
*** ERROR: Module load completed but symbols could not be loaded for aarahci.sys
*** ERROR: Module load completed but symbols could not be loaded for intelppm.sys
Probably caused by : aarahci.sys ( aarahci+3d422 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis *
*
*
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000010, memory referenced
Arg2: 00000005, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8bf70422, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 00000010
CURRENT_IRQL: 5
FAULTING_IP:
aarahci+3d422
8bf70422 8b5010 mov edx,dword ptr [eax+10h]
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TRAP_FRAME: 81b12b10 -- (.trap 0xffffffff81b12b10)
ErrCode = 00000000
eax=00000000 ebx=8e209038 ecx=00000007 edx=00000080 esi=8e203bdc edi=79000010
eip=8bf70422 esp=81b12b84 ebp=81b12bc0 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
aarahci+0x3d422:
8bf70422 8b5010 mov edx,dword ptr [eax+10h] ds:0023:00000010=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 8bf70422 to 81a6afd9
STACK_TEXT:
81b12b10 8bf70422 badb0d00 00000080 84c67c38 nt!KiTrap0E+0x2e1
WARNING: Stack unwind information not available. Following frames may be wrong.
81b12bc0 8bf70899 8e209038 84a2a458 84a2a360 aarahci+0x3d422
81b12bdc 8bf70c96 8e203bdc 00000002 00000006 aarahci+0x3d899
81b12bf0 8bf673b2 8e203bdc 81b12c14 8bf3b32e aarahci+0x3dc96
81b12bfc 8bf3b32e 8e203bdc 84a11a30 84a11ae8 aarahci+0x343b2
81b12c14 8bf37d81 00a2a08c 81b12c38 8bf860b4 aarahci+0x832e
81b12c20 8bf860b4 84a2a004 849dd784 849dd780 aarahci+0x4d81
81b12c38 81a63970 849dd780 84a11a30 81ddaf6b SCSIPORT!ScsiPortInterrupt+0x2a
81b12c64 81a638e9 ffffff02 00000061 81b12cf8 nt!KiChainedDispatch2ndLvl+0x44
81b12c64 8c3d1406 ffffff02 00000061 81b12cf8 nt!KiChainedDispatch+0x29
81b12cf8 81acdcd4 84c59cb8 00000000 85278ac0 intelppm+0x1406
81b12d50 81ac5861 00000000 0000000e 00000000 nt!PoIdle+0x2d1
81b12d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0xd
STACK_COMMAND: kb
FOLLOWUP_IP:
aarahci+3d422
8bf70422 8b5010 mov edx,dword ptr [eax+10h]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: aarahci+3d422
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: aarahci
IMAGE_NAME: aarahci.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 48920ae4
FAILURE_BUCKET_ID: 0xD1_aarahci+3d422
BUCKET_ID: 0xD1_aarahci+3d422
Followup: MachineOwner
---------
-----------------------------------------------------------
I check the system property of the server and i see that we use ADAPTEC Serial ATA Host RAID as Storage Controller beside Microsoft iCSCI Initiator and ADAPTEC RAID SCSI Disk Device as 500 GB HD.
I also see that ADAPTEC Serial ATA Host RAID uses aarahci.sys as the driver, i check the driver, it is the latest driver.
My question is even though i understand that there is something wrong with the driver but i am not sure what really happened. Maybe the driver is not good or the disk has fault or we don't have enough memory(our server has only 4 GB
RAM and the memory load is always > 80%, sometime it reaches to 96% and current Page File is 4265 MB)
Can anyone help me to point out what exactly happens with the above error?
What does it mean CURRENT_IRQL: 5?
and what does it mean: DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
Many thanks for your help.
Thang Doan
Free Windows Admin Tool Kit Click here and download it now
September 19th, 2011 1:06pm
first of all there is no windows 2008 r2 32 bit version the only version released for windows 2008 r2 is 64 bit. The problem you are facing is from the SATA RAID controller please update the device driver and see if it help or else you might need to call
the vendor for the supporthttp://www.virmansec.com/blogs/skhairuddin
September 19th, 2011 1:27pm
Sorry, It was a typo, It actually Windows Server 2008 32 bit SP 2.
Thanks,
Thang Doan
Free Windows Admin Tool Kit Click here and download it now
September 19th, 2011 5:17pm