locked
WHS BSOD RRS feed

  • Question

  • My WHS implementation is currently crashing at least one a day. I am getting limited information in the event viewer and am finding the issue extremely frustrating. I have tried analysing the minidump but not getting very far. Could someone plese help.
     
     
     
    Microsoft (R) Windows Debugger Version 6.10.0003.233 X86  
    Copyright (c) Microsoft Corporation. All rights reserved.  
     
     
    Loading Dump File [c:\windows\minidump\mini012709-01.dmp]  
    Mini Kernel Dump File: Only registers and stack trace are available  
     
    Symbol search path is: srv*c:\WebSymbols*http://msdl.microsoft.com/download/symbols  
    Executable search path is:   
    Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible  
    Product: Server, suite: SmallBusiness TerminalServer SmallBusinessRestricted SingleUserTS <8000> 
    Built by: 3790.srv03_sp2_gdr.080813-1204  
    Machine Name:  
    Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8 
    Debug session time: Tue Jan 27 04:02:37.062 2009 (GMT+13)  
    System Uptime: 0 days 18:08:40.792  
    Loading Kernel Symbols  
    ...............................................................  
    .....................................................  
    Loading User Symbols  
    Loading unloaded module list  
    ..............  
    *******************************************************************************  
    *                                                                             *  
    *                        Bugcheck Analysis                                    *  
    *                                                                             *  
    *******************************************************************************  
     
    Use !analyze -v to get detailed debugging information.  
     
    BugCheck 1000008E, {c0000005, 80938b50, b8499c48, 0}  
     
    Probably caused by : ntkrpamp.exe ( nt!ObSetSecurityDescriptorInfo+d0 )  
     
    Followup: MachineOwner  
    ---------  
     
    ----- 32 bit Kernel Mini Dump Analysis  
     
    DUMP_HEADER32:  
    MajorVersion        0000000f  
    MinorVersion        00000ece  
    KdSecondaryVersion  00000000  
    DirectoryTableBase  7f96a160  
    PfnDataBase         8089c2a0  
    PsLoadedModuleList  808a6ea8  
    PsActiveProcessHead 808ad0c8  
    MachineImageType    0000014c  
    NumberProcessors    00000002  
    BugCheckCode        1000008e  
    BugCheckParameter1  c0000005  
    BugCheckParameter2  80938b50  
    BugCheckParameter3  b8499c48  
    BugCheckParameter4  00000000  
    PaeEnabled          00000001  
    KdDebuggerDataBlock 808943e0  
    ProductType         00000003  
    SuiteMask           00008131  
    WriterStatus        00000000  
    MiniDumpFields      00000cff   
     
    TRIAGE_DUMP32:  
    ServicePackBuild      00000200   
    SizeOfDump            00010000   
    ValidOffset           0000fffc   
    ContextOffset         00000320   
    ExceptionOffset       000007d0   
    MmOffset              00001068   
    UnloadedDriversOffset 000010a0   
    PrcbOffset            00001878   
    ProcessOffset         00002738   
    ThreadOffset          000029b0   
    CallStackOffset       00002c00   
    SizeOfCallStack       00004000   
    DriverListOffset      00006f18   
    DriverCount           00000075   
    StringPoolOffset      000091d8   
    StringPoolSize        00002128   
    BrokenDriverOffset    00000000   
    TriageOptions         ffffffff   
    TopOfStack            b8499cbc   
    DebuggerDataOffset    00006c00   
    DebuggerDataSize      00000318   
    DataBlocksOffset      0000b300   
    DataBlocksCount       00000004   
      b8499000 - b8499fff at offset 0000b340  
      e540d000 - e540dfff at offset 0000c340  
      e162c000 - e162cfff at offset 0000d340  
      8a197000 - 8a197fff at offset 0000e340  
      Max offset f340, 1b18 from end of file  
     
     
    Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible  
    Product: Server, suite: SmallBusiness TerminalServer SmallBusinessRestricted SingleUserTS <8000> 
    Built by: 3790.srv03_sp2_gdr.080813-1204  
    Machine Name:  
    Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8 
    Debug session time: Tue Jan 27 04:02:37.062 2009 (GMT+13)  
    System Uptime: 0 days 18:08:40.792  
    start    end        module name  
    80800000 80a5a000   nt        Wed Aug 13 21:42:13 2008 (48A2AC75)  
    80a5a000 80a86000   hal       Sat Feb 17 18:48:26 2007 (45D6972A)  
    b8d32000 b8d45000   sysaudio  Sat Feb 17 19:28:59 2007 (45D6A0AB)  
    b8d45000 b8d60000   wdmaud    Sat Feb 17 19:30:05 2007 (45D6A0ED)  
    b93c8000 b93cbb20   aswRdr    Sat Jan 10 10:42:56 2009 (4967C4E0)  
    b98b0000 b98db000   RDPWD     Sat Feb 17 18:44:38 2007 (45D69646)  
    b9a43000 b9a4e000   TDTCP     Sat Feb 17 18:44:32 2007 (45D69640)  
    b9b83000 b9be1000   srv       Fri Dec 12 00:35:59 2008 (4940FB1F)  
    b9cf9000 b9d49000   HTTP      Sat Feb 17 19:28:12 2007 (45D6A07C)  
    ba159000 ba170000   aswMonFlt  Tue Nov 25 07:09:57 2008 (492AEDF5)  
    ba2b0000 ba2cd000   dump_atapi  Sat Feb 17 19:07:34 2007 (45D69BA6)  
    ba2d7000 ba2ec000   Cdfs      Sat Feb 17 19:27:08 2007 (45D6A03C)  
    ba314000 ba334000   aswSP     Fri Jan 02 05:43:24 2009 (495CF2AC)  
    ba334000 ba345000   Fips      Sat Feb 17 19:26:33 2007 (45D6A019)  
    ba345000 ba3bb000   mrxsmb    Sat Sep 06 03:26:52 2008 (48C14FBC)  
    ba3e3000 ba413000   rdbss     Sat Feb 17 19:27:37 2007 (45D6A059)  
    ba413000 ba43d000   afd       Thu Aug 14 22:46:56 2008 (48A40D20)  
    ba43d000 ba451000   arp1394   Sat Feb 17 18:54:31 2007 (45D69897)  
    ba451000 ba482000   netbt     Sat Feb 17 19:28:57 2007 (45D6A0A9)  
    ba482000 ba4ac000   ipnat     Sat Feb 17 18:59:08 2007 (45D699AC)  
    ba4fc000 ba58c000   tcpip     Sat Jun 21 02:20:25 2008 (485BBCA9)  
    ba58c000 ba5a5000   ipsec     Sat Feb 17 19:29:28 2007 (45D6A0C8)  
    ba5f5000 ba60a000   drmk      Sat Feb 17 19:12:29 2007 (45D69CCD)  
    ba60a000 ba633000   portcls   Sat Feb 17 19:30:03 2007 (45D6A0EB)  
    ba633000 baae4000   RtkHDAud  Thu Jul 24 22:02:34 2008 (4888533A)  
    baae4000 baaf9000   usbhub    Sat Feb 17 19:13:05 2007 (45D69CF1)  
    babe1000 bac40000   update    Tue May 29 00:15:16 2007 (465AC7D4)  
    bac68000 bac9f000   rdpdr     Sat Feb 17 18:51:00 2007 (45D697C4)  
    bac9f000 bacb1000   raspptp   Sat Feb 17 19:29:20 2007 (45D6A0C0)  
    bacb1000 bacca000   ndiswan   Sat Feb 17 19:29:22 2007 (45D6A0C2)  
    bacca000 bacde000   rasl2tp   Sat Feb 17 19:29:02 2007 (45D6A0AE)  
    bacde000 bad14000   ap33nbiw  Fri Aug 22 23:05:17 2008 (48AE9D6D)  
    bad14000 bad1e000   Dxapi     Tue Mar 25 20:06:01 2003 (3E7FFFD9)  
    bad24000 bad2d000   dump_WMILIB  Tue Mar 25 20:13:00 2003 (3E80017C)  
    bad34000 bad3e000   ndisuio   Sat Feb 17 18:58:25 2007 (45D69981)  
    bada4000 badb1000   netbios   Sat Feb 17 18:58:29 2007 (45D69985)  
    badb4000 badc9000   serial    Sat Feb 17 19:06:46 2007 (45D69B76)  
    badc9000 baddb000   nic1394   Sat Feb 17 18:54:31 2007 (45D69897)  
    baddb000 badf5a80   Rtenicxp  Mon Jun 16 19:08:42 2008 (4856117A)  
    badf6000 bae1d000   ks        Sat Feb 17 19:30:40 2007 (45D6A110)  
    bae1d000 bae31000   redbook   Sat Feb 17 19:07:26 2007 (45D69B9E)  
    bae31000 bae46000   cdrom     Sat Feb 17 19:07:48 2007 (45D69BB4)  
    bae46000 bae6e000   HDAudBus  Fri May 27 03:46:29 2005 (4295EF55)  
    bae6e000 bae75000   dxgthk    Tue Mar 25 20:05:52 2003 (3E7FFFD0)  
    bae7e000 bae86000   aswFsBlk  Tue Jan 06 11:03:30 2009 (496283B2)  
    bae8e000 bae96000   rasacd    Tue Mar 25 20:11:50 2003 (3E800136)  
    bae96000 bae9e000   RDPCDD    Tue Mar 25 20:03:05 2003 (3E7FFF29)  
    bae9e000 baea6000   mnmdd     Tue Mar 25 20:07:53 2003 (3E800049)  
    baea6000 baeac300   HIDPARSE  Sat Feb 17 19:12:35 2007 (45D69CD3)  
    baeb6000 baebd000   Beep      Tue Mar 25 20:03:04 2003 (3E7FFF28)  
    baebe000 baee8000   USBPORT   Sat Feb 17 19:12:59 2007 (45D69CEB)  
    baee8000 baf04000   VIDEOPRT  Sat Feb 17 19:10:30 2007 (45D69C56)  
    bf800000 bf9d0000   win32k    Tue Sep 16 01:22:02 2008 (48CE617A)  
    bf9d0000 bf9e7000   dxg       Sat Feb 17 19:14:39 2007 (45D69D4F)  
    bff40000 bff48000   framebuf  Tue Mar 25 22:46:25 2003 (3E802571)  
    bff60000 bff7e000   RDPDD     Sun Feb 18 03:01:19 2007 (45D70AAF)  
    bffa0000 bffea000   ATMFD     Sun Feb 18 02:59:31 2007 (45D70A43)  
    f7200000 f721d000   atapi     Sat Feb 17 19:07:34 2007 (45D69BA6)  
    f721d000 f7233000   pci       Sat Feb 17 18:59:03 2007 (45D699A7)  
    f7233000 f7267000   ACPI      Sat Feb 17 18:58:47 2007 (45D69997)  
    f7267000 f7286000   SCSIPORT  Sat Feb 17 19:28:41 2007 (45D6A099)  
    f7286000 f7386000   sptd      Thu Mar 06 13:32:57 2008 (47CF3BB9)  
    f7487000 f7490000   WMILIB    Tue Mar 25 20:13:00 2003 (3E80017C)  
    f7497000 f74a5f80   ohci1394  Sat Feb 17 19:14:25 2007 (45D69D41)  
    f74a7000 f74b4200   1394BUS   Sat Feb 17 19:14:22 2007 (45D69D3E)  
    f74b7000 f74c6000   isapnp    Sat Feb 17 18:58:57 2007 (45D699A1)  
    f74c7000 f74d4000   PCIIDEX   Sat Feb 17 19:07:32 2007 (45D69BA4)  
    f74d7000 f74e7000   MountMgr  Sat Feb 17 19:05:35 2007 (45D69B2F)  
    f74e7000 f74f2000   PartMgr   Sat Feb 17 19:29:25 2007 (45D6A0C5)  
    f74f7000 f7507000   disk      Sat Feb 17 19:07:51 2007 (45D69BB7)  
    f7507000 f7517000   DEfilter  Sat Nov 01 04:13:30 2008 (490B209A)  
    f7517000 f7523000   Dfs       Sat Feb 17 18:51:17 2007 (45D697D5)  
    f7527000 f7531000   crcdisk   Sat Feb 17 19:09:50 2007 (45D69C2E)  
    f7547000 f7550000   raspti    Sat Feb 17 18:59:23 2007 (45D699BB)  
    f7557000 f7565000   msgpc     Sat Feb 17 18:58:37 2007 (45D6998D)  
    f7567000 f75712a0   aswTdi    Sat Jan 10 10:43:06 2009 (4967C4EA)  
    f7577000 f7584000   wanarp    Sat Feb 17 18:59:17 2007 (45D699B5)  
    f7587000 f7596000   intelppm  Sat Feb 17 18:48:30 2007 (45D6972E)  
    f7597000 f75a3000   vgapnp    Sat Feb 17 19:10:30 2007 (45D69C56)  
    f75a7000 f75b0000   watchdog  Sat Feb 17 19:11:45 2007 (45D69CA1)  
    f75b7000 f75c5000   imapi     Sat Feb 17 19:08:22 2007 (45D69BD6)  
    f75c7000 f75d1000   serenum   Sat Feb 17 19:06:44 2007 (45D69B74)  
    f75d7000 f75e0000   ndistapi  Sat Feb 17 18:59:19 2007 (45D699B7)  
    f75e7000 f75f6000   raspppoe  Sat Feb 17 18:59:23 2007 (45D699BB)  
    f75f7000 f7602000   TDI       Sat Feb 17 19:01:19 2007 (45D69A2F)  
    f7607000 f7612000   ptilink   Sat Feb 17 19:06:38 2007 (45D69B6E)  
    f7617000 f7626000   termdd    Sat Feb 17 18:44:32 2007 (45D69640)  
    f7627000 f7632000   kbdclass  Sat Feb 17 19:05:39 2007 (45D69B33)  
    f7637000 f7641000   mouclass  Tue Mar 25 20:03:09 2003 (3E7FFF2D)  
    f7647000 f7654000   Npfs      Sat Feb 17 18:50:36 2007 (45D697AC)  
    f7657000 f7660000   mssmbios  Sat Feb 17 18:59:12 2007 (45D699B0)  
    f7667000 f7675000   NDProxy   Sat Feb 17 18:59:21 2007 (45D699B9)  
    f76b7000 f76c2000   Msfs      Sat Feb 17 18:50:33 2007 (45D697A9)  
    f76c9000 f76e0000   SI3132    Thu Oct 04 07:41:04 2007 (4703E240)  
    f76e0000 f7707000   ftdisk    Sat Feb 17 19:08:05 2007 (45D69BC5)  
    f7707000 f770f000   kdcom     Tue Mar 25 20:08:00 2003 (3E800050)  
    f770f000 f7717000   BOOTVID   Tue Mar 25 20:07:58 2003 (3E80004E)  
    f7717000 f771e000   pciide    Tue Mar 25 20:04:46 2003 (3E7FFF8E)  
    f771f000 f7726000   dmload    Tue Mar 25 20:08:08 2003 (3E800058)  
    f7727000 f772f000   SiRemFil  Thu Jun 21 08:06:09 2007 (467988B1)  
    f778f000 f7797000   Fs_Rec    Tue Mar 25 20:08:36 2003 (3E800074)  
    f7797000 f779e000   Null      Tue Mar 25 20:03:05 2003 (3E7FFF29)  
    f779f000 f77a4180   usbuhci   Sat Feb 17 19:13:02 2007 (45D69CEE)  
    f77af000 f77b5b80   usbehci   Sat Feb 17 19:12:56 2007 (45D69CE8)  
    f7817000 f781f000   audstub   Tue Mar 25 20:09:12 2003 (3E800098)  
    f782e000 f7841000   CLASSPNP  Sat Feb 17 19:28:16 2007 (45D6A080)  
    f7841000 f786b000   volsnap   Sat Feb 17 19:08:23 2007 (45D69BD7)  
    f786b000 f7897000   dmio      Sat Feb 17 19:10:44 2007 (45D69C64)  
    f7897000 f789a100   SiWinAcc  Fri Jun 15 12:02:27 2007 (4671D713)  
    f7950000 f7987000   Si3132r5  Wed Sep 17 12:38:17 2008 (48D05179)  
    f798f000 f7990280   swenum    Sat Feb 17 19:05:56 2007 (45D69B44)  
    f7991000 f7992580   USBD      Tue Mar 25 20:10:39 2003 (3E8000EF)  
    f7a0b000 f7a2a000   Mup       Sat Feb 17 19:27:41 2007 (45D6A05D)  
    f7a2a000 f7a4f000   fltMgr    Sat Feb 17 18:51:08 2007 (45D697CC)  
    f7ae5000 f7b24000   NDIS      Sat Feb 17 19:28:49 2007 (45D6A0A1)  
    f7b24000 f7bb9000   Ntfs      Sat Feb 17 19:27:23 2007 (45D6A04B)  
    f7bb9000 f7bdf000   KSecDD    Sat Feb 17 18:46:32 2007 (45D696B8)  
     
    Unloaded modules:  
    b82aa000 b82da000   kmixer.sys  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    b866a000 b869a000   kmixer.sys  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    ba4d4000 ba4dc000   drmkaud.sys  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    b8cb4000 b8ce4000   kmixer.sys  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    b8ce4000 b8cf6000   DMusic.sys  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    b8cf6000 b8d0a000   swmidi.sys  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    b8d0a000 b8d32000   aec.sys   
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    f7a03000 f7a05000   splitter.sys  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    f76a7000 f76b3000   vga.sys   
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    f7697000 f76a0000   kbdhid.sys  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    ba592000 ba5a5000   i8042prt.SYS  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    f773f000 f7747000   Sfloppy.SYS  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    f7687000 f7691000   Flpydisk.SYS  
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    f7677000 f7682000   Fdc.SYS   
        Timestamp: unavailable (00000000)  
        Checksum:  00000000  
    *******************************************************************************  
    *                                                                             *  
    *                        Bugcheck Analysis                                    *  
    *                                                                             *  
    *******************************************************************************  
     
    Use !analyze -v to get detailed debugging information.  
     
    BugCheck 1000008E, {c0000005, 80938b50, b8499c48, 0}  
     
    Probably caused by : ntkrpamp.exe ( nt!ObSetSecurityDescriptorInfo+d0 )  
     
    Followup: MachineOwner  
    ---------  
     
    Finished dump check  
     

     

    Monday, January 26, 2009 7:31 PM

Answers

  • I think I may have solved this in that I had 'tweaked' the Gigagabyte BIOS systems for 'turbo' memory usage and optimised 'power management'. On disabling both tehse items MemTest86+ now runs continuously and it's been a while since my system BSOD. MANY THANKS FOR ALL YOUR SUPPORT. 
    • Marked as answer by TripleFun Saturday, January 31, 2009 2:12 PM
    Saturday, January 31, 2009 2:11 PM

All replies

  • The minidump is honestly not that useful in this context. Assuming this to be a home-built server, could you connect a keyboard, monitor and mouse, and set it to not reboot on a blue screen? A hard stop is much easier to work with. :)

    That said, have you recently changed anything on your server? What add-ins do you have installed? Do you have any software you installed that wasn't installed as an add-in, though the console?

    I'm not on the WHS team, I just post a lot. :)
    Monday, January 26, 2009 7:46 PM
    Moderator
  • Ken

    Thanks for the rapid response. I am running both PS3 Media Server and Tversity. I have set Tversity to refresh the library every 4 hours commenciung 12:00. I currently have 10 HDD with photos, music and videos mirrored. Current disk storage is  6.43TB with 1.42TB free.

    I am using a gigabyte ga-ep45-ds5 mobo with E7200 cpu. I had problems with the latest LAN driver (backups were crashing the server due to loss connection) and reverted to a previous relesase (backups are now working). I now get a NetBT error (id 4307) everytime I restart the sevrer (Initialization failed because the transport refused to open initial Addresses.) but don't see this as significant (the 'nbtsata -n' output is consistent). I also get an 'application popup' (event id 26) which indicates that at least 'one server or driver' failed during system startup. I can find no other infdormation as to what this is.

    How do I set 'not reboot on blue screen' and what should I do in the event the system crashes ?

     

    Monday, January 26, 2009 8:13 PM
  • To set the server to not automatically restart:
    • Log in using remote desktop or physical console
    • Right click My Computer and select Properties
    • Select the Advanced tab
    • Under Startup and Recovery, click Settings
    • Uncheck Automatically Restart under system failure
    In this configuration, you will need the physically connected keyboard, video, and mouse I recommended you attach. It is possible that you will get exactly the same error when the server blue screens; that's okay.

    I'll warn you that in my experience, machine checks of any sort are almost always related to hardware, and if not hardware, almost always it's a driver issue. You may want to pull out your favorite hardware diagnostic suite and run a full cycle of tests. At a minimum, memtest86 would be a good one to let run overnight, or even for a couple of days.

    I'm not on the WHS team, I just post a lot. :)
    Monday, January 26, 2009 8:40 PM
    Moderator
  • Worst case scenario:

    Once you have exhausted other methods, you may want to just do a server reinstall. You won't lose your files but if an add-in is the issue this may prove that out. See if it will run in a stable state for a week or so. Then readd your services one at a time a few days apart to test compatibility/stability.


    PACS Technical Support Engineer
    Tuesday, January 27, 2009 3:39 AM
  • Thanks for the feedback

    I had a copy of Windows Memtest and ran that overnight; it froze on Test 27 rather than reporting an error. I don't know if this is indicative of a memory or CPU (or something else) problem. I am now executing Memtest86+ and will see if that provides any more insight ???

    Tuesday, January 27, 2009 4:45 PM
  • If you could update "Startup and Recovery" to create at least "Kernel memory dump", instead of minidump, in case of BSOD, it will be really helpful to identify which component on your system is failing. When you have a BSOD again, please issue "!analyze -v" from WinDBG command window and share out the output, then we will have a better idea about where the failure might be.

    Tuesday, January 27, 2009 9:12 PM
  • The computer BSOD at 4:30am (always seems to be about the same time)

    FYI, my mobo is a Gigabyte Ga-ep45-ds5; cpu E7200 and I have 2GB Corsair memory; There are currently 10 disks (1 x 320GB system; 7 x 1TB Data, 2 x 1TB removed)

    Here is the output of the windbg memdump analysis (something to do with WHSarch.exe ??) Alternatively it could be a memory error given the fact the Memtest 'froze' on the 27th pass. I have loaded a copy of memtest86 but have not tried it yet...

    Thanks for your assistance

    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: 0007ffd4, memory referenced
    Arg2: d000001b, IRQL
    Arg3: 00000000, bitfield :
     bit 0 : value 0 = read operation, 1 = write operation
     bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
    Arg4: 808298a6, address which referenced memory

    Debugging Details:
    ------------------

    *** ERROR: Module load completed but symbols could not be loaded for netbios.sys
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for halmacpi.dll -
    PEB is paged out (Peb.Ldr = 7ffd800c).  Type ".hh dbgerr001" for details
    PEB is paged out (Peb.Ldr = 7ffd800c).  Type ".hh dbgerr001" for details

    READ_ADDRESS:  0007ffd4

    CURRENT_IRQL:  1b

    FAULTING_IP:
    nt!KeWaitForSingleObject+16a
    808298a6 803a02          cmp     byte ptr [edx],2

    DEFAULT_BUCKET_ID:  DRIVER_FAULT

    BUGCHECK_STR:  0xA

    PROCESS_NAME:  whsarch.exe

    TRAP_FRAME:  b839fa40 -- (.trap 0xffffffffb839fa40)
    ErrCode = 00000000
    eax=00000000 ebx=85366748 ecx=ffdff538 edx=0007ffd4 esi=853666a0 edi=85366718
    eip=808298a6 esp=b839fab4 ebp=b839faf4 iopl=0         nv up ei pl zr na pe nc
    cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
    nt!KeWaitForSingleObject+0x16a:
    808298a6 803a02          cmp     byte ptr [edx],2           ds:0023:0007ffd4=??
    Resetting default scope

    LAST_CONTROL_TRANSFER:  from 808298a6 to 8088c993

    STACK_TEXT: 
    b839fa40 808298a6 badb0d00 0007ffd4 80973318 nt!KiTrap0E+0x2a7
    b839faf4 8087cb70 0007ffd4 0000001b 00000000 nt!KeWaitForSingleObject+0x16a
    b839fb2c 8087d057 02000000 b839fc48 00000000 nt!ExpWaitForResource+0x30
    b839fb4c 809716e6 88523b38 00000001 b839fc48 nt!ExAcquireResourceSharedLite+0xf5
    b839fb60 8096b66f b839fc48 00000000 845977e4 nt!SeLockSubjectContext+0x20
    b839fb78 8094ac8e e1002bb0 b839fc48 00000000 nt!SeAccessCheck+0xa9
    b839fce4 8094aef3 0077d7f4 001f0fff 00000000 nt!PspCreateProcess+0x7ae
    b839fd38 808897bc 0077d7f4 001f0fff 00000000 nt!NtCreateProcessEx+0x77
    b839fd38 7c8285ec 0077d7f4 001f0fff 00000000 nt!KiFastCallEntry+0xfc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    0077dc54 00000000 00000000 00000000 00000000 0x7c8285ec


    STACK_COMMAND:  kb

    FOLLOWUP_IP:
    nt!KeWaitForSingleObject+16a
    808298a6 803a02          cmp     byte ptr [edx],2

    SYMBOL_STACK_INDEX:  1

    SYMBOL_NAME:  nt!KeWaitForSingleObject+16a

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME:  ntkrpamp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP:  48a2ac75

    FAILURE_BUCKET_ID:  0xA_nt!KeWaitForSingleObject+16a

    BUCKET_ID:  0xA_nt!KeWaitForSingleObject+16a

    Followup: MachineOwner
    ---------



     

    Wednesday, January 28, 2009 5:15 PM
  • TripleFun said:

    Here is the output of the windbg memdump analysis (something to do with WHSarch.exe ??) Alternatively it could be a memory error given the fact the Memtest 'froze' on the 27th pass. I have loaded a copy of memtest86 but have not tried it yet...

    Again, the bugcheck, minidump, etc. are not really all that useful here. What I would really be interested in is the BSOD itself. However, given the above snippet, I'm going to bet on memory or a driver issue.
    I'm not on the WHS team, I just post a lot. :)
    Wednesday, January 28, 2009 6:00 PM
    Moderator
  • Hello,

    We’d like to take a look at this. Can you submit a bug on Connect ?

    Also, please include the following files from the %qlogs% directory on the server.

    whsarch*.log

    deutil*.log
    If for some reason you are unable to locate these logs, please submit a server CAB with the bug.

    Thank you


    Lara Jones [MSFT] | Program Manager
    Community Support and Beta | Windows Home Server Team
    Windows Home Server Team Blog
    Connect Windows Home Server
    Windows Home Server
    Thursday, January 29, 2009 2:40 AM
    Moderator
  • Lara, I have submiited the report as requested including CAB upload and associated logs. Thanks for your assistance.

    In response to an earlier request I will let the system die tonight and not force a restart. I have a console attached to the server and will review the output tomorow morning.

    Note this has just started hapenning (1 week). I had a strange event whereby one of my disks was 'dropped' and I lost all my backups (and some media files). I tried to 'recover' the disk but it failed to assign a drive letter. I subsequently 'added' thedisk as if it were new. I now 'duplicate' all media files (at great cost).

    Another event of note is that the latest two versions of the Gigabyte Realtek RTL8168C(P)/8111C(P) PCI lan card cause a lost connection during backup with the result the WHS dies. I restored their driver of last July (5.696.616.2008) and all is now running as expected.

    Thursday, January 29, 2009 3:47 AM
  • I think I may have solved this in that I had 'tweaked' the Gigagabyte BIOS systems for 'turbo' memory usage and optimised 'power management'. On disabling both tehse items MemTest86+ now runs continuously and it's been a while since my system BSOD. MANY THANKS FOR ALL YOUR SUPPORT. 
    • Marked as answer by TripleFun Saturday, January 31, 2009 2:12 PM
    Saturday, January 31, 2009 2:11 PM
  • Have similar problem and its with Win 2k3 Stadard R2 could anyone help me on this! Path:- http://cid-2f73cbd70fc6cf85.office.live.com/self.aspx/March%202011/Mini030511-01.dmp Thanks,
    sonic_k7
    Monday, March 7, 2011 6:52 PM