Am facing a repeated unexpected shutdown of one server 2003 R2 Sp1 , I have configured Minidump on the server and analysed the minidumb. The Last cause i could find is
"BSOD - NDIS.sys is probable cause"
Loading Dump File [C:\Documents and Settings\Administrator\Desktop\Toolket\Minidump\Mini052009-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (2 procs) Free x86 compatible Product: Server, suite: Enterprise TerminalServer SingleUserTS Built by: 3790.srv03_sp1_rtm.050324-1447 Machine Name: Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8 Debug session time: Wed May 20 15:44:13.508 2009 (GMT+10) System Uptime: 9 days 5:09:51.171 Loading Kernel Symbols ............................................................... ........................................................ Loading User Symbols Loading unloaded module list .............. ******************************************************************************* * * * Bugcheck Analysis * * * *******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000C5, {a4, 2, 1, 808933b7}
Probably caused by : NDIS.sys ( NDIS!ndisWorkerThread+4a )
DRIVER_CORRUPTED_EXPOOL (c5) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is caused by drivers that have corrupted the system pool. Run the driver verifier against any new (or suspect) drivers, and if that doesn't turn up the culprit, then use gflags to enable special pool. Arguments: Arg1: 000000a4, memory referenced Arg2: 00000002, IRQL Arg3: 00000001, value 0 = read operation, 1 = write operation Arg4: 808933b7, address which referenced memory
Thank you for visiting the Microsoft forum. This forum focuses on Perfmon and diagnostic tools. I am moving your question to the moderator forum ("Where is the forum for..?"). The owner of the forum will direct you to a right forum.
