I've been working with a system that is restarting randomly for the last 3 weeks. I've updated the BIOS/Firmware of the S3210SH motherboard, the Firmware of the RAID Card (SRCSASRB) and the Backplane (AXX6DRV3GEXP).
I run a Zenith Infotech Backup, however that is disabled currently (still getting errors).
Here is a memory dump from yesterday that I need help troubleshooting:
I run a Zenith Infotech Backup, however that is disabled currently (still getting errors).
Here is a memory dump from yesterday that I need help troubleshooting:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Missing image name, possible paged-out or corrupt data.
*** WARNING: Unable to verify timestamp for Unknown_Module_52335000
*** ERROR: Module load completed but symbols could not be loaded for Unknown_Module_52335000
Debugger can not determine kernel base address
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (4 procs) Free x86 compatible
Product: LanManNt, suite: SmallBusiness TerminalServer SmallBusinessRestricted SingleUserTS
Built by: 3790.srv03_sp2_gdr.100216-1301
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Sat Dec 4 06:42:22.602 2010 (GMT-6)
System Uptime: 0 days 0:12:36.216
Page 146d35 too large to be in the dump file.
Page 1215ea5 too large to be in the dump file.
Page 1cbea3d too large to be in the dump file.
Missing image name, possible paged-out or corrupt data.
*** WARNING: Unable to verify timestamp for Unknown_Module_52335000
*** ERROR: Module load completed but symbols could not be loaded for Unknown_Module_52335000
Debugger can not determine kernel base address
Loading Kernel Symbols
Missing image name, possible paged-out or corrupt data.
.Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, f7727fe0, 0, 0}
***** Debugger could not find nt in module list, module list might be corrupt, error 0x80070057.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Page 146d35 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 1215ea5 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 2
Page 1cbea3d too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 3
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: f7727fe0
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
***** Debugger could not find nt in module list, module list might be corrupt, error 0x80070057.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Page 146d35 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 1215ea5 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 2
Page 1cbea3d too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 3
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00000000 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
BUGCHECK_STR: 0x7f_8
DEFAULT_BUCKET_ID: DRIVER_FAULT
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from ffdffee0 to ba90cca2
STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
8089a5e0 ffdffee0 8086f007 ffdff000 88d7e9a0 0xba90cca2
8089a600 8088de52 00000000 0000000e 00000000 0xffdffee0
8089db40 00000000 8089db48 8089db48 8089db50 0x8088de52
STACK_COMMAND: kb
SYMBOL_NAME: ANALYSIS_INCONCLUSIVE
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUCKET_ID: CORRUPT_MODULELIST
Followup: MachineOwner
---------