We recently took over server for a Windows 2000 server. The server seems to restart about the same time every night. In the event viewer system log, there are disk warnings/errors leading up the restart. They are listed below:
Event Type: Error
Event Source: ata1200a
Event Category: None
Event ID: 9
Date: 3/6/2008
Time: 10:40:02 PM
User: N/A
Computer: SERVER
Description:
The device, \Device\Scsi\ata1200a1, did not respond within the timeout period.
Data:
0000: fe fe 10 00 01 00 6a 00 ....j.
0008: 00 00 00 00 09 00 04 c0 .......ý
0010: 00 01 00 00 00 00 00 00 ........
0018: ee fe ee fe 00 00 00 00 ýý....
0020: 00 00 00 00 00 00 00 00 ........
0028: ee fe ee fe ee fe ee fe ýýýý
0030: ee fe ee fe 07 00 00 00 ýý....
--------------------------
----------
----------
---
Event Type: Warning
Event Source: Disk
Event Category: None
Event ID: 51
Date: 3/6/2008
Time: 10:38:10 PM
User: N/A
Computer: SERVER
Description:
An error was detected on device \Device\Harddisk0\DR0 during a paging operation.
Data:
0000: 03 00 22 00 01 00 72 00 .."...r.
0008: 00 00 00 00 33 00 04 80 ....3..?
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 00 00 00 ........
0030: 00 00 00 00 28 00 00 00 ....(...
0038: 00 0e 00 00 00 00 00 00 ........
0040: 28 00 04 a0 6a 17 00 00 (..j...
0048: 80 00 ?.
These two errors occur 8 times in the span of about 3 minutes. Then the following restart error occurs.
Event Type: Error
Event Source: EventLog
Event Category: None
Event ID: 6008
Date: 3/6/2008
Time: 10:42:58 PM
User: N/A
Computer: SERVER
Description:
The previous system shutdown at 10:34:02 PM on 3/6/2008 was unexpected.
Data:
0000: d8 07 03 00 04 00 06 00 ý......
0008: 16 00 22 00 02 00 67 01 .."...g.
0010: d8 07 03 00 05 00 07 00 ý......
0018: 04 00 22 00 02 00 67 01 .."...g.
When we started service on this server, the event log was corrupt and multiple services had the incorrect logon information and were not starting. After we cleared the event log, it became corrupted again in about a week. There is also the following error in the application log 1-2 times a day.
Event Type: Error
Event Source: rasctrs
Event Category: None
Event ID: 2001
Date: 3/6/2008
Time: 3:56:15 PM
User: N/A
Computer: SERVER
Description:
The description for Event ID ( 2001 ) in Source ( rasctrs ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: The event log file is corrupt..
The only applications that they run on this server PhoneSlips and TimeClock Plus 4.0. Should we try to find some monitoring software that would give us more information or is it more likely a disk drive problem?
Start Free Trial
