• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 458
  • Last Modified:

Blue screen of death - Windows 2003 enterprise - main production server - hard nut to crack!


We have a critical bleu screen error on our main server which among things runs our first name server.

Could you guys interpreter this error for us - we do not know the cause yet, if its triggered by recently installed software.

the server has been running fine for a very long time and has NOT had any hardware upgrades since windows was installed in the first place.

The blue screen of death is as follows:

Plz note: The spaces between the numbers/characters is ONLY made for making reading easier!

*** Stop : 0 X 000 000 B8, (0 x 87 811 AC 0, 0 X 89 F3 B8 D0, 0 X B884 B 000, 0 X 0000 0000)
We would very much aprecate the help we can get on this hard nut to crack!

As for what I know the latest thing that has been added to the server is a backup software "Paragon 7.0" from  http://www.drive-backup.com

Thanks in advance guys!
  • 6
  • 3
1 Solution

You can use the Windows Debugging Tools to analyse the memory.dmp file that should be in your C:\windows or c:\winnt folder. Copy this to a workstation and install the debugging tools and then use Windbg to analyse the dump file to try to help figure it out.


You'll need to add the following setting to the symbol file path within the Windbg tool


What's you hardware details? Are you running the cluster service?
whatisthesolutionAuthor Commented:
Its fujitsu siemens machine with AMD processor - mainboard? -  i dont know..  2 D-link gbs eathernet nics . 3 GB DRR RAM from a danish producer called dan-elect. the setup is nothing special, kind of standard. Cluster service? - No we are not running cluster service...

In the meantime - thanks - we look into the tools and have looks..

I'l return with an update on how it goes...

whatisthesolutionAuthor Commented:
Oh da.. the second link you gave me is invalid....

Microsoft Internet Symbol Server
The data you requested cannot be retrieved.

You have reached this page because either you or an application that you are running has tried to retrieve debugging data from Microsoft.  The requested data is either not available or needs to be retrieved by using the latest Microsoft Symbol Server technology.

This internet debugging data storage site is provided by Microsoft ........................................

thanks in advance!

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

That line is not a link for you to browse to its a setting that you add in the Windbg tool so that you have access to the symbol files for the OS.

whatisthesolutionAuthor Commented:
Ok - it seams that i was to fast there on my keyboard - all links are ok. :-)
whatisthesolutionAuthor Commented:
Hi - i get an error:

*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck B8, {87811ac0, 89f3b8d0, b884b000, 0}

*** ERROR: Module load completed but symbols could not be loaded for hotcore.sys
Probably caused by : hotcore.sys ( hotcore+1514 )

Followup: MachineOwner

 hotcore.sys -->so what do i do know?
whatisthesolutionAuthor Commented:
Well in the meantime -  ive doen some googleing..  and found this:


 hotcore.sys file information
The process Hotbackup helper driver belongs to the software HotBackup by Paragon Software Group.

Description: hotcore.sys is located in the folder C:\Windows\System32\drivers. Known file sizes on Windows XP are 18208 bytes (69% of all occurrence), 30820 bytes.
The driver can be started or stopped from Services in the Control Panel or by other programs. The program has no visible window. The service has no detailed description. File hotcore.sys is not a Windows core file. Therefore the technical security rating is 40% dangerous.

So it looks like paragone has taken the server down on its knees.. - so the big million dollar question is on how to fix this.
I would disable the Paragon software and services  and contact their technical support for assistance as a first step as there is probably an update or fix that they can provide.
whatisthesolutionAuthor Commented:
Sounds like a good advice! :-)

mass2612! thank you for your help!

Have a very nice day - you deserve it!

Cheers whatisthesolution
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 6
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now