Solved

Blue screen of death -  Windows 2003 enterprise - main production server - hard nut to crack!

Posted on 2006-07-12
9
447 Views
Last Modified: 2012-08-13
Hi!

We have a critical bleu screen error on our main server which among things runs our first name server.

Could you guys interpreter this error for us - we do not know the cause yet, if its triggered by recently installed software.

the server has been running fine for a very long time and has NOT had any hardware upgrades since windows was installed in the first place.

The blue screen of death is as follows:

Plz note: The spaces between the numbers/characters is ONLY made for making reading easier!

*** Stop : 0 X 000 000 B8, (0 x 87 811 AC 0, 0 X 89 F3 B8 D0, 0 X B884 B 000, 0 X 0000 0000)
We would very much aprecate the help we can get on this hard nut to crack!

As for what I know the latest thing that has been added to the server is a backup software "Paragon 7.0" from  http://www.drive-backup.com

Thanks in advance guys!
 
0
Comment
Question by:whatisthesolution
  • 6
  • 3
9 Comments
 
LVL 29

Accepted Solution

by:
mass2612 earned 500 total points
ID: 17096957
Hi,

You can use the Windows Debugging Tools to analyse the memory.dmp file that should be in your C:\windows or c:\winnt folder. Copy this to a workstation and install the debugging tools and then use Windbg to analyse the dump file to try to help figure it out.

http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx

You'll need to add the following setting to the symbol file path within the Windbg tool
SRV*c:\temp*http://msdl.microsoft.com/download/symbols

http://support.microsoft.com/?kbid=311503

What's you hardware details? Are you running the cluster service?
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17097373
Its fujitsu siemens machine with AMD processor - mainboard? -  i dont know..  2 D-link gbs eathernet nics . 3 GB DRR RAM from a danish producer called dan-elect. the setup is nothing special, kind of standard. Cluster service? - No we are not running cluster service...

In the meantime - thanks - we look into the tools and have looks..

I'l return with an update on how it goes...

0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17097386
Oh da.. the second link you gave me is invalid....

Microsoft Internet Symbol Server
The data you requested cannot be retrieved.

You have reached this page because either you or an application that you are running has tried to retrieve debugging data from Microsoft.  The requested data is either not available or needs to be retrieved by using the latest Microsoft Symbol Server technology.

This internet debugging data storage site is provided by Microsoft ........................................

thanks in advance!


0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 29

Expert Comment

by:mass2612
ID: 17097435
That line is not a link for you to browse to its a setting that you add in the Windbg tool so that you have access to the symbol files for the OS.

"SRV*c:\temp*http://msdl.microsoft.com/download/symbols"
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17097450
Ok - it seams that i was to fast there on my keyboard - all links are ok. :-)
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17097641
Hi - i get an error:

................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck B8, {87811ac0, 89f3b8d0, b884b000, 0}

*** ERROR: Module load completed but symbols could not be loaded for hotcore.sys
Probably caused by : hotcore.sys ( hotcore+1514 )

Followup: MachineOwner

 hotcore.sys -->so what do i do know?
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17097708
Well in the meantime -  ive doen some googleing..  and found this:

http://www.file.net/process/hotcore.sys.html

 hotcore.sys file information
The process Hotbackup helper driver belongs to the software HotBackup by Paragon Software Group.

Description: hotcore.sys is located in the folder C:\Windows\System32\drivers. Known file sizes on Windows XP are 18208 bytes (69% of all occurrence), 30820 bytes.
The driver can be started or stopped from Services in the Control Panel or by other programs. The program has no visible window. The service has no detailed description. File hotcore.sys is not a Windows core file. Therefore the technical security rating is 40% dangerous.

So it looks like paragone has taken the server down on its knees.. - so the big million dollar question is on how to fix this.
0
 
LVL 29

Expert Comment

by:mass2612
ID: 17097777
I would disable the Paragon software and services  and contact their technical support for assistance as a first step as there is probably an update or fix that they can provide.
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17097868
Sounds like a good advice! :-)

mass2612! thank you for your help!

Have a very nice day - you deserve it!

Cheers whatisthesolution
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows 2003 new patches 11 76
GPO Access denied in AD 12 52
domain controller migration seems succesful, however.... 9 75
DHCP scope restore question Server 2003 to 2012R2 6 80
So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question