Link to home
Start Free TrialLog in
Avatar of Laurie Kennedy
Laurie KennedyFlag for United States of America

asked on

the previous system shutdown was unexpected

Hello,  We have a Windows 2003 Enterprise Edition SP2 server that will not restart properly.  We log in locally to and try to restart the machine and it will start shutting down and then bluescreen.  This is a problem because we are using the Windows change journaling and if the machine does not restart "clean" it causing the journaling to flush and our backups have problems.  I copied the memory.dmp from the problem server to my xp machine and ran dumpchk.exe.  Here is the output:

DUMP_HEADER32:
MajorVersion        0000000f
MinorVersion        00000ece
DirectoryTableBase  006ed000
PfnDataBase         81600000
PsLoadedModuleList  808a6ea8
PsActiveProcessHead 808ad0c8
MachineImageType    0000014c
NumberProcessors    00000008
BugCheckCode        0000000a
BugCheckParameter1  00000050
BugCheckParameter2  d000001b
BugCheckParameter3  00000001
BugCheckParameter4  808312d0
PaeEnabled          00000001
KdDebuggerDataBlock 808943e0

SUMMARY_DUMP32:
DumpOptions         504d4453
HeaderSize          00048000
BitmapSize          00230000
Pages               0000e704
Bitmap.SizeOfBitMap 00230000

KiProcessorBlock at 808a6220
  8 KiProcessorBlock entries:
  ffdff120 f772f120 f7737120 f773f120 f7747120 f774f120 f7757120 f775f120


Windows XP Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x86 compatible
Built by: 3790.srv03_sp2_gdr.090319-1204
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Sat Apr 17 19:10:28 2010
System Uptime: 1 days 1:15:22
start    end        module name
80800000 80a5a000   nt             Checksum: FFFFFFFF  Timestamp: unavailable (FFFFFFFE)

Unloaded modules:
b760c000 b761c000   EGMinFlt.sys    Timestamp: Sat Apr 17 19:03:40 2010 (4BCA3E4C)
b7a74000 b7ad2000   srv.sys     Timestamp: Sat Apr 17 19:03:39 2010 (4BCA3E4B)
b67fd000 b6811000   NAVENG.SYS    Timestamp: Sat Apr 17 12:03:55 2010 (4BC9DBEB)
b6811000 b6953000   NAVEX15.SYS    Timestamp: Sat Apr 17 12:03:55 2010 (4BC9DBEB)
b6bd3000 b6be7000   NAVENG.SYS    Timestamp: Sat Apr 17 03:59:41 2010 (4BC96A6D)
b6be7000 b6d29000   NAVEX15.SYS    Timestamp: Sat Apr 17 03:59:41 2010 (4BC96A6D)
b90bd000 b90d1000   NAVENG.SYS    Timestamp: Sat Apr 17 00:12:07 2010 (4BC93517)
b90f6000 b9238000   NAVEX15.SYS    Timestamp: Sat Apr 17 00:12:07 2010 (4BC93517)
b900a000 b901d000   i8042prt.sys    Timestamp: Fri Apr 16 17:55:23 2010 (4BC8DCCB)
f77d7000 f77df000   Sfloppy.SYS    Timestamp: Fri Apr 16 17:55:19 2010 (4BC8DCC7)

Finished dump check
Thanks
Avatar of x-men
x-men
Flag of Portugal image

try unninstall/reinstal the symantec Norton stuff (I'm assuming you have it installed from the NAVENG.sys)
Avatar of Laurie Kennedy

ASKER

Yes, Symantec Client security is installed.  I can give that a shot, but have to wait until tomorrow.  Thanks for the suggestion.  Any other advice appreciated.
ASKER CERTIFIED SOLUTION
Avatar of Laurie Kennedy
Laurie Kennedy
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial