Laurie Kennedy
asked on
the previous system shutdown was unexpected
Hello, We have a Windows 2003 Enterprise Edition SP2 server that will not restart properly. We log in locally to and try to restart the machine and it will start shutting down and then bluescreen. This is a problem because we are using the Windows change journaling and if the machine does not restart "clean" it causing the journaling to flush and our backups have problems. I copied the memory.dmp from the problem server to my xp machine and ran dumpchk.exe. Here is the output:
DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000ece
DirectoryTableBase 006ed000
PfnDataBase 81600000
PsLoadedModuleList 808a6ea8
PsActiveProcessHead 808ad0c8
MachineImageType 0000014c
NumberProcessors 00000008
BugCheckCode 0000000a
BugCheckParameter1 00000050
BugCheckParameter2 d000001b
BugCheckParameter3 00000001
BugCheckParameter4 808312d0
PaeEnabled 00000001
KdDebuggerDataBlock 808943e0
SUMMARY_DUMP32:
DumpOptions 504d4453
HeaderSize 00048000
BitmapSize 00230000
Pages 0000e704
Bitmap.SizeOfBitMap 00230000
KiProcessorBlock at 808a6220
8 KiProcessorBlock entries:
ffdff120 f772f120 f7737120 f773f120 f7747120 f774f120 f7757120 f775f120
Windows XP Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x86 compatible
Built by: 3790.srv03_sp2_gdr.090319- 1204
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Sat Apr 17 19:10:28 2010
System Uptime: 1 days 1:15:22
start end module name
80800000 80a5a000 nt Checksum: FFFFFFFF Timestamp: unavailable (FFFFFFFE)
Unloaded modules:
b760c000 b761c000 EGMinFlt.sys Timestamp: Sat Apr 17 19:03:40 2010 (4BCA3E4C)
b7a74000 b7ad2000 srv.sys Timestamp: Sat Apr 17 19:03:39 2010 (4BCA3E4B)
b67fd000 b6811000 NAVENG.SYS Timestamp: Sat Apr 17 12:03:55 2010 (4BC9DBEB)
b6811000 b6953000 NAVEX15.SYS Timestamp: Sat Apr 17 12:03:55 2010 (4BC9DBEB)
b6bd3000 b6be7000 NAVENG.SYS Timestamp: Sat Apr 17 03:59:41 2010 (4BC96A6D)
b6be7000 b6d29000 NAVEX15.SYS Timestamp: Sat Apr 17 03:59:41 2010 (4BC96A6D)
b90bd000 b90d1000 NAVENG.SYS Timestamp: Sat Apr 17 00:12:07 2010 (4BC93517)
b90f6000 b9238000 NAVEX15.SYS Timestamp: Sat Apr 17 00:12:07 2010 (4BC93517)
b900a000 b901d000 i8042prt.sys Timestamp: Fri Apr 16 17:55:23 2010 (4BC8DCCB)
f77d7000 f77df000 Sfloppy.SYS Timestamp: Fri Apr 16 17:55:19 2010 (4BC8DCC7)
Finished dump check
Thanks
DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000ece
DirectoryTableBase 006ed000
PfnDataBase 81600000
PsLoadedModuleList 808a6ea8
PsActiveProcessHead 808ad0c8
MachineImageType 0000014c
NumberProcessors 00000008
BugCheckCode 0000000a
BugCheckParameter1 00000050
BugCheckParameter2 d000001b
BugCheckParameter3 00000001
BugCheckParameter4 808312d0
PaeEnabled 00000001
KdDebuggerDataBlock 808943e0
SUMMARY_DUMP32:
DumpOptions 504d4453
HeaderSize 00048000
BitmapSize 00230000
Pages 0000e704
Bitmap.SizeOfBitMap 00230000
KiProcessorBlock at 808a6220
8 KiProcessorBlock entries:
ffdff120 f772f120 f7737120 f773f120 f7747120 f774f120 f7757120 f775f120
Windows XP Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x86 compatible
Built by: 3790.srv03_sp2_gdr.090319-
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Sat Apr 17 19:10:28 2010
System Uptime: 1 days 1:15:22
start end module name
80800000 80a5a000 nt Checksum: FFFFFFFF Timestamp: unavailable (FFFFFFFE)
Unloaded modules:
b760c000 b761c000 EGMinFlt.sys Timestamp: Sat Apr 17 19:03:40 2010 (4BCA3E4C)
b7a74000 b7ad2000 srv.sys Timestamp: Sat Apr 17 19:03:39 2010 (4BCA3E4B)
b67fd000 b6811000 NAVENG.SYS Timestamp: Sat Apr 17 12:03:55 2010 (4BC9DBEB)
b6811000 b6953000 NAVEX15.SYS Timestamp: Sat Apr 17 12:03:55 2010 (4BC9DBEB)
b6bd3000 b6be7000 NAVENG.SYS Timestamp: Sat Apr 17 03:59:41 2010 (4BC96A6D)
b6be7000 b6d29000 NAVEX15.SYS Timestamp: Sat Apr 17 03:59:41 2010 (4BC96A6D)
b90bd000 b90d1000 NAVENG.SYS Timestamp: Sat Apr 17 00:12:07 2010 (4BC93517)
b90f6000 b9238000 NAVEX15.SYS Timestamp: Sat Apr 17 00:12:07 2010 (4BC93517)
b900a000 b901d000 i8042prt.sys Timestamp: Fri Apr 16 17:55:23 2010 (4BC8DCCB)
f77d7000 f77df000 Sfloppy.SYS Timestamp: Fri Apr 16 17:55:19 2010 (4BC8DCC7)
Finished dump check
Thanks
try unninstall/reinstal the symantec Norton stuff (I'm assuming you have it installed from the NAVENG.sys)
ASKER
Yes, Symantec Client security is installed. I can give that a shot, but have to wait until tomorrow. Thanks for the suggestion. Any other advice appreciated.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.