We help IT Professionals succeed at work.

Windows 2003 Terminal Server restarting

Hi Experts,

Please help me analyze this dump file, our server keeps on restarting at least once every three or four days maybe even less, most of the time during the day. See memory dump files.

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [N:\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

WARNING: Non-directory path: 'C:\Documents and Settings\x140675t\Desktop\Windows2003_sp1.x86.fre.rtm.symbols.exe'
WARNING: Non-directory path: 'C:\Documents and Settings\x140675t\Desktop\WindowsServer2003-KB933548-v1-x86-symbols-NRL-ENU.exe'
Symbol search path is: C:\Documents and Settings\x140675t\Desktop\Windows2003_sp1.x86.fre.rtm.symbols.exe;C:\Documents and Settings\x140675t\Desktop\WindowsServer2003-KB933548-v1-x86-symbols-NRL-ENU.exe
Executable search path is:
Page 1c00000 too large to be in the dump file.
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
Page 1c00000 too large to be in the dump file.
Unable to read PsLoadedModuleList
Page 1c00000 too large to be in the dump file.
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
KdDebuggerData.KernBase < SystemRangeStart
Windows Server 2003 Kernel Version 3790 MP (8 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Machine Name:
Kernel base = 0x00000000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Thu Nov  3 16:05:14.747 2011 (UTC + 10:00)
System Uptime: 5 days 23:07:38.583
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
Page 1c00000 too large to be in the dump file.
Unable to read PsLoadedModuleList
Page 1c00000 too large to be in the dump file.
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
KdDebuggerData.KernBase < SystemRangeStart
Loading Kernel Symbols
Page 1c00000 too large to be in the dump file.
Unable to read PsLoadedModuleList
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
CS descriptor lookup failed
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get program counter
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 8E, {c0000005, bf8a24fe, 8efaab14, 0}

***** Debugger could not find nt in module list, module list might be corrupt, error 0x80070057.

Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 0
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 0
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 0
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 2
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 3
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 4
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 5
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 6
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 7
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 0
Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
?: kd> !analyze -v
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get program counter
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf8a24fe, The address that the exception occurred at
Arg3: 8efaab14, Trap Frame
Arg4: 00000000

Debugging Details:
------------------

***** Debugger could not find nt in module list, module list might be corrupt, error 0x80070057.

Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 0
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 0
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 0
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 2
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 3
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 4
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 5
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 6
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 7
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 0

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
+0
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
Page 1c00000 too large to be in the dump file.
bf8a24fe ??              ???

TRAP_FRAME:  8efaab14 -- (.trap 0xffffffff8efaab14)
Page 1c00000 too large to be in the dump file.
Unable to read trap frame at 8efaab14

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x8E

STACK_TEXT:  
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002


STACK_COMMAND:  kb

SYMBOL_NAME:  ANALYSIS_INCONCLUSIVE

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME:  Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP:  0

BUCKET_ID:  CORRUPT_MODULELIST

Followup: MachineOwner
---------

Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002
Page 1c00000 too large to be in the dump file.
GetContextState failed, 0x80004002



I'm also looking at this knowledgebase http://msdn.microsoft.com/en-us/library/ff559271(v=VS.85).aspx, if this is the right explanation. Hope to hear from you guys. Thanks.
Comment
Watch Question

CERTIFIED EXPERT

Commented:
8e indicates a driver or hardware, what sort of hard drive setup do you have in this system?
I always find it easier to run diagnostics on the hardware before chasing software bugs. The fact that is stays up for a couple of days before shutting down, also points to this.  
Ram test and hard drive are the first places to start.
Obviously you've checked the event logs and found nothing else there that might help? It's often possible to help determine the cause by looking at events just before it happens.
Fridolin MansmannMaster of Business Engineering Management
CERTIFIED EXPERT

Commented:
Could be defective memory.
Is enough disk space available?
Could you try to move the page file to another drive (then this is created new) Might help if something is corrupt here causing the reboots. (size: 1,5 or 2x memory size)

Author

Commented:
riteheer,

This is an IBM system x3650/7979, advised to update some drivers and firmwares using their update system express done. I have run diagnostics test on Ram found no error, IBM has requested DSA (Dynamic System Analysis) log numerous times, they initially replaced the two Ram sticks but restarting still happens, so told us that it could be a microsoft bug and a hotfix would possibly fix the problem.


mansmanf,

We have 4GB physical memory, instead of moving I have check the page file, we had initial size to 2046 then maximum 4096. So followed the recommended size of 6142 then set the max size to 8188, then that lowered the page file size (set under system drvioe, harddrive is raid 1, dunno if we could add another drive without changing the raid configuration. No idea also if this would help eliminate the restarting observed maybe for a few days again.
CERTIFIED EXPERT

Commented:
Van,
    I'm assuming you have checked the raid system out to make sure there is no degradation there?  
    The fact that the problem existed prior to and after replacing all ram sticks, pretty much eliminates that.
    It is possible to implement another drive that would be seperate from the raid setup, but unless you are having space concerns, I dont' think this is a viable solution. How much storage space do you have on the drive that holds the paging file?
    Are there any external devices plugged into the system? If so, what and how many?
   I have seen lots of times that a MS hotfix solved similar problems, but I was also blessed with some sort of error message in the event logs that steered me in the right direction. It's possible this may be your solution, but I'm not sure how to go about finding out which hotfix you need. Did they make any recommendation on the hotfix?

Author

Commented:
riteheer,

Just came from holiday anyways server has restarted again after two days, despite adjustment/increase of paging file on system drive. As far as DSA logs and diagnostic light path of IBM, it doesn't indicate any hard drive degradation. It terms of storage space total capacity 136GB, free space 30.2GB. There is no external devices connected on the server. IBM did not make any recommendation as to what hotfix should be applied. Thinking of repairing the OS, reapplying drivers if prompted then this hotfix http://support.microsoft.com/kb/905909.
CERTIFIED EXPERT

Commented:
Van,
  I would suggest running sfc/scannow and then if the problem persists, yes, I would try that hotfix.  You have done just about everything I can think of.  The system file checker might find something and fix it, so I recommend trying that, then if it keeps on, you could try the hotfix. I'm assuming you already have the most current updates?  

Author

Commented:
riteheer,

will let you know the outcome of repair and hotfix, have to schedule this week hopefully.
Fridolin MansmannMaster of Business Engineering Management
CERTIFIED EXPERT

Commented:
I would increase the audit settings under "Local Computer Policy" - "Computer configuration" - "Windows Settings" - "Security Settings" - "Local Policies" - "Audit Policy"

enable "Audit system events", "Audit process tracking", "Audit object access"
This would slightly reduce the performance (but I do not expect this on a IBM x3650 server)

=> maybe then you get a hint in the eventlog

If another crash is happening check the latest events before  the crash

Author

Commented:
mansmanf,

I will set that settings while still looking for time to schedule the repair of the OS and application of hotfix

Author

Commented:
to give an upate, have performed a repair of the OS, still it did not help. After a few days I think on the 7th day it has restarted again. Run windbg see results below, thinking of applying the hotfix although I feel that this should already be a part of the SP2, latest updates are also applied.




Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\x140675t\Desktop\MemDmp\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

WARNING: Non-directory path: 'C:\Documents and Settings\x140675t\Desktop\Windows2003_sp1.x86.fre.rtm.symbols.exe'
WARNING: Non-directory path: 'C:\Documents and Settings\x140675t\Desktop\WindowsServer2003-KB933548-v1-x86-symbols-NRL-ENU.exe'
Symbol search path is: C:\Documents and Settings\x140675t\Desktop\Windows2003_sp1.x86.fre.rtm.symbols.exe;C:\Documents and Settings\x140675t\Desktop\WindowsServer2003-KB933548-v1-x86-symbols-NRL-ENU.exe
Executable search path is:
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
Unable to read PsLoadedModuleList
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
KdDebuggerData.KernBase  SystemRangeStart
Windows Server 2003 Kernel Version 3790 MP (8 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Machine Name:
Kernel base = 0x00000000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Mon Dec 12 16:14:58.328 2011 (UTC + 10:00)
System Uptime: 6 days 18:01:45.526
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
Unable to read PsLoadedModuleList
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
KdDebuggerData.KernBase  SystemRangeStart
Loading Kernel Symbols
Unable to read PsLoadedModuleList
The call to LoadLibrary(ext) failed, Win32 error 0n8
    "Not enough storage is available to process this command."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n8
    "Not enough storage is available to process this command."
Please check your debugger configuration and/or network access.
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
CS descriptor lookup failed
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
The call to LoadLibrary(ext) failed, Win32 error 0n8
    "Not enough storage is available to process this command."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(kdexts) failed, Win32 error 0n8
    "Not enough storage is available to process this command."
Please check your debugger configuration and/or network access.
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Bugcheck code 0000008E
Arguments c0000005 bf8a24fe 989e2b14 00000000

GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
Unable to get current machine context, HRESULT 0x80004002
         ^ Illegal thread error in 'kb'

GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002
GetContextState failed, 0x80004002

CERTIFIED EXPERT
Commented:
Ok, the 8e stop error is a pain to track down.
  Most of the time it's a hardware compatibility issue. If no recent driver changes, then most likely something failing and have to chase it down.
   I have seen issues resolved with a bios update, but am doubtful in this case. Ram has been tested, and replaced, so that should be eliminated.... hard drives shouldn't even give this error with raid.
   I think the hotfix would be my next step. And most hotfixes are not included with SP's or updates, because they are designed to address very limited issues on very limited number of systems. Since they are not usually tested nearly as thoroughly as updates, MS usually takes the stance of not putting them out for everyone to grab without intent.

Author

Commented:
riteheer,

will apply this hotfix this week, will keep you posted thanks.

Author

Commented:
riteheer,

tried applying the hotfix and immediately prompted something like it's already a part of the service pack, any other options?
CERTIFIED EXPERT

Commented:
Whew,
   Van, I think there has got to be someone here that can catch what I'm obviously overlooking. You have a link in the bottom right hand corner of the first post, where you put all of the question info in, that say  'request attention"  
   Use that link, this will cause the moderators to look at the question and send out emails to the correct experts asking for some additional heads on this question. I'm sorry I haven't been much help to you, but maybe if we get someone else involved we can get this fixed.

Author

Commented:
riteheer, Thanks for all your suggestions so far.  It certainly is baffling and annoying.  If we can't find a resolution we might have to scrap the server and replace it.  I will follow your suggestion of the Request Attention link and see what comes of that before doing anything rash though.

Thanks again.
CERTIFIED EXPERT

Commented:
Van,
  I just thought of two more things. One, have you checked to see if there is a bios update available? I looked back thru the previous posts, but didn't see a mention of it, forgive me if I over looked it.  It's possible that a driver got updated, or even a windows update that might be straining some part of the bios or main board and this might be solvable by a bios update.
    Second thing, I just had a similar situation on a brand new laptop, 8E errors and everything pointed to faulty memory. I know you said they put new memory in, but I'm just wondering if it couldn't have been a faulty mem slot. s is possible to remove one ram chip and run it for a few days to see if the problem recurs? and then if it does, try the other slot and other chip?

Author

Commented:
We are still struggling with this problem - in fact it is becoming more frequent.  Of recent times it is restarting almost every day - still at around the same time in the afternoon.

In order to get to a resolution, we have virtualised this physical server and, depending on what we learn from using it as a VM, we will try various options to resolve the problem with the physical machine - including running stress tests on the server as it is at the moment, formatting and reinstalling the current OS and formatting and installing a 2008 OS.  If the physical machine still restarts itself after all this, there MUST be a problem with the hardware (despite IBM's claims to the contrary).

Author

Commented:
Update: The virtual machine mentioned above has restarted itself already.  The problem is obviously not hardware related then, so must be a driver issues of some sort.  I have attached the blue screen error that we were able to catch this time.  Any assistance will be greatly appreciated.  We are about to format and rebuild the physical machine, but how will we know that we don't introduce the same bad driver?
2003stop-error.JPG
CERTIFIED EXPERT

Commented:
There is a hotfix that is directed toward server 2003, I know you have 2008, but might be worth getting MS to have a look based on this:
http://support.microsoft.com/kb/907966

Author

Commented:
Hi riteheer,

I immediately download the hotfix (http://support.microsoft.com/kb/907966), however when tried to apply I got "Setup has detected that the Service Pack version of this system is newer that the update you are applying"

There is no need to install this update.

This happened the same with this hotfix below,

http://support.microsoft.com/kb/905909
hotfixKB907966.JPG

Author

Commented:
Hi Masters,

I have virutalized, (used vmware converter, Vsphere 4.1) the server hoping the restarting would go away, unfortunately it's still happening it followed from physical to virtual. Finally decided to build the server from scratch, this time back to the original physical hardware, new operating system, additional memory from 4GB to 6GB, using windows 2003 32 bit enterprise edition, previously standard windows 2003 32 bit. Initially it shows promising result, it's been running for almost four straight weeks, then suddenly last Tuesday 10 of April the first restart happened, then again today twice in the afternoon.
Just to update the status of the server, we finally opened a support ticket to microsoft. They have identified a win32.sys that is causing this instability which would make the server restart. Patch was given and applied and from then on it's been a couple of weeks that the server has not restarted.

Author

Commented:
Microsoft has identified the win32.sys binary that is causing the restarting, so the patch/KB provided the solution, thanks everyone for the advises.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.