asked on 1/5/2013

Server Restarts every Thursday at 9:14pm

Hello,
This is the third week that it has happened. I come in Friday morning, RDP login to server. Server says it was an unplanned shutdown, give reason.

I research it and it is exactly 9:14pm each time. I didn't catch last weeks because we are on a holiday break, when I returned on Weds, I saw it and have been looking it up when I had a chance, and then this morning it did it again. I saw it three Thursdays ago and the error messages came back to VGA Drivers.

BugCheck 1001 1/3/2013 9:15:52 PM 1
Event Details: The computer has rebooted from a bugcheck. The bugcheck was: 0x00000027 (0x00000000baad0073, 0xfffff8800d250dc8, 0xfffff8800d250630, 0xfffff80001dc24ee) A dump was saved in: C:\Windows\Memory.dmp . Report ID: 010312-70512-01.

I haven't figured out how to read the memory.dmp, do I need a log reader, tried opening up in notepad but takes extremely long and is gibberish.

Any assistance would be greatly appreaciated.
Thanks for your time.

Microsoft Server OS

Last Comment

suttons27

1/8/2013

MaxEL_UA

1/5/2013

Check your OS tasks list
Also check scheduled tasks of all of installed software.
In case of repetitive problem - try to schedule performance monitoring during expected problematic time period

MaxEL_UA

1/5/2013

Do not try disable IPv6 protocol system-wide by registry changes

suttons27

1/5/2013

ASKER

Thanks, didn't think about looking at tasks list. Just did, didn't see anything that would have been running at that time though.

I also just came across this kb article, will try tonight after backup

http://support.microsoft.com/kb/974759/en-us

Shane McKeown

1/5/2013

Is the dump file a full memory dump or a minidump? Full dump files are too big for you to attach here, minidumps(KB's in size) are ok to attach and we can analyse it to see what it contains...

Opening these files in notepad is useless as you need the Windows Debugging Tools kit to properly analyse the files anyways

See what size the dump file is, if its very large(MB in size) then its a full dump, then I'd switch the server to create minidumps and next time it crashes it will create the new file which you can attach

As for the time this happens - what is running at that time? Is the backup process kicking in round that time for example? Since this is a dump/crash that means whatever process is running at that time is possibly the cause...

To switch to minidump files - right click Computer, Properties, Advanced System settings(on right hand column), Startup & recovery button - switch from Kernel Memory dump to Small Memory Dump and reboot to have it take affect

ASKER CERTIFIED SOLUTION

marek1712

1/7/2013

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

suttons27

1/8/2013

ASKER

Thanks, my apologies I have been out of the office. Backup is running at this time, it starts 9pm everynight. Will do the small dump view (it is currently large) and I will try out the Blue Screen View...thanks to those that responded.