BSOD Server 2008

We are experiencing a BSOD a few times a day on Server standard 2008.

The following is the details from Who Crashed.  I'm pretty sure it is a driver issue but cannot pin point which one.  

Can anyone help?


On Thu 6/20/2013 4:10:28 PM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrpamp.exe (nt+0x4DE8D)
Bugcheck code: 0xD1 (0x0, 0x2, 0x8, 0x0)
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: ntkrpamp.exe .
Google query: ntkrpamp.exe DRIVER_IRQL_NOT_LESS_OR_EQUAL
Lawrie GormleyAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

Lawrie GormleyConnect With a Mentor Author Commented:
It seems I have got to the bottom of the issue.  We had Immunet AV installed on this server.  Looks like that was causing the issue.  I removed the AV on Friday and everything has been perfect over the weekend.

Thanks for the help guys.
Attach Your memory dump file to analyze
Lawrie GormleyAuthor Commented:
zipped it is above 50mb, how can I upload the file?
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Is it possible to upload it to drop-box & share the link.
Lawrie GormleyAuthor Commented:
Hopefully this works, and thank you.
Jaroslav LatalMSPCommented:
Hello tmasltd,
you can use "BlueScreenView.exe" utility. It will give you right direction..

Update the below security patch it will update the Ntkrnlpa.exe to latest version      6.0.6002.23025      3,604,328      22-Jan-2013

Also update the below hotfix

If you don't have sp2 installed in the server please upgrade to sp2 and update the above security patch
Lawrie GormleyAuthor Commented:
We are running 32 bit and these updates don't apply.

Lawrie GormleyAuthor Commented:
Windows server 2008 32 bit

When running this update it says it does not apply to this system
the dmp is corrupt
plse set your system to make minidmps

anyhow, start by running a ram test :  - to be sure about the basics
go to the download page, scroll down to the mirror section, and  click on a mirror to start the download
Download the UBCD, make the cd, and boot from it
Here 2 links, one to the general site, and a direct link to the download
since the downloaded file is an ISO file, you need to use an ISO burning tool
if you don't have that software, install cdburnerXP :

If you want also the Ram tested - run memtest86+ at least 1 full pass,  - you should have NO errors!
For disk Diagnostics run the disk diag for your disk brand (eg seagate diag for seagate drive)  from the HDD section - long diag !                        ultimate boot cd             download page
Lawrie GormleyAuthor Commented:
Resolved myself
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.