BSOD Server 2008

We are experiencing a BSOD a few times a day on Server standard 2008.

The following is the details from Who Crashed.  I'm pretty sure it is a driver issue but cannot pin point which one.  

Can anyone help?

Lawrie

On Thu 6/20/2013 4:10:28 PM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrpamp.exe (nt+0x4DE8D)
Bugcheck code: 0xD1 (0x0, 0x2, 0x8, 0x0)
Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: ntkrpamp.exe .
Google query: ntkrpamp.exe DRIVER_IRQL_NOT_LESS_OR_EQUAL
Lawrie GormleyAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Lawrie GormleyConnect With a Mentor Author Commented:
It seems I have got to the bottom of the issue.  We had Immunet AV installed on this server.  Looks like that was causing the issue.  I removed the AV on Friday and everything has been perfect over the weekend.

Thanks for the help guys.
0
 
AbhishekJhaCommented:
Attach Your memory dump file to analyze
0
 
Lawrie GormleyAuthor Commented:
zipped it is above 50mb, how can I upload the file?
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
AbhishekJhaCommented:
Is it possible to upload it to drop-box & share the link.
0
 
Lawrie GormleyAuthor Commented:
Hopefully this works, and thank you.

https://www.dropbox.com/s/5fop08t2ziocna3/MEMORY.zip
0
 
Jaroslav LatalMSPCommented:
Hello tmasltd,
you can use "BlueScreenView.exe" utility. It will give you right direction..

Regards,
Jarda
0
 
JaihuntCommented:
Update the below security patch it will update the Ntkrnlpa.exe to latest version      6.0.6002.23025      3,604,328      22-Jan-2013

http://support.microsoft.com/kb/2799494

Also update the below hotfix

http://support.microsoft.com/kb/955734

If you don't have sp2 installed in the server please upgrade to sp2 and update the above security patch

http://support.microsoft.com/kb/968849
0
 
Lawrie GormleyAuthor Commented:
We are running 32 bit and these updates don't apply.

Thanks
0
 
Lawrie GormleyAuthor Commented:
Windows server 2008 32 bit

When running this update it says it does not apply to this system
0
 
nobusCommented:
the dmp is corrupt
plse set your system to make minidmps  http://kb.acronis.com/content/2191

anyhow, start by running a ram test :  - to be sure about the basics
go to the download page, scroll down to the mirror section, and  click on a mirror to start the download
Download the UBCD, make the cd, and boot from it
Here 2 links, one to the general site, and a direct link to the download
since the downloaded file is an ISO file, you need to use an ISO burning tool
if you don't have that software, install cdburnerXP : http://cdburnerxp.se/

If you want also the Ram tested - run memtest86+ at least 1 full pass,  - you should have NO errors!
 
For disk Diagnostics run the disk diag for your disk brand (eg seagate diag for seagate drive)  from the HDD section - long diag !
http://www.ultimatebootcd.com/                        ultimate boot cd
http://www.ultimatebootcd.com/download.html             download page
0
 
Lawrie GormleyAuthor Commented:
Resolved myself
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.