Solved

BSOD Server 2008

Posted on 2013-06-21
12
713 Views
Last Modified: 2013-06-28
We are experiencing a BSOD a few times a day on Server standard 2008.

The following is the details from Who Crashed.  I'm pretty sure it is a driver issue but cannot pin point which one.  

Can anyone help?

Lawrie

On Thu 6/20/2013 4:10:28 PM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrpamp.exe (nt+0x4DE8D)
Bugcheck code: 0xD1 (0x0, 0x2, 0x8, 0x0)
Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: ntkrpamp.exe .
Google query: ntkrpamp.exe DRIVER_IRQL_NOT_LESS_OR_EQUAL
0
Comment
Question by:Lawrie Gormley
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 2
  • 2
  • +2
12 Comments
 
LVL 5

Expert Comment

by:AbhishekJha
ID: 39265444
Attach Your memory dump file to analyze
0
 

Author Comment

by:Lawrie Gormley
ID: 39265497
zipped it is above 50mb, how can I upload the file?
0
 
LVL 5

Expert Comment

by:AbhishekJha
ID: 39265499
Is it possible to upload it to drop-box & share the link.
0
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

 

Author Comment

by:Lawrie Gormley
ID: 39265505
Hopefully this works, and thank you.

https://www.dropbox.com/s/5fop08t2ziocna3/MEMORY.zip
0
 
LVL 7

Expert Comment

by:Jaroslav Latal
ID: 39265746
Hello tmasltd,
you can use "BlueScreenView.exe" utility. It will give you right direction..

Regards,
Jarda
0
 
LVL 13

Expert Comment

by:Jaihunt
ID: 39265773
Update the below security patch it will update the Ntkrnlpa.exe to latest version      6.0.6002.23025      3,604,328      22-Jan-2013

http://support.microsoft.com/kb/2799494

Also update the below hotfix

http://support.microsoft.com/kb/955734

If you don't have sp2 installed in the server please upgrade to sp2 and update the above security patch

http://support.microsoft.com/kb/968849
0
 

Author Comment

by:Lawrie Gormley
ID: 39265861
We are running 32 bit and these updates don't apply.

Thanks
0
 
LVL 13

Expert Comment

by:Jaihunt
ID: 39265927
0
 

Author Comment

by:Lawrie Gormley
ID: 39265985
Windows server 2008 32 bit

When running this update it says it does not apply to this system
0
 
LVL 92

Expert Comment

by:nobus
ID: 39267676
the dmp is corrupt
plse set your system to make minidmps  http://kb.acronis.com/content/2191

anyhow, start by running a ram test :  - to be sure about the basics
go to the download page, scroll down to the mirror section, and  click on a mirror to start the download
Download the UBCD, make the cd, and boot from it
Here 2 links, one to the general site, and a direct link to the download
since the downloaded file is an ISO file, you need to use an ISO burning tool
if you don't have that software, install cdburnerXP : http://cdburnerxp.se/

If you want also the Ram tested - run memtest86+ at least 1 full pass,  - you should have NO errors!
 
For disk Diagnostics run the disk diag for your disk brand (eg seagate diag for seagate drive)  from the HDD section - long diag !
http://www.ultimatebootcd.com/                        ultimate boot cd
http://www.ultimatebootcd.com/download.html             download page
0
 

Accepted Solution

by:
Lawrie Gormley earned 0 total points
ID: 39270552
It seems I have got to the bottom of the issue.  We had Immunet AV installed on this server.  Looks like that was causing the issue.  I removed the AV on Friday and everything has been perfect over the weekend.

Thanks for the help guys.
0
 

Author Closing Comment

by:Lawrie Gormley
ID: 39283808
Resolved myself
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question