?
Solved

BSOD Server 2008

Posted on 2013-06-21
12
Medium Priority
?
714 Views
Last Modified: 2013-06-28
We are experiencing a BSOD a few times a day on Server standard 2008.

The following is the details from Who Crashed.  I'm pretty sure it is a driver issue but cannot pin point which one.  

Can anyone help?

Lawrie

On Thu 6/20/2013 4:10:28 PM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrpamp.exe (nt+0x4DE8D)
Bugcheck code: 0xD1 (0x0, 0x2, 0x8, 0x0)
Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: ntkrpamp.exe .
Google query: ntkrpamp.exe DRIVER_IRQL_NOT_LESS_OR_EQUAL
0
Comment
Question by:Lawrie Gormley
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 2
  • 2
  • +2
12 Comments
 
LVL 5

Expert Comment

by:AbhishekJha
ID: 39265444
Attach Your memory dump file to analyze
0
 

Author Comment

by:Lawrie Gormley
ID: 39265497
zipped it is above 50mb, how can I upload the file?
0
 
LVL 5

Expert Comment

by:AbhishekJha
ID: 39265499
Is it possible to upload it to drop-box & share the link.
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 

Author Comment

by:Lawrie Gormley
ID: 39265505
Hopefully this works, and thank you.

https://www.dropbox.com/s/5fop08t2ziocna3/MEMORY.zip
0
 
LVL 7

Expert Comment

by:Jaroslav Latal
ID: 39265746
Hello tmasltd,
you can use "BlueScreenView.exe" utility. It will give you right direction..

Regards,
Jarda
0
 
LVL 13

Expert Comment

by:Jaihunt
ID: 39265773
Update the below security patch it will update the Ntkrnlpa.exe to latest version      6.0.6002.23025      3,604,328      22-Jan-2013

http://support.microsoft.com/kb/2799494

Also update the below hotfix

http://support.microsoft.com/kb/955734

If you don't have sp2 installed in the server please upgrade to sp2 and update the above security patch

http://support.microsoft.com/kb/968849
0
 

Author Comment

by:Lawrie Gormley
ID: 39265861
We are running 32 bit and these updates don't apply.

Thanks
0
 
LVL 13

Expert Comment

by:Jaihunt
ID: 39265927
0
 

Author Comment

by:Lawrie Gormley
ID: 39265985
Windows server 2008 32 bit

When running this update it says it does not apply to this system
0
 
LVL 92

Expert Comment

by:nobus
ID: 39267676
the dmp is corrupt
plse set your system to make minidmps  http://kb.acronis.com/content/2191

anyhow, start by running a ram test :  - to be sure about the basics
go to the download page, scroll down to the mirror section, and  click on a mirror to start the download
Download the UBCD, make the cd, and boot from it
Here 2 links, one to the general site, and a direct link to the download
since the downloaded file is an ISO file, you need to use an ISO burning tool
if you don't have that software, install cdburnerXP : http://cdburnerxp.se/

If you want also the Ram tested - run memtest86+ at least 1 full pass,  - you should have NO errors!
 
For disk Diagnostics run the disk diag for your disk brand (eg seagate diag for seagate drive)  from the HDD section - long diag !
http://www.ultimatebootcd.com/                        ultimate boot cd
http://www.ultimatebootcd.com/download.html             download page
0
 

Accepted Solution

by:
Lawrie Gormley earned 0 total points
ID: 39270552
It seems I have got to the bottom of the issue.  We had Immunet AV installed on this server.  Looks like that was causing the issue.  I removed the AV on Friday and everything has been perfect over the weekend.

Thanks for the help guys.
0
 

Author Closing Comment

by:Lawrie Gormley
ID: 39283808
Resolved myself
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Suggested Courses

741 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question