eemmpph
asked on
What can i use to interpret the dmp file after encountering a BSOD?
I have a Windows Server 2008 R2 system.
I need help in deciphering a BSOD:
Crash Time Bug Check String Bug Check Code Caused By Driver Caused By Address
4/16/18 12:52 AM APC_INDEX_MISMATCH 0x00000001 Ntfs.sys Ntfs.sys+11414
4/16/18 11:17 PM APC_INDEX_MISMATCH 0x00000001 ntoskrnl.exe ntoskrnl.exe+a44a0
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
On May 7, I got another BSOD:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.272.7
Locale ID: 1033
Additional information about the problem:
BCCode: 1
BCP1: FFFFF80001E3337C
BCP2: 0000000000000000
BCP3: 000000000000FFFF
BCP4: 0000000000000001
OS Version: 6_1_7601
Service Pack: 1_0
Product: 272_2
Files that help describe the problem:
C:\Windows\Minidump\050718
C:\Users\Administrator\App
Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
I do have the "050718-26395-01.dmp" file and the "memory.dmp" file.
What can I use to read the "dmp" files, to determine the cause of the blue screen?
Thank you in advance, for your expert assistance!
I need help in deciphering a BSOD:
Crash Time Bug Check String Bug Check Code Caused By Driver Caused By Address
4/16/18 12:52 AM APC_INDEX_MISMATCH 0x00000001 Ntfs.sys Ntfs.sys+11414
4/16/18 11:17 PM APC_INDEX_MISMATCH 0x00000001 ntoskrnl.exe ntoskrnl.exe+a44a0
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
On May 7, I got another BSOD:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.272.7
Locale ID: 1033
Additional information about the problem:
BCCode: 1
BCP1: FFFFF80001E3337C
BCP2: 0000000000000000
BCP3: 000000000000FFFF
BCP4: 0000000000000001
OS Version: 6_1_7601
Service Pack: 1_0
Product: 272_2
Files that help describe the problem:
C:\Windows\Minidump\050718
C:\Users\Administrator\App
Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
I do have the "050718-26395-01.dmp" file and the "memory.dmp" file.
What can I use to read the "dmp" files, to determine the cause of the blue screen?
Thank you in advance, for your expert assistance!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I downloaded the Nirsoft Blue Screen Viewer. Results appear below.
Nirsoft---Mini-Dump-File-Information.pdf
Nirsoft---Mini-Dump-File-Information.pdf
ASKER
My system has 6 drives.
Drives 1, 2, 3, in a raid 5 configuration
Drives 4, 5, 6, in a raid 5 configuration
Drives 1, 2, 3, in a raid 5 configuration
Drives 4, 5, 6, in a raid 5 configuration
One thing I would do is update all the drivers (including Video) and BIOS on this machine.
ASKER
The bios has been updated on the Server. i will check the video now.
ASKER
When i check for display driver updates, it says: Windows has determined the driver software for your device is up to date:
Matrox G200eW (Winbond).
Matrox G200eW (Winbond).
If the drivers are all up to date, then some operating system damage, or possibly a problem with the RAID controller.
1. Remove any printers (as I have seen server printer drivers cause this).
2. Open cmd.exe with Run as Administrator and run SFC /SCANNOW. Allow to complete and restart after steps 1 and 2.
Then see if your server vendor has tools to test the RAID.
1. Remove any printers (as I have seen server printer drivers cause this).
2. Open cmd.exe with Run as Administrator and run SFC /SCANNOW. Allow to complete and restart after steps 1 and 2.
Then see if your server vendor has tools to test the RAID.
ASKER
On May 1st , a Dell tech examined the Server, all its hardware, and updated the drivers as needed.
The last time I had a blue screen, was May 7th (today is May 17th).
The last time I had a blue screen, was May 7th (today is May 17th).
Do you have printers installed?
ASKER
Yes, I do have printers installed.
I will also say, that starting 4/11/2018, we purchased new Ricoh copiers,
along with "print server software" called PaperCut, that was installed on the Server.
I will also say, that starting 4/11/2018, we purchased new Ricoh copiers,
along with "print server software" called PaperCut, that was installed on the Server.
Try temporarily uninstalling the printers and see if that changes anything.
ASKER
Ok, I will try and do that outside of working hours so it does not affect anyone.
ASKER
Thank you. Nirsoft helped me greatly!
You are very welcome and I was happy to help.
To actually answer your question I'll say this:
APC_INDEX_MISMATCH 0x00000001 Ntfs.sys is likely a filesystem error and I'd bet money on bad sectors on your hard drive or file system corruption in case of a virtual machine or SSD drive.
I had a quick Google of the error and someone suggested virus infection or malware. I wouldn't rule that out so if you have a physical hard drive you may wish to consider mounting it on another device to run scans and testing e.g. chkdsk X: /f /r where "X" is the mounted drive letter of your drive under test. Run this from an elevated command prompt.
I hope this helps.