Memory Dumps every two days... 1

[tahoe2]

I have a NT 4.0 SP6a network, and one of the member servers has decided it needs to crash every so often.
Last friday, it was:
STOP 0x0000001e (0xc0000005, 0xf03059ca, 0x00000000, 0x00000000)
KMODE_EXCEPTION_NOT_HANDLED
ADDRESS f03059ca has base at f0252000- hpbfcf2.dll

(then the memory dumps)

Today it was:
STOP 0x0000000a (0xc0000028, 0x00000002, 0x80131360, 0x00000000, 0x00000000)
IRQL_NOT_LESS_OR_EQUAL ***
ADDRESS 80131360 has base at 801000
NTOSKRNL.EXE

(then the memory dumps)


Any ideas? I'm of the opinion that its probably hardware related, just for the fact it keeps crashing and that seems to be a symptom of HW failure.

Thanks!

Corie

 

[jdeaner]

Hope you have an Emergency Repair Disk. What's the event view say?

 

[tahoe2]

The event viewer says, and I quote, *ahem* "The previous system shutdown was unexpected."

I know, tells me a lot, huh?

I have this crashed server, I open it up, and inside are two *unplugged* IDE hard drives (9 gig apiece) and 2 scsi hd's.
After scratching my head for a minute (cuz this is the kind of thing I've come to expect from the previous outsourcing company... Like any business can afford to have 18 gig of space wasted), I plug in the IDE HD's, set the bios to boot to IDE, and VIOLA! the old system comes up! I copied new versions of the corrupted drivers (the files named in the dumps...) to the scsi drive, then restarted, once again changing the bios to boot to the scsi drive.
So the server started, but crashed again within a few hours, with the same stop error, so since this was the bdc, I promoted a different server to be bdc and demoted this one, then deleted the printer drivers.
So far it is running OK, but it's hard to type with my crossed fingers!

Corie

 

[Excalibur1701]

I'm curious, have you installed any of the NT 4.0 hot fixes/security fixes recently? (windowsupdate.com) We did, and we were getting blue screens of death every other day too. We uninstalled the hotfixes, and the problem went away.

 

[tahoe2]

There are 11 hotfixes installed on this machine. I did install some of them, one about a week before it started crashing. Which ones did you uninstall? I'm willing to try just about anything right now.
Here is what's on this server:
304158
305929
312895
313829
318138
320206
323172
326830
328310
329115
810833

Thanks,
Corie

 

[SpaceCoast]

Your problem is most likely with the 328310 hotfix. There seems to be a serious problem with this patch on NT systems. We had quite a mess where I worked. See some related discussion online at the following:

http://dbforums.com/t649572.html

http://groups.google.com/groups?th=dba7c44ebd24239b

http://groups.google.com/groups?th=27d31ba3ca01b4e0

This hotfix can be removed via "Add/Remove Programs" in the Control Panel. Removing the fix seemed to take care of the problem on about 3/4 of our systems. The others continued to blue screen even after removing the patch and had to be re-imaged.

 

[tahoe2]

After reading some of the horror stories in those newsgroups, I can't wait to uninstall that fix!
Especially since that server is running Info Sentinel, which others have had major problems with as well.

Since I replaced the ntoskrnl.exe file, and disabled the corrupted printer file, all seems well, but I'm taking no chances.

Thanks to all!

Corie

 

[tahoe2]

All right! I uninstalled that fix, and so far it's working fine (even though it's really hard to type with fingers crossed).

Thanks to everyone! I appreciate the help.

Corie