Blue Screen Crashes in Windows Server 2008

Our Windows 2008 server which has been running fine for several years now has started to record a series of blue screen crashes in the past week, almost daily. Our hosting company ran a chkdsk and didn't find any errors. The also ran an sfc scan which
they said identified and fixed several system files, however we are still seeing blue screen crashes.
I have put the minidump from the latest crash in my public skydrive folder at -
https://skydrive.live.com/?cid=446280106bb642de#cid=446280106BB642DE&id=446280106BB642DE%21140
Can anyone help me identify the problem that is causing the blue screen crashes?
Thanks,
Gary
Gary Frickey

Hi,
Gary
Regarding to Dump files that you provided, I have used WinDbg tool to analysis them. For more detailed results, please refer to the following.
1.Analyze 120213-41636-01.dump
* Bugcheck Analysis *
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {5200, fffffa80130e0000, ac326f8a3564698d, ac366f8a3564698d}
Probably caused by : volsnap.sys ( volsnap!VspDoubleBufferIncomingWrite+9a )
Followup: MachineOwner
4: kd> !analyze -v
* Bugcheck Analysis *
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000005200, The subtype of the bugcheck.
Arg2: fffffa80130e0000
Arg3: ac326f8a3564698d
Arg4: ac366f8a3564698d
Debugging Details:
BUGCHECK_STR: 0x1a_5200
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: mcupdate.exe
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
LAST_CONTROL_TRANSFER: from fffff802e920536f to fffff802e9076440
STACK_TEXT:
fffff880`0d61bcb8 fffff802`e920536f : 00000000`0000001a 00000000`00005200 fffffa80`130e0000 ac326f8a`3564698d : nt!KeBugCheckEx
fffff880`0d61bcc0 fffff802`e90be5a6 : 00000000`00000000 00000000`00001000 00000000`00000200 fffffa80`13ac14d0 : nt! ?? ::FNODOBFM::`string'+0x2f301
fffff880`0d61bd00 fffff802`e928c81c : 00000000`00000000 fffff802`e92a8a00 fffff880`133792c0 00000000`00000200 : nt!ExpAllocateBigPool+0xd6
fffff880`0d61bde0 fffff880`01dab74a : 00000000`00000001 fffff880`121da000 00000000`00001000 fffff880`01da9e2d : nt!ExAllocatePoolWithTag+0x80a
fffff880`0d61beb0 fffff880`01da9372 : fffffa80`13e738b8 fffffa80`13e73560 fffffa80`0aaaf160 00000000`00000000 : volsnap!VspDoubleBufferIncomingWrite+0x9a
fffff880`0d61bf00 fffff880`00a26b69 : fffff880`0d61c000 fffffa80`1340db00 fffffa80`06cc4ab0 fffff8a0`24ebd3c8 : volsnap!VolsnapWriteFilter+0x361
fffff880`0d61bf50 fffff802`e9070b67 : fffff880`0da372c8 00000000`0361e4d8 00000000`03610000 00000000`77a675a4 : Ntfs!NtfsStorageDriverCallout+0x16
fffff880`0d61bf80 fffff802`e9070b2d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxSwitchKernelStackCallout+0x27
fffff880`13378700 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwitchKernelStackContinue
STACK_COMMAND: kb
FOLLOWUP_IP:
volsnap!VspDoubleBufferIncomingWrite+9a
fffff880`01dab74a 488bf8 mov rdi,rax
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: volsnap!VspDoubleBufferIncomingWrite+9a
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: volsnap
IMAGE_NAME: volsnap.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 51a9661e
IMAGE_VERSION: 6.2.9200.16628
BUCKET_ID_FUNC_OFFSET: 9a
FAILURE_BUCKET_ID: 0x1a_5200_volsnap!VspDoubleBufferIncomingWrite
BUCKET_ID: 0x1a_5200_volsnap!VspDoubleBufferIncomingWrite
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x1a_5200_volsnap!vspdoublebufferincomingwrite
FAILURE_ID_HASH: {c0542499-747b-bb38-39b0-9680350f4757}
2.Analyze 120213-42713-01.dump
* Bugcheck Analysis *
Use !analyze -v to get detailed debugging information.
BugCheck 24, {b50019060b, fffff8800e413e38, fffff8800e413670, fffff802e26a85cc}
Probably caused by : memory_corruption ( nt!MiReleaseReadListResources+14 )
Followup: MachineOwner
1: kd> !analyze -v
* Bugcheck Analysis *
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 000000b50019060b
Arg2: fffff8800e413e38
Arg3: fffff8800e413670
Arg4: fffff802e26a85cc
Debugging Details:
EXCEPTION_RECORD: fffff8800e413e38 -- (.exr 0xfffff8800e413e38)
ExceptionAddress: fffff802e26a85cc (nt!MiReleaseReadListResources+0x0000000000000014)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff8800e413670 -- (.cxr 0xfffff8800e413670;r)
rax=0000000000000000 rbx=0000000000000000 rcx=fffbfa80138f7f80
rdx=fffffa8009fa3e81 rsi=0000000000000000 rdi=0000000000000000
rip=fffff802e26a85cc rsp=fffff8800e414070 rbp=0000000000000000
r8=fffffa8009fa3e80 r9=0000000000000001 r10=fffff802e249c610
r11=fffffa8012e1b010 r12=fffffa8006d92ef0 r13=fffffa80074e29c0
r14=fffbfa80138f7f80 r15=0000000000000001
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
nt!MiReleaseReadListResources+0x14:
fffff802`e26a85cc 4883792800 cmp qword ptr [rcx+28h],0 ds:002b:fffbfa80`138f7fa8=????????????????
Last set context:
rax=0000000000000000 rbx=0000000000000000 rcx=fffbfa80138f7f80
rdx=fffffa8009fa3e81 rsi=0000000000000000 rdi=0000000000000000
rip=fffff802e26a85cc rsp=fffff8800e414070 rbp=0000000000000000
r8=fffffa8009fa3e80 r9=0000000000000001 r10=fffff802e249c610
r11=fffffa8012e1b010 r12=fffffa8006d92ef0 r13=fffffa80074e29c0
r14=fffbfa80138f7f80 r15=0000000000000001
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
nt!MiReleaseReadListResources+0x14:
fffff802`e26a85cc 4883792800 cmp qword ptr [rcx+28h],0 ds:002b:fffbfa80`138f7fa8=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: TrustedInstall
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff802e256b168
GetUlongFromAddress: unable to read from fffff802e256b1f8
ffffffffffffffff
FOLLOWUP_IP:
nt!MiReleaseReadListResources+14
fffff802`e26a85cc 4883792800 cmp qword ptr [rcx+28h],0
FAULTING_IP:
nt!MiReleaseReadListResources+14
fffff802`e26a85cc 4883792800 cmp qword ptr [rcx+28h],0
BUGCHECK_STR: 0x24
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
LAST_CONTROL_TRANSFER: from fffff802e2305e46 to fffff802e26a85cc
STACK_TEXT:
fffff880`0e414070 fffff802`e2305e46 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiReleaseReadListResources+0x14
fffff880`0e4140a0 fffff802`e22fea09 : 00000000`00005000 fffff980`2cb80000 00000000`00005000 00000000`00000000 : nt!MmWaitForCacheManagerPrefetch+0x42
fffff880`0e4140e0 fffff802`e26af71f : 00000000`00000000 00000000`00000000 00000000`00000001 fffff880`0e4141e0 : nt!CcFetchDataForRead+0xe9
fffff880`0e414130 fffff802`e2304e3e : fffffa80`06d92ef0 00000000`00000000 00000000`00040000 00000000`00004301 : nt!CcMapAndCopyFromCache+0xcf
fffff880`0e4141d0 fffff880`01903b58 : fffff8a0`06e3cc50 fffffa80`074b86b0 00000000`00000000 00000000`00000000 : nt!CcCopyReadEx+0xfe
fffff880`0e414240 fffff880`0191a91a : 00000000`00000000 fffff880`0e4144a0 00000000`00060900 fffff8a0`06e3cc50 : Ntfs!NtfsCachedRead+0x148
fffff880`0e4142b0 fffff880`0191c42b : fffffa80`0f799a10 fffffa80`074b86b0 00000000`00000001 fffffa80`074b8600 : Ntfs!NtfsCommonRead+0x68a
fffff880`0e414470 fffff880`016e34ee : fffffa80`074a3010 fffffa80`074b86b0 fffffa80`074b86b0 fffffa80`074b8a50 : Ntfs!NtfsFsdRead+0x1db
fffff880`0e414520 fffff880`016e10b6 : fffffa80`098479a0 fffffa80`074e29c0 fffffa80`074b86b0 fffff802`e24b3140 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x25e
fffff880`0e4145c0 fffff802`e267e868 : 00000000`00000000 fffff880`0e4146a1 fffffa80`074e29c0 00000000`00000018 : fltmgr!FltpDispatch+0xb6
fffff880`0e414620 fffff802`e26ae513 : fffffa80`074e29c0 fffff8a0`028ca000 ffffffff`800012c4 fffffa80`074e29c0 : nt!IopSynchronousServiceTail+0x158
fffff880`0e4146f0 fffff802`e26f415a : fffff880`000004a2 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtReadFile+0x661
fffff880`0e4147f0 fffff802`e26ef1bf : fffff880`0e414918 00000000`00000003 fffff802`e2665870 fffff802`e248310e : nt!PfSnGetPrefetchInstructions+0x19a
fffff880`0e414900 fffff802`e26f1935 : fffffa80`074be080 fffff880`0e4149e0 00000000`00000000 fffff880`0e414a30 : nt!PfSnBeginScenario+0x18f
fffff880`0e4149b0 fffff802`e26a0070 : fffffa80`074be080 00000000`3cc531e5 fffff880`0e414cc0 fffffa80`074be080 : nt!PfSnBeginAppLaunch+0x115
fffff880`0e414a70 fffff802`e268c2cf : fffffa80`074be080 fffffa80`0723c6e0 00000000`00000000 fffffa80`07110080 : nt!PfProcessCreateNotification+0x70
fffff880`0e414aa0 fffff802`e22f4915 : fffff880`02e57180 fffffa80`07110080 fffff802`e268c1cc fffffa80`07110080 : nt!PspUserThreadStartup+0x103
fffff880`0e414b00 fffff802`e22f4897 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartUserThread+0x16
fffff880`0e414c40 000007fd`9e59d5e8 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartUserThreadReturn
000000c9`60f5fa28 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007fd`9e59d5e8
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiReleaseReadListResources+14
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 51a966cd
IMAGE_VERSION: 6.2.9200.16628
STACK_COMMAND: .cxr 0xfffff8800e413670 ; kb
IMAGE_NAME: memory_corruption
BUCKET_ID_FUNC_OFFSET: 14
FAILURE_BUCKET_ID: 0x24_nt!MiReleaseReadListResources
BUCKET_ID: 0x24_nt!MiReleaseReadListResources
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x24_nt!mireleasereadlistresources
FAILURE_ID_HASH: {12e84aa1-b4fa-6138-fa2a-d3b77e82b2b2}
3.Analyze 120213-48687-01.dump
* Bugcheck Analysis *
Use !analyze -v to get detailed debugging information.
BugCheck C2, {d, fffff901007059c0, 64704344, fffbfa8015d6a940}
Probably caused by : win32k.sys ( win32k!W32pProcessCallout+86 )
Followup: MachineOwner
2: kd> !analyze -v
* Bugcheck Analysis *
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 000000000000000d, type of pool violation the caller is guilty of.
Arg2: fffff901007059c0
Arg3: 0000000064704344
Arg4: fffbfa8015d6a940
Debugging Details:
OVERLAPPED_MODULE: Address regions for 'dump_iaStor' and 'dump_iaStor.' overlap
FAULTING_IP:
win32k!W32pProcessCallout+86
fffff960`0014bad6 33d2 xor edx,edx
BUGCHECK_STR: 0xc2_d
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: WerFault.exe
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
LAST_CONTROL_TRANSFER: from fffff80295c78027 to fffff80295a60440
STACK_TEXT:
fffff880`10ffe908 fffff802`95c78027 : 00000000`000000c2 00000000`0000000d fffff901`007059c0 00000000`64704344 : nt!KeBugCheckEx
fffff880`10ffe910 fffff960`0014bad6 : fffff901`007059c0 fffffa80`15d6adb0 fffff901`007059c0 00000000`64704344 : nt!ExFreePoolWithTag+0xec7
fffff880`10ffe9f0 fffff960`00184630 : fffff880`10ffeb40 fffffa80`15d6a940 00000000`00000000 00000000`00000000 : win32k!W32pProcessCallout+0x86
fffff880`10ffea20 fffff802`95e9db5a : fffffa80`15d6a940 fffffa80`15d6adb0 00000000`00000000 00000000`00000008 : win32k!W32CalloutDispatch+0x2f1
fffff880`10ffea80 fffff802`95e72004 : fffffa80`0a18ed20 00000000`00000001 00000000`00000000 00000000`00000000 : nt!ExCallCallBack+0x3a
fffff880`10ffeab0 fffff802`95e9d86d : 00000000`00000000 fffffa80`15d6a901 00000000`00000000 fffffa80`152d7080 : nt!PspExitThread+0x414
fffff880`10ffebd0 fffff802`95a5f453 : fffffa80`15d6a940 fffffa80`152d7080 fffff880`10ffecc0 00000000`7f62b000 : nt!NtTerminateProcess+0xfd
fffff880`10ffec40 000007fd`bb652eaa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00cde078 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007fd`bb652eaa
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!W32pProcessCallout+86
fffff960`0014bad6 33d2 xor edx,edx
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: win32k!W32pProcessCallout+86
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5216eef4
IMAGE_VERSION: 6.2.9200.16699
BUCKET_ID_FUNC_OFFSET: 86
FAILURE_BUCKET_ID: 0xc2_d_win32k!W32pProcessCallout
BUCKET_ID: 0xc2_d_win32k!W32pProcessCallout
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xc2_d_win32k!w32pprocesscallout
FAILURE_ID_HASH: {9d5e1858-9d8c-dc1b-8469-c4e8abf71b98}
Based on the above prompt messages, you can refer to the following article and get detailed information of Bug Check 1A, Bug Check 24 and Bug Check C2.
Bug Check 0x1A: MEMORY_MANAGEMENT
http://msdn.microsoft.com/en-us/library/windows/hardware/ff557391%28v=vs.85%29.aspx
Bug Check 0x24: NTFS_FILE_SYSTEM
http://msdn.microsoft.com/en-us/library/windows/hardware/ff557433(v=vs.85).aspx
Bug Check 0xC2: BAD_POOL_CALLER
http://msdn.microsoft.com/en-us/library/windows/hardware/ff560185(v=vs.85).aspx
Based on current state, I suggest you should update volsnap.sys and win32k.sys drivers. Then check if this issue can be solved. Meanwhile, you also should check the memory
in your computer. For detailed operations, please refer to the following article.
Run Diagnostics to Check Your System for Memory Problems
http://technet.microsoft.com/en-us/magazine/ff700221.aspx
If this issues is a state of emergency for you. Please contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist
with your request.
To obtain the phone numbers for specific technology request, please refer to the web site listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
Hope this helps.
Best regards,
Justin Gu

Similar Messages

DL 360 G5 blue screen USB error on server 2008 installation

Hi i am getting a error "USB, Blue screen followed by a memory dump while trying to install server 2008 on my DL360 G5, I have already tried the Smart start dvd (recommended to fix the problem on other forums) downloaded at the drivers web page for the server, i have the same problem. any help would be greatly appreciated bugcode_Usb_drivererror

Hi:
You may also want to post your question in the HP Business Support Forum -- DL Servers Section.
http://h30499.www3.hp.com/t5/ProLiant-Servers-ML-DL-SL/bd-p/itrc-264

Blue Screen Crash Running Windows Update on Reboot

I installed Windows 7 and Boot Camp Support Software. Installation went smoothly and no problems. When I run Windows Update, it requires a system reboot; however, each time I boot into the Windows partition, I get the dreaded blue screen of death. Then on reboot, Windows runs startup repair and restores the last installation. I think the problem might be that I am installing too many updates at a single time but not sure if it's something to do with the Boot Camp partition. I deleted the Windows partition and reinstalled Boot Camp but the problem persists. Windows 7 works fine, but can't seem to install updates.

Did you get the Apple drivers installed off your OS X DVD?
Is that what you mean by "reinstalled Boot Camp" ?
Did you get Apple Software Update (in Windows of course) up to Boot Camp 3.2?
Try getting those installed before Windows updates more.
No need to 'delete' Windows partition, just do a custom clean format and install what you meant?
No need to deal with Boot Camp Assistant again, all that does is set aside and create a partition to begin with.

Blue Screen crash in Windows 7: culprit is ntkrnlmp.exe

Hi, I've been, with increasingly frequency, getting crashes on my Windows 7-run Gateway. Here's what I see when I run the WhoCrashed program (I'm very computer illiterate, sorry!):
On Wed 1/22/2014 11:34:06 PM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module:
ntkrnlmp.exe (nt!PsIsProtectedProcess+0x2A0)
Bugcheck code: 0xD1 (0x18, 0x2, 0x0, 0xFFFFF8800188AC49)
Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.
Can anyone help? Thanks a bunch!!!

Hi Ray,
Just additional. Troubleshoot this kind of kernel crash issue, we need to analyze the crash dump file to narrow down the root cause of the issue. Actually, it is not effective
for us to debug the crash dump file here in the forum. If this issues is a state of emergency for you. Please contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request.
To obtain the phone numbers for specific technology request, please refer to the web site listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
Hope this helps.
Best regards,
Justin Gu

Removing " other user" windows server 2008 R2

Hi I would like to remove the "other user" option on the login screen we have windows Server 2008 R2 ...and have gone to token login only so would only like the token tile to be showing when login into the server with RDP.. I have tried the option
of HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\SpecialAccounts\UserList but that didn't work. So any direction on what to do to remove that one tile would be great...thx

Hi ptully,
Based on your description, it seems that there no method can help you to achieve this target. There is similar
thread. Please refer to and check if can help you.
Removing
the "Other User" logon option
On current situation, please open Local Group Policy Editor (type gpedit.msc on Run), then follow the path:
Local Computer Policy-> Computer Configuration-> Administrative Templates-> System-> Logon. Please enable setting “Hide entry points for Fast User Switching”. It will hide the Switch user button in the Logon UI, the Start menu and the Task Manager
(as below picture shows). Please check if near your target.
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

Blue Screen Error during starting Windows Server 2008 R2 (VM on Hyper-v WinSvr2012) Using a Physical to Virtual (P2V) VHDX.

Hi There,
I'm trying to migrate one of my physical Windows Server 2008 R2 to Virtual Environment (Hyper-V on WinSvr2012).
(The original physical machine had multiple partitions on the windows HDD and 2 other boot able OSs where installed on 2 of those partitions ...) So anyhow, After heaps of trouble shooting and fixing the boot records, it finally started booting the
Windows but when it got to loading C:\windows\System32\Drivers\Classpnp.sys
and it crashed, a blue screen poped up saying "A Problem has been detected and windows has shut down to prevent damage to your computer ... ) and then system got rebooted automatically.
I have tried chkdsk, also tried copying a new classpnp.sys to replace the old one but no hope. I don't think is not a damage file issue. Not sure, but it is probably related to changing the HDD devices or SCSI/IDE controllers?
Any idea?

1. You have placed your problem in wrong forum. Address your problem to Server forum instead.
2. I do not think it is liable configuration. I have not heard about migration of multiboot HDD. Try to split it. Pay attention to better preparation. I would expect separate target VM.
Regards
Milos

Blue screen when logging into windows server 2008 r2

when logging into windows server 2008 r2, all I have is a blue screen and the mouse.
I tried looking for solutions on the internet, then I found a microsoft hotfix "http://support.microsoft.com/kb/2590550" I run the hotfix in command line but it gave me nothing, no error or success messages.
I tried to reboot but I still have the same problem.
Is there any solution to this problem ??

Hi,
Thank you for posting in Windows Server Forum.
Did you face this issue during remote session or console session?
In addition, have you try to change or install any driver\software which cause this problem?
Have you use any debugging tools from Microsoft to find respective error cause?
You can refer following article for memory dump.
How to read the small memory dump file that is created by Windows if a crash occurs
http://support.microsoft.com/kb/315263/en-us
Hope it helps!
Thanks.
Dharmesh Solanki

Windows Server 2003 install blue screen crash

I am attempting to install windows 2003 R2 standard addition on the following system currently running Windows XP.
PROCESSOR
Intel® Core™2 Duo 375W,E6550 (2.33GHz,1333Mhz FSB, 4MB L2 Cache, Dual Core)
edit
OPERATING SYSTEM
Genuine Windows® XP Professional, SP2 (NTFS) (+ Media) - English (32bit)
edit
TOWER/BASE ORIENTATION
Vertical Chassis Orientation (Minitower, W: 170,2 x H: 447.3 x D: 468.4 mm)
edit
BUSINESS SUPPORT
No Business Support Required
edit
MEMORY
4GB ( (4 x 1.0GB DIMM) 800MHZ DDR2 ECC SDRAM Memory
edit
GRAPHICS CARD
256MB nVidia NVS 290, Dual Monitor DVI or VGA Graphics Card (ULGA8)
edit
HARD DRIVE
160GB (7,200 rpm) SATA 3.0Gb/s Hard Drive with NCQ and 8MB DataBurst Cache™
edit
OPTICAL DRIVE
48X CDRW/DVD
The box is a Dell T3400.
All the specs fit the server requirments. Does anyone have any suggestions?
Just to summarize. I'm booting from CD. The drivers are copied across and when windows attempts to start the blue screen crash occurs.
Jay

Hello Customer,
Thank you for using TechNet Forum, and also many thanks for Aaron's assistance.
Please note, this forum is for General questions on Windows Server 2008. I suggest you try to post Windows Server 2003 related issue to the Windows Server 2003 Newsgroup for your best serve:
http://www.microsoft.com/technet/community/newsgroups/serveros/win2003.mspx
Thanks for your understanding.
Moreover, the blue screen is mostly caused by hardware or drivers incompatibility. I suggest you take a look at the following website
If the hardware appear to be on the Hardware Compatibility List (HCL):
http://www.microsoft.com/whdc/hcl/default.mspx
Thanks.
Best wishes
Morgan Che
Microsoft Online Community Support

Windows Server 2008 Standard 32-bit gives Rundll32.exe error and blank screen on bootup

Last week our file server installed automatic updates and then requested a reboot. After rebooting it repeatedly gave a blue screen and rebooted. After 5 hours on the phone with Microsoft support we all gave up on it with no solution. Later
we were able to get the machine to boot using an old mirrored hard drive of the system drive. We can now access our data drive, however after login we get this error:
Rundll32.exe : Windows cannot access the specified device, path, or file.You may not have the appropriate permission to access the
item.
and the console just shows a blank screen. We are not able to do anything on the server. I can Ctrl-Alt-Del and bring up Task
Manager and I see that SQL Server is not running, so not all services are running normally.
Any help would be appreciated.
Thanks

Hi,
Based on my research, this issue occurs because the Rundll32.exe file is corrupted. You need to extract a new copy of Rundll32.exe in C:\Windows\System32.
To do this, you can either copy it from another same version of Windows or perform an In-Place Upgrade.
How to Perform an In-Place Upgrade on Windows Vista, Windows 7, Windows
Server 2008 & Windows Server 2008 R2
Best Regards
Dale
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

After installing Windows Server 2008 DATA CENTER stuck on blank screen and command prompt window

After a new fresh install of Windows Server 2008 Data Center I get this solid blue screen with a comand prompt window showing (user\Administrator) I have limited use of the commands, am able to bring up the task manager by CTL Del and perform limited functions. I was able to run the same software on this machine before, nothing has changed. The way I ran the software on it before was from an image I deployed to it,(not from a fresh install). The old image timed out and I could not rearm it, that is why I did a fresh install. I tried to use gpedit.msc but the command did not work.

You may be using Windows with limited functionality as the previous version expired. Did you re-format the drive/partition before you did the "fresh" install if not Windows probably kept the old install information so knew that it was expired previously. Either activate Windows (try typing slui.exe and filling in the product key and activate - then restart the machine) or re-format the drive/partition that Windows is on and re-install Windows again.

Windows Server 2008 black screen with mouse *PLEASE HELP*

Hello fellow techs,
I have been tearing my hair out for the past 12hrs on this issue.
About 3 weeks ago, one of our clients reported that they were experiencing
issues on the network so one of the staff went into the server room and noticed
the screen was black with only the cursor. As they couldn't reboot, they
decided to hold the power button to power it off. When they powered it back
up, it went passed the windows loading
splash screen, and again the screen is black with
the mouse pointer in the center of the screen.
I am diagnosing the server and find that at the black screen, I’m able to move
the cursor and beyond that nothing happened. I started in safe mode with the
exact same results.
I have been trying many different solutions from posts that I have found in
Google but no change.
From other machines you can type \\servername in
the run box and see the shared folders, as well as ping it.
This is a very urgent request as I need to have the Server back up and running
by tomorrow.
I am quiet willing to pay for phone support with anyone that can assist as soon
as possible. I am happy to transfer founds via Paypal.<o:p></o:p>
PLEASE HELP!

Hi,
I agree with sm, you should give us more details. Also you should use sfc /scannow
command to scans the integrity of all protected system files and repairs files with problems when possible. For more details, please refer to the following article.
Sfc
http://technet.microsoft.com/en-us/library/ff950779.aspx
Before going further, would you please let me know whether there were any changes on the affected server? Has windows update or any new device been added? Please also check your shadow copies.
The Windows Server black screen may be caused by them.
In addition, there are similar questions, please refer to.
Windows Server 2008 black screen
http://social.technet.microsoft.com/Forums/en-US/463b529b-26a6-4d5d-88f5-7d8b3460d165/black-screen-windows-2008-r2
Windows Server 2008 and the Black Screen of Waiting
http://projectdream.org/wordpress/2009/03/03/windows-server-2008-and-the-black-screen-of-waiting/
By a way, you also can be able to boot into last know good configuration to solve the trouble. You can refer to the following similar question that provide the detailed operations.
Windows Server 2008 black screen with only the mouse pointer showing
http://social.technet.microsoft.com/Forums/en-US/5c878af8-78f2-430d-9530-a0e5ad73ff03/windows-server-2008-black-screen-with-only-the-mouse-pointer-showing
Hope this helps.
Best regards,
Justin Gu

I HAVE A SONY VAIO WITH WINDOWS VISTA- SUDDENLY I'M GETTING A BLUE SCREEN (crash dump)THAT SHUTS DOWN MY COMPUTER. HOW DO I STOP THIS. ALREADY TRIED TO UNINSTALL AND RE INSTALL. MAY NOT HAVE DONE IT CORRECTLY ?

LAST WEEK STARTED GETTING A BLUE SCREEN (CRASH DUMP) AFTER CLOSING I TUNES, THAT CAUSES MY COMPUTER TO SHUTDOWN. IVE BEEN TOLD BY A PC REPAIR SHOP THAT I DONT HAVE A VIRUS. I DO HAVE ANTIVIRUS PROTECTION ON MY PC. ATTEMPED TO REINSTALL I TUNES BUT MAY NOT HAVE DONE IT CORRECTLY. I STILL HAVE THE PROBLEM. THE BLUE SCREEN ONLY HAPPENS WITH I TUNES. I HAVENT MADE ANY RECENT CHANGES TO MY MUSIC- NO DOWNLOADS /UPLOADS. ANY KNOWLEDGE OF THIS SITUATION? THANKS!!

Hey Ishland,
You are not alone. I'm getting the same thing I'm running Vista. I'm reading that Windows 8, 8.1 preview, Vista and XP.
I'm thinking this has to be a Apple update to iTunes 11.0.4.4 fix.
Cheers,
Steve
P.S. you might want to make your post easier to read by turning the cap lock off.

Windows 7 Blue Screen Crash

Hello, I recently have been getting a lot of blue screen crashes simultaneously. I haven't downloaded any games or anything. I just use this laptop for school work mostly. I already ran a memory diagnostic test and no problems found as well as restored my
computer to a month back to when it wasn't having any problems. Anyways, this the problem details:
Problem signature:
Problem Event Name:   BlueScreen
OS Version:   6.1.7601.2.1.0.768.3
Locale ID:   4105
Additional information about the problem:
BCCode:   3b
BCP1:   00000000C0000005
BCP2:   FFFFF88005CFC3BE
BCP3:   FFFFF88009ACE4D0
BCP4:   0000000000000000
OS Version:   6_1_7601
Service Pack:   1_0
Product:   768_1
Files that help describe the problem:
C:\WINDOWS\Minidump\103014-25318-01.dmp
C:\Users\Mark\AppData\Local\Temp\WER-82087-0.sysdata.xml
Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
If the online privacy statement is not available, please read our privacy statement offline:
C:\windows\system32\en-US\erofflps.txt
Hope that someone could help! Thanks!

FS
These were all Related to NETwNs64.sys Wireless WiFi Link Driver from Intel Corporation (yours is 5 years old). I would remove the current driver and install the newest driver available.
If you continue to crash Remove McAfee and use MSE in its place.
Microsoft (R) Windows Debugger Version 6.3.9600.17237 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Ken\Desktop\problem\103014-25318-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred SRV*D:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*D:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Machine Name:
Kernel base = 0xfffff800`0360c000 PsLoadedModuleList = 0xfffff800`0384f890
Debug session time: Thu Oct 30 12:54:00.869 2014 (UTC - 4:00)
System Uptime: 0 days 0:01:07.181
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
* Bugcheck Analysis *
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff88005cfc3be, fffff88009ace4d0, 0}
*** WARNING: Unable to verify timestamp for NETwNs64.sys
*** ERROR: Module load completed but symbols could not be loaded for NETwNs64.sys
Probably caused by : NETwNs64.sys ( NETwNs64+2673be )
Followup: MachineOwner
2: kd> !analyze -v
* Bugcheck Analysis *
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88005cfc3be, Address of the instruction which caused the bugcheck
Arg3: fffff88009ace4d0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
NETwNs64+2673be
fffff880`05cfc3be 8b10 mov edx,dword ptr [rax]
CONTEXT: fffff88009ace4d0 -- (.cxr 0xfffff88009ace4d0;r)
rax=1004f250001ddd20 rbx=0000000000000000 rcx=0000000000060049
rdx=000000000000002f rsi=fffffa800858f6b8 rdi=000000000000006b
rip=fffff88005cfc3be rsp=fffff88009aceeb0 rbp=fffffa8008bf7618
r8=0000000000000a70 r9=0000000000000000 r10=fffff8000360c000
r11=fffff88009acecc0 r12=fffffa800a91d000 r13=0000000000000000
r14=fffffa8008bf7fb0 r15=fffffa800af1c008
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
NETwNs64+0x2673be:
fffff880`05cfc3be 8b10 mov edx,dword ptr [rax] ds:002b:1004f250`001ddd20=????????
Last set context:
rax=1004f250001ddd20 rbx=0000000000000000 rcx=0000000000060049
rdx=000000000000002f rsi=fffffa800858f6b8 rdi=000000000000006b
rip=fffff88005cfc3be rsp=fffff88009aceeb0 rbp=fffffa8008bf7618
r8=0000000000000a70 r9=0000000000000000 r10=fffff8000360c000
r11=fffff88009acecc0 r12=fffffa800a91d000 r13=0000000000000000
r14=fffffa8008bf7fb0 r15=fffffa800af1c008
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
NETwNs64+0x2673be:
fffff880`05cfc3be 8b10 mov edx,dword ptr [rax] ds:002b:1004f250`001ddd20=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: wlanext.exe
CURRENT_IRQL: 2
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff88005cfc3be
STACK_TEXT:
fffff880`09aceeb0 00000000`00000000 : fffffa80`08bf7618 fffffa80`00000002 00000000`000000dc fffffa80`00001e37 : NETwNs64+0x2673be
FOLLOWUP_IP:
NETwNs64+2673be
fffff880`05cfc3be 8b10 mov edx,dword ptr [rax]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: NETwNs64+2673be
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETwNs64
IMAGE_NAME: NETwNs64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4d10df1b
STACK_COMMAND: .cxr 0xfffff88009ace4d0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_NETwNs64+2673be
BUCKET_ID: X64_0x3B_NETwNs64+2673be
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0x3b_netwns64+2673be
FAILURE_ID_HASH: {69744f93-8380-f8c7-a080-fedb60128a80}
Followup: MachineOwner
Wanikiya and Dyami--Team Zigzag

Adobe Acrobat 9.41 Pro+ on Snow Leopard 10.6.5 + Network users (Windows server 2008) = CRASH!

Adobe Acrobat 9.41 Pro will work “great” on the admin account, however through the active directory log on of network users, every user gets the long crash report upon opening the application.
Permissions are set so “everyone” can gain access, however the crash issue is not a decent setting on the Mac environment.
Will welcome any thoughts..comments… and suggestions.
Thank you-

OS: Snow Leopard 10.6.5
Active Directory Setup: Windows Server 2008 - Log in for network users
Adobe Acrobat: version crash 9.3 and 9.4.1
Admin of the Mac computer can log in and use the Adobe Acrobat Professional software, however when a network user
Tries to log on the computer and open the Adobe Acrobat 9.3 or 9.4 the software hangs....for 7-8 seconds then displays a crash report, and options are send to apple.
Permissions on every Adobe Acrobat folder on the computer are set to read/write for every user of the program.
Software Type: Using the DVD purchase with the Education program, and the serial number does accept, and download the software from the Adobe web page.
Emma McFaul

B570 - Windows 8 - Blue screen crash & energy management error

I upgraded to windows 8 on the day it came out in the uk with no problems, some of my apps had to be reinstalled but nothing major.
the bluetooth app had to be uninstalled, never use it so not a major issue. the energy managment error just pops up on each start and i just click run without help. Seems to work fine, but would prefer for it not to have to ask me this.
Anyway everything looked to be okay and then i got the blue screen crash. Said something about a kernal crash. This has happened about every 2 days now since the install and is very annoying, just happens very randomly even when the laptop is really fast.
I spoke to lenovo's support team and they said new drivers will be installed automatically and it should resolve. It hasnt.
Was just wondering if there is any fix for this? any new drivers out that have to be installed, or bios settings anything?
Please help. Thanks

Satellite C850-19Q (PSCBYE-00L00GY4) <- from Croatia
Downloads here
This site is for US computers. Best to post in the European forums.
Toshiba Support Forums in Europe
-Jerry

Blue Screen Crashes in Windows Server 2008

Similar Messages

Maybe you are looking for