Bluescreen Win2k3

[Serino 10]

Hallo zusammen,

 

immer wieder bekomme ich auf einem win2003 Server (Standard, PDC) Bluescreens, meist zur Sicherungszeit..

 

aus dem Dump werde ich nicht recht schlau , kann mir da bitte jemand helfen: Danke.. mfg. Reinhard

 

KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)

This is a very common bugcheck. Usually the exception address pinpoints

the driver/function that caused the problem. Always note this address

as well as the link date of the driver/image that contains this address.

Some common problems are exception code 0x80000003. This means a hardcoded breakpoint or assertion was hit, but this system was booted/NODEBUG. This is notsupposed to happen as developers should never have

hardcoded breakpoints in retail code, but ...

If this happens, make sure a debugger gets connected, and the

system is booted /DEBUG. This will let us see why this breakpoint is

happening.

 

Arguments:

 

Arg1: c0000005, The exception code that was not handled

Arg2: 8092cfe9, The address that the exception occurred at

Arg3: f59b2a94, Trap Frame

Arg4: 00000000

 

Debugging Details:

 

------------------

 

*** ERROR: Symbol file could not be found. Defaulted to export symbols for

bedsnt5.dll -

 

*** ERROR: Module load completed but symbols could not be loaded for

bengine.exe

 

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in "0x%08lx" verweist

auf Speicher in "0x%08lx". Der Vorgang "%s" konnte nicht auf dem Speicher

durchgeführt werden.

 

FAULTING_IP:

 

nt!HvpGetCellMapped+97

8092cfe9 8b4604 mov eax,[esi+0x4]

TRAP_FRAME: f59b2a94 -- (.trap fffffffff59b2a94)

ErrCode = 00000000

eax=e19cd7cc ebx=e19cd630 ecx=000003ff edx=85c7b020 esi=00001ff0

edi=0000013c

eip=8092cfe9 esp=f59b2b08 ebp=f59b2b7c iopl=0 nv up ei pl nz na po nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206

nt!HvpGetCellMapped+0x97:

8092cfe9 8b4604 mov eax,[esi+0x4] ds:0023:00001ff4=????????

Resetting default scope

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 808d2e0c to 8092cfe9

STACK_TEXT:

f59b2b7c 808d2e0c e19cd630 ffffffd0 e1c647ac nt!HvpGetCellMapped+0x97

f59b2ba4 808d3936 e19cd630 ffffffd0 e156e008 nt!CmpCopyValue+0x18

f59b2bf0 808d39f1 e19cd630 000874d8 e156e008 nt!CmpCopyKeyPartial+0x229

f59b2c30 808d3450 e1671000 00000400 00000006 nt!CmpCopySyncTree2+0x267

f59b2c60 80972a78 e19cd630 00000020 e156e008 nt!CmpCopySyncTree+0x4f

f59b2c98 8096d0d3 e156e008 000004a8 e19cd928 nt!CmSaveKey+0x261

f59b2cbc 8082337b e1224270 000004a8 f59b2d54 nt!NtSaveKey+0x78

f59b2cbc 80822231 e1224270 000004a8 f59b2d54 nt!KiFastCallEntry+0xf8

f59b2d3c 8096d0a0 00000444 000004a8 8096d05b nt!ZwSaveKey+0x11

f59b2d54 8082337b 00000444 000004a8 02a0ea38 nt!NtSaveKey+0x45

f59b2d54 7c94ed54 00000444 000004a8 02a0ea38 nt!KiFastCallEntry+0xf8

02a0e9e0 7c941d04 77f97aac 00000444 000004a8 ntdll!KiFastSystemCallRet

02a0e9e4 77f97aac 00000444 000004a8 0234e1a8 ntdll!NtSaveKey+0xc

02a0ea38 77f902e9 00000444 000004a8 0019b0a8

ADVAPI32!LocalBaseRegSaveKey+0x173

02a0ea78 0129da43 00000444 0234a148 00000000 ADVAPI32!RegSaveKeyW+0x93

 

WARNING: Stack unwind information not available. Following frames may be

wrong.

 

02a0eaf4 00470045 00530049 00520054 005c0059 bedsnt5!GetTable+0x6613

02a0eb6c 7c94fb23 00310000 0234b890 00140178 bengine+0x70045

02a0edac 012a2496 004731e4 0234e1a8 023316fc ntdll!RtlAllocateHeap+0xee7

02a0ede8 012a8a49 00000000 00000000 00000000 bedsnt5!GetTable+0xb066

02a0edec 00000000 00000000 00000000 00000000 bedsnt5!GetTable+0x11619

 

FOLLOWUP_IP:

 

nt!HvpGetCellMapped+97

8092cfe9 8b4604 mov eax,[esi+0x4]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!HvpGetCellMapped+97

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42435e33

STACK_COMMAND: .trap fffffffff59b2a94 ; kb

FAILURE_BUCKET_ID: 0x8E_nt!HvpGetCellMapped+97

BUCKET_ID: 0x8E_nt!HvpGetCellMapped+97

Followup: MachineOwner

[zahni 557]

In einem Kerneltreiber ist eine Ausnahme aufgetreten, für die sich niemand zuständig fühlt. Das darf nicht passieren und das OS stürzt vorsichtshalber ab.

 

Was kannst Du tun: Treiber prüfen ( anscheinend war eine bedsnt5.dll und eine bengine.exe beteiligt) , Hardware prüfen.

 

-Zahni

[XP-Fan 219]

Thema Datensicherung mit Veritas:

 

Schau mal ob du alle Servicepacks drauf hast:

http://seer.support.veritas.com/docs/279308.htm