Thanks for the help with this. It might take a week for the main server in question to bluescreen again. Or it might be tomorrow. That's one of the frustrating natures of the problem...
In any case, I'll check in again when I have a new dump file. Thanks a lot, RS -----Original Message----- From: Brian Desmond [mailto:[email protected]] Sent: Monday, May 04, 2009 10:35 PM To: NT System Admin Issues Subject: RE: Frequent crashes on a virtual machine A kernel dump is good enough. You'll get a mini for free. You should do this on one of the crashing guests. Sorry if that wasn't clear. Thanks, Brian Desmond [email protected] c - 312.731.3132 -----Original Message----- From: Richard Stovall [mailto:[email protected]] Sent: Monday, May 04, 2009 9:00 PM To: NT System Admin Issues Subject: RE: Frequent crashes on a virtual machine I've got tons of minidumps from this issue. All I know how to do is run them through WinDbg, and I always come up with PFN_LIST_CORRUPT. Per the suggestions here, I will turn on verifier.exe on one of the affected servers. Should I have it create a minidump, kernel dump, or full memory dump? What can I do differently with the dump file to pinpoint what's going on? I'm really at my wit's end with this. It's been going on ever since I began installing Sunbelt's Vipre on our servers. Thanks very much for the help. RS -----Original Message----- From: Ken Schaefer [mailto:[email protected]] Sent: Monday, May 04, 2009 9:33 PM To: NT System Admin Issues Subject: RE: Frequent crashes on a virtual machine 0x4E is FPN_LIST_CORRUPT. This is unlikely to be caused by the host machine, especially if the VM is bluescreening with the same STOP code over and over. Usually 0x4E is a faulty kernel module of some kind (driver, file system filter or similar). Can we get access to a minidump file(s)? Brian's suggestion of turning on verifier.exe is also a good idea. It won't stop the BSODs, but it will catch the culprit in the act (e.g. when something writes to memory it shouldn't be) and make the dump files much better. Cheers Ken ________________________________________ From: [email protected] [[email protected]] Sent: Tuesday, 5 May 2009 1:50 AM To: NT System Admin Issues Subject: RE: Frequent crashes on a virtual machine Is there anything in under events for that VM? Also, check under /var/log for that ESX host to see if you have any errors. Original Message: ----------------- From: [email protected] Date: Mon, 4 May 2009 10:27:27 -0500 To: [email protected] Subject: RE: Frequent crashes on a virtual machine Thanks, but it doesn't apply here. This was a VM "built from scratch" from the VM console. It was never a physical machine. -- Richard "[email protected]" <[email protected]> wrote on 05/04/2009 10:14:14 AM: > Did you do cleanup after you P2V'd your server? > > Open a command prompt on the Windows VM (Start --> Run --> cmd). > set devmgr_show_nonpresent_devices=1 > devmgmt.msc > In the device management console (View --> Show Hidden Devices). > Uninstall the devices that are no longer required. Such as old network > devices. > > Mike > > Original Message: > ----------------- > From: [email protected] > Date: Mon, 4 May 2009 08:57:39 -0500 > To: [email protected] > Subject: RE: Frequent crashes on a virtual machine > > > Yes. > > The crashes do not necessarily coincide with VIPRE scans, etc. > -- > Richard D. McClary > Systems Administrator, Information Technology Group > > ASPCA(r) > 1717 S. Philo Rd, Ste 36 > Urbana, IL 61802 > > [email protected] > > P: 217-337-9761 > C: 217-417-1182 > F: 217-337-9761 > www.aspca.org > > The information contained in this e-mail, and any attachments hereto, is > from The American Society for the Prevention of Cruelty to Animals(r) (ASPCA > (r)) and is intended only for use by the addressee(s) named herein and may > contain legally privileged and/or confidential information. If you are not > the intended recipient of this e-mail, you are hereby notified that any > dissemination, distribution, copying or use of the contents of this > e-mail, and any attachments hereto, is strictly prohibited. If you have > received this e-mail in error, please immediately notify me by reply email > and permanently delete the original and any copy of this e-mail and any > printout thereof. > > > "Richard Stovall" <[email protected]> wrote on 05/04/2009 > 08:50:58 AM: > > > Do you have Vipre on these VMs? > > > > From: [email protected] [mailto:[email protected]] > > Sent: Monday, May 04, 2009 9:43 AM > > To: NT System Admin Issues > > Subject: Frequent crashes on a virtual machine > > > > > > Greetings! > > > > Most of our user files are being moved to a VMWare VM. What is > > disturbing is, when I log in, I am frequently greeting with a notice > > that the machine re-booted from a crash... > > > > My users have never noticed anyting amiss as it reboots pretty > > quickly (so far). However, once it did this while it was being > > backed up, so a bunch of user files were skipped that day. > > > > I get this set of messages: > > > > Category (102) Event ID: 1003 > > > > Error code 0000004e, parameter1 0000009a, parameter2 00009028, > > parameter3 00000006, parameter4 00000002. > > > > Again, this is a VM. Google searches pretty much all point to > > solutions on a physical machine. > > > > Thanks! > > -- > > Richard D. McClary > > Systems Administrator, Information Technology Group > > > > ASPCA(r) > > 1717 S. Philo Rd, Ste 36 > > Urbana, IL 61802 > > > > [email protected] > > > > P: 217-337-9761 > > C: 217-417-1182 > > F: 217-337-9761 > > www.aspca.org > > > > The information contained in this e-mail, and any attachments > > hereto, is from The American Society for the Prevention of Cruelty to > Animals(r) > > (ASPCA(r)) and is intended only for use by the addressee(s) named > > herein and may contain legally privileged and/or confidential > > information. If you are not the intended recipient of this e-mail, > > you are hereby notified that any dissemination, distribution, > > copying or use of the contents of this e-mail, and any attachments > > hereto, is strictly prohibited. If you have received this e-mail in > > error, please immediately notify me by reply email and permanently > > delete the original and any copy of this e-mail and any printout > thereof. > > > > > > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > -------------------------------------------------------------------- > mail2web.com ? What can On Demand Business Solutions do for you? > http://link.mail2web.com/Business/SharePoint > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ -------------------------------------------------------------------- mail2web LIVE - Free email based on Microsoft(r) Exchange technology - http://link.mail2web.com/LIVE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
