NT Server 4.0, Enterprise BSOD help

delaw · May 13, 2002

Stop: 0x0000000A (0x0000001C,0x00000002,0x00000001,0x80132238)

IRQL_NOT_LESS_OR_EQUAL

Address 80132238 has base at 80100000 ntoskrnl.exe

Does anybody have any idea whats going on with this? The box is running interix 2.2 and the error seems to be stress related but there is no real pattern that I can detect. It happens about once a day. Swapped out NIC and RAM already - sent a full memory dump to the vendor for analysis but I'm not optimistic.

DosFreak · May 13, 2002

What's in the PCI slot's? Is this a duallie system? Is this a thrown together computer or bought? What model #?

delaw · May 13, 2002

Its a server here at work.

Compaq 8000

8x700mhz pIII xeons w/ 2m cache(hence the enterprise edition software)

only stuff in the box is array controller, NIC, and video card (ATi rage IIc)

Sampson · May 13, 2002

Do you have any kind of Virus protection running in the background? Is there a domain name that is not being recognized?

Davros · May 13, 2002

I think errors like that arise when you have driver problems. Have you installed any new hardware or upgraded any drivers lately? Think about the past month or so, what could have changed?

delaw · May 13, 2002

Thanks for everyone's help.

Drivers were the first troubleshooting we went at.

I was able to debug the memory dump and got:

BugCheck A, {1c, 2, 1, 80132238}

Probably caused by : ntkrnlmp ( nt!MiDecrementCloneBlockReference+de )

Followup: MachineOwner

--------

and:

efe2fbdc 80132238 nt!KiTrap0E+0x284 (FPO: [0,0] TrapFrame @ efe2fbdc)

efe2fc68 80131285 nt!MiDecrementCloneBlockReference+0xde (FPO: [Non-Fpo])

efe2fcb4 80130f85 nt!MiDeletePte+0x29d (FPO: [Non-Fpo])

efe2fd74 801268db nt!MiDeleteVirtualAddresses+0x249 (FPO: [Non-Fpo])

efe2fe28 8019b6a0 nt!MmCleanProcessAddressSpace+0x21b (FPO: [Non-Fpo])

efe2fea4 8019b198 nt!PspExitThread+0x486

efe2feb0 8011b97d nt!P***itSpecialApc+0x1a (FPO: [5,0,1])

efe2feec 80141ba2 nt!KiDeliverApc+0x181 (FPO: [Non-Fpo])

efe2feec 4d00d2aa nt!KiExceptionExit+0x3a (FPO: [0,0] TrapFrame @ efe2ff04)

00d4dbb4 00000000 0x4d00d2aa

Now if only I knew what MiDecrementCloneBlockReference module was?

But I'm happy that the memory address from the blue screen and the stack call match.

I'm a little outta my element here, no real IT department and I run the intel. system (as a databases admin) on this box with little to no support (small company)