Event ID 1003

[JPM0274]

I have a server running SBS2003 and Exchange(latest service packs for both). There has been a problem with the server rebooting and it has become fairly frequent. There has also been an issue with the backups failing and the drive was just swapped out.
My belief is that the reboots may be a power issue but I'm never around wwhen it happens. I have copied all the info from the event log for November in relation to this problem. Hopefully someone on here can make sense of the crash and let me know. All help is appreciated.

The first error is one that appears throughout the log but at different times from the ID 1003 and ID 106.

Each time the 2 IDs appear there is only one instance of each except on the 8/11 when there were 2 ID 1003's.

Source Event Log
Category None
Event ID 6008

The previous system shutdown at 2:25:44 PM on 11/3/2005 was unexpected.




Date 1/11/05
Source User32
Category None
Event ID 1076

The reason supplied by user companyname\Administrator for the last
unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x00000050 (0xff6ae000, 0x00000000, 0x8084f552, 0x00000000)
Comment: 0x00000050 (0xff6ae000, 0x00000000, 0x8084f552, 0x00000000)


Date 1/11/05
Source System error
Category 102
Event ID 1003

Error code 00000050, parameter1 ff6ae000, parameter2 00000000,
parameter3 8084f552, parameter4 00000000.




Date 4/11/05
Source User32
Category None
Event ID 1076

The reason supplied by user companyname\Administrator for the last
unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x00000050 (0xff545000, 0x00000000, 0x8084f552, 0x00000000)
Comment: 0x00000050 (0xff545000, 0x00000000, 0x8084f552, 0x00000000)


Date 4/11/05
Source System error
Category 102
Event ID 1003

Error code 00000050, parameter1 ff545000, parameter2 00000000,
parameter3 8084f552, parameter4 00000000.




Date 8/11/05
Source User32
Category None
Event ID 1076

The reason supplied by user companyname\Administrator for the last
unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x00000050 (0xff234000, 0x00000000, 0x8084f552, 0x00000000)
Comment: 0x00000050 (0xff234000, 0x00000000, 0x8084f552, 0x00000000)

Date 8/11/05 8.04.02am
Source System error
Category 102
Event ID 1003

Error code 00000050, parameter1 ff5fe000, parameter2 00000000,
parameter3 8084f552, parameter4 00000000.

Date 8/11/05 8.04.09am
Source System error
Category 102
Event ID 1003

Error code 00000050, parameter1 ff234000, parameter2 00000000,
parameter3 8084f552, parameter4 00000000.





Date 9/11/05
Source User32
Category None
Event ID 1076

he reason supplied by user companyname\Administrator for the last
unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String:
Comment:


Date 9/11/05
Source System error
Category 102
Event ID 1003

Error code 00000050, parameter1 ff677000, parameter2 00000000,
parameter3 8084f552, parameter4 00000000.




Date 10/11/05
Source User32
Category None
Event ID 1076

The reason supplied by user companyname\Administrator for the last
unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x00000050 (0xff686000, 0x00000000, 0x8084f552, 0x00000000)
Comment: 0x00000050 (0xff686000, 0x00000000, 0x8084f552, 0x00000000)


Date 10/11/05
Source System error
Category 102
Event ID 1003

Error code 00000050, parameter1 ff686000, parameter2 00000000,
parameter3 8084f552, parameter4 00000000.





Date 11/11/05
Source User32
Category None
ID 1076


The reason supplied by user companyname\Administrator for the last
unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x00000050 (0xff481000, 0x00000000, 0x8084f552, 0x00000000)
Comment: 0x00000050 (0xff481000, 0x00000000, 0x8084f552, 0x00000000)



Date 11/11/05
Source System error
Category 102
Event Id 1003

Error code 00000050, parameter1 ff481000, parameter2 00000000, parameter3
8084f552, parameter4 00000000.


Thanks,
JPM

 

[cpc2004]

Hi,

The crashes are consistent and I believe that it is device driver error. Zip 2 to 3 minidumps to a zip file and attach it here. Techspot has an upper limit of 100K per attachment. I will study the dump and find out the culprit.

You can find the minidumps at the folder c:\windows\minidumps

 

[JPM0274]

Here's a selection of the minidumps. thanks for taking the timee to have a look at these.

 

[cpc2004]

Hi,

All of the minidumps are crashed with same reason. The culprit is AVG. Upgrade AVG or re-install AVG.

Your debug report
BugCheck 50, {feeec000, 0, 8084f552, 0}
Probably caused by : avg7rsxp.sys ( avg7rsxp+2d31 )

 

[JPM0274]

Thanks for the quick reply. I'll give that a shot and I'll let you know if it was successful. Cheers.

 

[kirantech]

My desktop dumps many times....

I hav been using Windows Server 2003 in D drive with XP installed in C drive

I suffered many times blue screen. I tried to sloved it many times but cant get exact solution.

I had atached a dump.rar attachment to you.


Last time it was,

Event Category: None
Event ID: 1076
Date: 10/19/2007
Time: 11:28:14 AM
User: ******\Administrator
Computer: ******
Description:
The reason supplied by user ******\Administrator for the last unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x000000d1 (0xa199a2b3, 0x000000ff, 0x00000001, 0x8577b90e)
Comment: 0x000000d1 (0xa199a2b3, 0x000000ff, 0x00000001, 0x8577b90e)

============================

Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1076
Date: 10/15/2007
Time: 6:01:08 PM
User: ******\Administrator
Computer: ******
Description:
The reason supplied by user ******\Administrator for the last unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x0000000a (0x89789f00, 0x000000ff, 0x00000001, 0x80a6d63e)
Comment: 0x0000000a (0x89789f00, 0x000000ff, 0x00000001, 0x80a6d63e)

=========================================

Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1076
Date: 10/3/2007
Time: 12:25:49 PM
User: *******\Administrator
Computer: *******
Description:
The reason supplied by user ******\Administrator for the last unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID: 0x000000d1
Bugcheck String: 0x000000d1 (0x00007108, 0x0000000a, 0x00000000, 0xf719201f)
Comment: 0x000000d1 (0x00007108, 0x0000000a, 0x00000000, 0xf719201f)


waiting for reply


thanx in adv.

regds,
kiran

 

[peterdiva]

You've got a Rootkit: windev-4972-25db.sys. I suggest you go HERE.

f6448000 f646d880 windev_4972_25db windev-4972-25db.sys Tue May 29 21:11:24 2007 (465C267C)

 

[ddodson]

Error 1003

I am having similar issues. I have Microsoft Windows Server 2003 R2 Enterprise x64 edt service pack 2 with exchange 2007 installed and the system keeps crashing unexpectedly. I noticed that someone reviewed the dump files and found the culprit. However, when I viewed the dump files it shows a different file causing the problem. I have attached most recent dump files. please review! Email traffic is stopped each time it goes down.

 

[howard_hopkinso]

Please start a new thread for you problem in this forum.

Regards Howard