Event ID 1001: server rebooting from bugcheck

[rohan.bisht]

Hi , I am running a windows server 2k3 with sp2 and server is getting rebooted with event id 1001 :The computer has rebooted from a bugcheck. The bugcheck was: 0x1000008e (0x80000003, 0xe0872e04, 0xf187f9c4, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini020808-03.dmp.

and also I am getting event id 1003 : Error code 1000008e, parameter1 80000003, parameter2 e0872e04, parameter3 f1aff9c4, parameter4 00000000.

in the logs may this also be related to same issue.
Could anyone help me figuring out the cause of this. whether it is due to any driver or hardware failure. I am also attaching a dump files along with the thread.
Pls help me with the resolution asap. thanks

 

[rohan.bisht]

Pls reply asap i need help urgently thanks

I need to get it resolve very soon . pls help me

 

[Route44]

All four of your errors state 0x8E: KERNEL_MODE_EXCEPTION_NOT_HANDLED

A kernel mode program generated an exception which the error handler didn’t catch. These are nearly always hardware compatibility issues (which sometimes means a driver issue or a need for a BIOS upgrade).

I am leaning more to a driver issue though due to the following:

The first two minidumps cite the probable cause as savrt.sys which is an Auto Protect driver for Symantec Anti-virus. In the read SYMEVENT.SYS was unable to load which is also a driver for this anit-virus software.

The second two mnidumps point to afd.sys which is an Acillary Function Driver for Winsock which is part of your Windeos OS. In the mix was RTvscan.exe which is the exexcutible for Symantec's Realytime Scanner.

This executible from what I have read is a resource hog but essential. it should not be terminated.


So, here are some suggestions:

1. Run msconfig

2. Run chkdsk

3. Update your anti-virus. There are updates for savrt.sys

4. One piece of hardware I have heard people needed to change out with this issue with savrt.sys was their Nic card.

Questions: Did you change out any of your hardware recently?

Good luck and keep us up to date.

 

[rohan.bisht]

The symantec antivirus is uptodate but the firmware , pers, bIOS drivers are outdated

This is what i got after running chkdsk:

CHKDSK is verifying files (stage 1 of 3)...
54208 file records processed.
File verification completed.
164 large file records processed.
0 bad file records processed.
0 EA records processed.
1 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 3)...
189993 index entries processed.
Index verification completed.
5 unindexed files processed.
CHKDSK is verifying security descriptors (stage 3 of
54208 security descriptors processed.
Security descriptor verification completed.
7022 data files processed.
Windows found problems with the file system.
Run CHKDSK with the /F (fix) option to correct these

8393930 KB total disk space.
7380060 KB in 46253 files.
15816 KB in 7024 indexes.
0 KB in bad sectors.
100218 KB in use by the system.
44032 KB occupied by the log file.
897836 KB available on disk.

4096 bytes in each allocation unit.
2098482 total allocation units on disk.
224459 allocation units available on disk.

any suggestions, questions?

 

[Route44]

I have seen people here correct a lot of issues by updating everything they can think of this includes the drivers for the chipset, audio and video as well as firmware; sometimes the BIOS but if has been quite some time I would update this as well but make sure you back everything first.

Here's the thing: You have an updated anti-virus but outdated drivers and firmware for your hardware. Potential conflicts???


Did you run msconfig?

Since chkdsk ran and fixed files have you gained stability?

 

[rohan.bisht]

Yes looks very much stable now.. it hasn't gone down for about 24 hrs.
What you want me do on msconfig.. ? any setting you want me to change?