BSOD on Proliant DL380G5 with Win 2008 R2

[Ulrik Andreassen]

Hello.
Just installed Windows 2008 R2 on a Proliant DL380 G5. It is now randomly (2-4 times a day) rebooting after BSOD.
This is one of the entries in the event log after a reboot:

The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x0000000000000008, 0x0000000000000002, 0x0000000000000000, 0xfffff800016b7d73). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 100610-29281-01.

Windows 2008 R2 is fully patched from Windows update and DL380G5 is also up to date with latest firmware.

I have once tried to completely reinstall OS (new harddrives also), but the problem is consistent after reinstall.

Before reinstall, it was so bad with BSOD, that Windows actually rebooted in a loop, because it never got finished booting up.

I have attached the latest mini-dump, so I will very grateful if somebody can see, what is causing this BSOD.

The server have until now been running VMware ESX completely stable for 1 year, so hardware should be OK. The problem has first been seen after installation of Windows 2008 R2.

Specs:
32GB RAM
2x Xeon X5460
HP AE311A FC HBA
HP SC11Xe SCSI HBA
2x 72GB SAS 15K drives

Thanks.

Best regards
Ulrik Andreassen

[rjt_1]

Did you by any chance have UDF formatted media on either DVD or USB in the system?

My system will BSOD after inserting UDF formatted USB memory stick. Guess what the sole contents are? Windows 2008 R2!

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1450808

[Ulrik Andreassen]

Hi Robert.
Thanks for replying. :-)
No UDF-formatted media in the server though.
I installed via the smart-start 8.50 CD and the genuine Windows 2008 R2 DVD.

Software installed in the server (but I don't believe, that is causing the problem):
- Symantec Backup Exec 2010 R2
- Daemon Tools Lite (for easy image mounting)

HP support advised me to install MS hotfix KB979711 (issue with iSCSI), but that have made no difference.

The server will BSOD even when not logged on to the GUI.

This the message efter a BSOD reboot:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.272.7
Locale ID: 1030

Additional information about the problem:
BCCode: a
BCP1: 0000000000000008
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF800016BBD73
OS Version: 6_1_7600
Service Pack: 0_0
Product: 272_3

Files that help describe the problem:
C:\Windows\Minidump\100710-29842-01.dmp
C:\Users\administrator.XXXXXXXXX\AppData\Local\Temp\2\WER-4897198-0.sysdata.xml

[Ulrik Andreassen]

The BSOD stop error has now changed. Earlier it was 0x0000000a, now it is 0x00000024. Regarding to a crash dump analysis tool, the ntfs.sys driver is now causing the BSOD. Before is was ntoskrnl.sys.
I just don't know how to fix this error.
I seems like I can force the BSOD, just by exploring around on the harddrive. After 5-20 directory changes or file deletions, Windows will BSOD.
Attached is the report from the analysis tool.
Could it be causes by the newer firmware for P400 SmartArray controller? I firmware updated everything on this server, just before installing Windows 2008 R2 on it.

[Ulrik Andreassen]

I have now tried to uninstall Daemon-Tools Lite, and haven't had a crash since then (3 hours).
So maybe I only happened when there was a iso image mounted in Daemon-Tools?

[Ulrik Andreassen]

OK, having BSOD again. Not as often now, and now STOP code 0x00000024, but can't put in production state until this is fixed.

[Ulrik Andreassen]

I think I fixed the 0x0000000a stop error with this MS hotfix: http://support.microsoft.com/kb/979444

But the 0x00000024 stop error and BSOD still occurs. The 0x00000024 refers to NTFS.sys driver.

[Ulrik Andreassen]

OK, I now suspect that it is Symantec Endpoint Protection that causes the BSOD. I have now tried to disable (not uninstall) SEP, and then I cannot provoke Windows to BSOD by just browsing around the disk and trying to delete a file. This caused Windows to BSOD everytime before disabling SEP.
Guess I need to call Symantec support now...

[Thisbejoe7]

I can comfirm I have the same issue, SEP 11 installed on the server, BSOD anytime I manually browse the folder structure in Explorer. I disabled SEP and the issue has not re-occurred.

[Ulrik Andreassen]

@Thisbejoe7

Do you have Backup Exec and Continuous Protection Server (CPS) installed also? It seems that it is a bug in CPS and there is a hotfix available on Symantec download page for this bug causing BSOD, which is not limited to HP Proliant servers.