stop error code 0x00000093

[blin]

Twice this afternoon, our main server running on Windows 2003 rebooted by itself, with a stop error code: The computer has rebooted from a bugcheck. The bugcheck was: 0x00000093 (0x00005418, 0x00000000, 0x00000000, 0x00000000). You can download the MEMORY.DMP

It happened at 1:03 pm and again at 3:36 pm. We haven’t added any hardware. The only thing changed is we added one SSL website and one IP address to the server. Any suggestion?


--------------------------------------------------------------------------------

[blin]

The server has Event ID 2000 before shutdown

Event Type: Error

Event Source: EventLog

Event Category: None

Event ID: 6008

Date: 6/18/2012

Time: 1:06:23 PM

User: N/A

Computer: SERVER

Description:

The previous system shutdown at 1:03:47 PM on 6/18/2012 was unexpected.

For more information, see Help and <place w:st="on"><placename w:st="on">Support</placename> <placetype w:st="on">Center</placetype></place> at http://go.microsoft.com/fwlink/events.asp.

Data:

0000: dc 07 06 00 01 00 12 00 Ü.......

0008: 0d 00 03 00 2f 00 38 03 ..../.8.

0010: dc 07 06 00 01 00 12 00 Ü.......

0018: 12 00 03 00 2f 00 38 03 ..../.8.

Event Type: Error

Event Source: Srv

Event Category: None

Event ID: 2000

Date: 6/18/2012

Time: 1:02:53 PM

User: N/A

Computer: SERVER

Description:

The server's call to a system service failed unexpectedly.

For more information, see Help and <place w:st="on"><placename w:st="on">Support</placename> <placetype w:st="on">Center</placetype></place> at http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 00 00 04 00 01 00 54 00 ......T.

0008: 00 00 00 00 d0 07 00 c0 ....Ð..À

0010: 00 00 00 00 10 00 00 c0 .......À

0018: 00 00 00 00 00 00 00 00 ........

0020: 00 00 00 00 00 00 00 00 ........

0028: 1e 03 ee 02 ..î.

[blin]

As I understand, the issue you are experiencing is that server shutdown was unexpected. Since this issue is related to crash, please understand that the memory dumping is needed to find out the root cause and our POTC doesn't provide such level support for this situation. Due to the community support native, I would suggest that you to contact the Microsoft Support Professional tech support service so that a dedicated Support Professional can assist with this request. For more detail on Professional Support Options and incident submission methods, please visit the following web site:
http://support.microsoft.com/?LN=en-us& ... erprophone

What's more, according the information you provide, I found the following information and we can try the following steps for troubleshooting:
=====================================

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x93

STACK_TEXT:

GetContextState failed, 0x80070026

Unable to get current machine context, Win32 error 0n38


The error code in bold “DEFAULT_BUCKET_ID” is what you have to look at here. In this case it is “DRIVER_FAULT”, meaning it was a driver conflict or error which has caused the BSOD. But the Error code: (HRESULT) 0x80070026 (2147942438) - Reached the end of the file. It shows the dump file has been truncated. Data may be missing.

In order to collect the dump file, we need to reset the pagefile in the pre-configured virtual image
--------------------------------------------------------------------------------------------------------------------------------------
1. Right-click computer—select Advanced—Performance—Setting—Change Virtual Memory
2. Change the Maximum size, chick the “system managed size”
3. Press OK, Apply, and then reboot the machine.

Meanwhile, about the bugcheck “0x00000093”, I suggest we can update the following KB first：
---------------------------------------------------------------------------------------------------------------
A Stop error occurs on a Windows Server 2003-based server when a user accesses shared files on the server by using an SMB connection
http://support.microsoft.com/kb/961799

Windows Server 2003 SP2-based computer stops responding because of memory exhaustion
http://support.microsoft.com/default.as ... US;2423566

MS11-020: Vulnerabilities in SMB Server could allow remote code execution: April 12, 2011
http://support.microsoft.com/kb/2508429

For more information about debug, please see the below link：
Bug Check
http://msdn.microsoft.com/en-us/library ... 72(v=VS.85).aspx