> hello,
> About 3 months ago I installed this server. The pc it's on isn't a
> server. It's a decent workstation (3gb ram, 180gb raid1 disks, 2ghz
> cpu, asus motherboard).
>
> it was working fine for a while, then these things started happening.
> It's also starting to get lots of spam, so I have to start playing with
> IMF. It's got trend-micro CSM suite (their newest one).
>
> I haven't had a chance to start doing research for this stuff but
> figured I'd see what others have to say. I like to work at a place
> called www.eventid.net I find it easier to search for problems with
> windows servers than technet.
>
> What do others use? I know technet has gotten better (thank you
> microsoft) but a place like eventid.net is very user friendly for techies.
>
>
>
>
>
>
> Event Type: Warning
> Event Source: Disk
> Event Category: None
> Event ID: 51
> Date: 7/2/2007
> Time: 1:40:25 PM
> User: N/A
> Computer: SERVER
> Description:
> An error was detected on device \Device\Harddisk0 during a paging operation.
>
> For more information, see Help and Support Center at
>
http://go.microsoft.com/fwlink/events.asp.> Data:
> 0000: 04 00 68 00 01 00 ba 00 ..h...�.
> 0008: 00 00 00 00 33 00 04 80 ....3..?
> 0010: 2d 01 00 00 9a 00 00 c0 -...?..�
> 0018: 00 00 00 00 00 00 00 00 ........
> 0020: 00 00 00 00 00 00 00 00 ........
> 0028: 37 76 07 00 00 00 00 00 7v......
> 0030: ff ff ff ff 01 00 00 00 ����....
> 0038: 40 00 00 30 ff 00 00 00 [ at ]..0�...
> 0040: ff 20 0a 12 80 01 20 40 � ..?. [ at ]
> 0048: 00 d0 00 00 0a 00 00 00 .�......
> 0050: 00 00 00 00 20 6b 95 fc .... k?�
> 0058: 00 00 00 00 28 22 81 fc ....("��
> 0060: 00 00 00 00 9a 00 00 c0 ....?..�
> 0068: 2a 00 01 86 9f ff 00 00 *..??�..
> 0070: 68 00 00 00 00 00 00 00 h.......
> 0078: 00 00 00 00 00 00 00 00 ........
> 0080: 00 00 00 00 00 00 00 00 ........
> 0088: 00 00 00 00 00 00 00 00 ........
>
>
>
> Event Type: Error
> Event Source: Application Popup
> Event Category: None
> Event ID: 333
> Date: 7/2/2007
> Time: 1:39:56 PM
> User: N/A
> Computer: SERVER
> Description:
> An I/O operation initiated by the Registry failed unrecoverably. The
> Registry could not read in, or write out, or flush, one of the files
> that contain the system's image of the Registry.
>
> For more information, see Help and Support Center at
>
http://go.microsoft.com/fwlink/events.asp.> Data:
> 0000: 00 00 00 00 01 00 6c 00 ......l.
> 0008: 00 00 00 00 4d 01 00 c0 ....M..�
> 0010: 00 00 00 00 4d 01 00 c0 ....M..�
> 0018: 00 00 00 00 00 00 00 00 ........
> 0020: 00 00 00 00 00 00 00 00 ........
>
>
>
>
> Event Type: Error
> Event Source: Application Popup
> Event Category: None
> Event ID: 333
> Date: 7/2/2007
> Time: 1:39:56 PM
> User: N/A
> Computer: SERVER
> Description:
> An I/O operation initiated by the Registry failed unrecoverably. The
> Registry could not read in, or write out, or flush, one of the files
> that contain the system's image of the Registry.
>
> For more information, see Help and Support Center at
>
http://go.microsoft.com/fwlink/events.asp.> Data:
> 0000: 00 00 00 00 01 00 6c 00 ......l.
> 0008: 00 00 00 00 4d 01 00 c0 ....M..�
> 0010: 00 00 00 00 4d 01 00 c0 ....M..�
> 0018: 00 00 00 00 00 00 00 00 ........
> 0020: 00 00 00 00 00 00 00 00 ........Event Type: Error
> Event Source: Application Error
> Event Category: (100)
> Event ID: 1000
> Date: 7/3/2007
> Time: 8:20:59 AM
> User: N/A
> Computer: SERVER
> Description:
> Faulting application wmiprvse.exe, version 5.2.3790.1830, faulting
> module ntdll.dll, version 5.2.3790.1830, fault address 0x000396d0.
>
> For more information, see Help and Support Center at
>
http://go.microsoft.com/fwlink/events.asp.> Data:
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> 0010: 75 72 65 20 20 77 6d 69 ure wmi
> 0018: 70 72 76 73 65 2e 65 78 prvse.ex
> 0020: 65 20 35 2e 32 2e 33 37 e 5.2.37
> 0028: 39 30 2e 31 38 33 30 20 90.1830
> 0030: 69 6e 20 6e 74 64 6c 6c in ntdll
> 0038: 2e 64 6c 6c 20 35 2e 32 .dll 5.2
> 0040: 2e 33 37 39 30 2e 31 38 .3790.18
> 0048: 33 30 20 61 74 20 6f 66 30 at of
> 0050: 66 73 65 74 20 30 30 30 fset 000
> 0058: 33 39 36 64 30 396d0
>
>
>
> Event Type: Information
> Event Source: Microsoft Exchange Server
> Event Category: None
> Event ID: 1001
> Date: 7/3/2007
> Time: 9:32:41 AM
> User: N/A
> Computer: SERVER
> Description:
> Bucket 241604012, bucket table 1, faulting application exwmi.dll,
> version 6.5.7638.1, stamp 430e7361, faulting module ntdll.dll, version
> 5.2.3790.1830, stamp 424377d2, debug? 0, fault address 0x000396d0.
>
> For more information, see Help and Support Center at
>
http://go.microsoft.com/fwlink/events.asp.> Data:
> 0000: 42 00 75 00 63 00 6b 00 B.u.c.k.
> 0008: 65 00 74 00 3a 00 20 00 e.t.:. .
> 0010: 32 00 34 00 31 00 36 00 2.4.1.6.
> 0018: 30 00 34 00 30 00 31 00 0.4.0.1.
> 0020: 32 00 0d 00 0a 00 42 00 2.....B.
> 0028: 75 00 63 00 6b 00 65 00 u.c.k.e.
> 0030: 74 00 54 00 61 00 62 00 t.T.a.b.
> 0038: 6c 00 65 00 20 00 31 00 l.e. .1.
> 0040: 0d 00 0a 00 ....
>
>
>
> Event Type: Warning
> Event Source: Disk
> Event Category: None
> Event ID: 51
> Date: 7/3/2007
> Time: 8:55:33 AM
> User: N/A
> Computer: SERVER
> Description:
> An error was detected on device \Device\Harddisk0 during a paging operation.
>
> For more information, see Help and Support Center at
>
http://go.microsoft.com/fwlink/events.asp.> Data:
> 0000: 04 00 68 00 01 00 ba 00 ..h...�.
> 0008: 00 00 00 00 33 00 04 80 ....3..?
> 0010: 2d 01 00 00 9a 00 00 c0 -...?..�
> 0018: 00 00 00 00 00 00 00 00 ........
> 0020: 00 00 00 00 00 00 00 00 ........
> 0028: 7c de 15 00 00 00 00 00 |�......
> 0030: ff ff ff ff 01 00 00 00 ����....
> 0038: 40 00 00 30 ff 00 00 00 [ at ]..0�...
> 0040: ff 20 0a 12 80 01 20 40 � ..?. [ at ]
> 0048: 00 c0 00 00 0a 00 00 00 .�......
> 0050: 00 00 00 00 e0 1d 9e fc ....�.?�
> 0058: 00 00 00 00 b0 1b 9e fc ....�.?�
> 0060: 00 00 00 00 9a 00 00 c0 ....?..�
> 0068: 2a 00 01 86 9f ff 00 00 *..??�..
> 0070: 60 00 00 00 00 00 00 00 `.......
> 0078: 00 00 00 00 00 00 00 00 ........
> 0080: 00 00 00 00 00 00 00 00 ........
> 0088: 00 00 00 00 00 00 00 00 ........
>
>
>
>
>
>
>