Blue screen

MKremers

We have recently migrated SQL Server databases to a new server. On this server we have installed Red Gate Backup version 4.6.0.815, just like on the old server.
The new server has crashed several times, resulting in a 'blue screen' while a Red Gate backup process was active.

Can you tell me, based on the concise dumpfile (see below), whether Red Gate Backup can be a cause of the problems we have?

This is the summary of the dumpfile:

Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x64
Product: Server, suite: Enterprise TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_gdr.070321-2337
Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011d4140
Debug session time: Thu May 15 05:15:26.436 2008 (GMT+2)
System Uptime: 2 days 13:57:30.406
Loading Kernel Symbols
...............................................................................................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Loading unloaded module list
.
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck E3, {fffffadff0cab9b0, fffffadf9a27f040, fffffadfdffd07e0, 3}

Page 57fe9f not present in the dump file. Type ".hh dbgerr004" for details
Page f108c not present in the dump file. Type ".hh dbgerr004" for details
*** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT64x86.SYS -

PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details

PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Probably caused by : SYMEVENT64x86.SYS ( SYMEVENT64x86!SYMEvent_GetSubTask+76a4 )

Followup: MachineOwner

---

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

RESOURCE_NOT_OWNED (e3)
A thread tried to release a resource it did not own.
Arguments:
Arg1: fffffadff0cab9b0, Address of resource
Arg2: fffffadf9a27f040, Address of thread
Arg3: fffffadfdffd07e0, Address of owner table if there is one
Arg4: 0000000000000003

Debugging Details:

---

Page 57fe9f not present in the dump file. Type ".hh dbgerr004" for details
Page f108c not present in the dump file. Type ".hh dbgerr004" for details

PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details

PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details

OVERLAPPED_MODULE: Address regions for 'eeCtrl64' and 'imapi.sys' overlap

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xE3

PROCESS_NAME: SQBCoreService. << Company: Red Gate Software Ltd Product: SQL Backup Description: SQL Backup Service Application >>

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff800010afa7b to fffff8000102e890

STACK_TEXT:
fffffad9`962e5b78 fffff800`010afa7b : 00000000`000000e3 fffffadf`f0cab9b0 fffffadf`9a27f040 fffffadf`dffd07e0 : nt!KeBugCheckEx
fffffad9`962e5b80 fffffadc`c3891120 : fffffa80`0eefba48 00000000`00000000 fffffadf`e1480050 fffffadf`e1480010 : nt!ExReleaseResourceLite+0x1e8
fffffad9`962e5bc0 fffffadc`c389113c : fffffadf`e1480010 fffffadf`fcb382c0 00000000`00000000 00000000`00000000 : Ntfs!NtfsReleaseAllResources+0x129
fffffad9`962e5bf0 fffffadc`c3891395 : fffffadf`e1480010 fffffad9`962e5da8 00000000`00000000 00000000`00000000 : Ntfs!NtfsCleanupIrpContext+0x40
fffffad9`962e5c30 fffffadc`c390fbd1 : 00000000`00000000 00000000`00000000 fffffadf`e1480010 fffffad9`962e60d0 : Ntfs!NtfsCompleteRequest+0x4b
fffffad9`962e5c60 fffffadc`c39112c6 : 00000000`0000001c fffffadf`a9e2db40 fffffad9`962e60d0 fffffadf`e1480010 : Ntfs!NtfsCommonCreate+0x27c9
fffffad9`962e6040 fffffadc`c39e2db3 : fffffadc`df22e1b0 fffffadf`a9e2db40 fffffadf`a9e2db40 fffffadf`fdd36040 : Ntfs!NtfsFsdCreate+0x218
fffffad9`962e61d0 fffffadc`c0cb3114 : fffffadf`fdd36040 fffffad9`962e6408 fffffadc`ded8bc60 fffffad9`962e6310 : fltmgr!FltpCreate+0x353
fffffad9`962e6260 fffffadc`c0cbc13c : fffffad9`962e6310 fffffad9`962e6310 fffffad9`962e6310 00000000`00000000 : SYMEVENT64x86!SYMEvent_GetSubTask+0x76a4
fffffad9`962e62c0 fffffadc`c0cb3217 : fffffadf`a9e2db40 fffffad9`962e6408 fffffadc`de72a6e0 fffffadf`eec28010 : SYMEVENT64x86!EventObjectCreate+0xf0c
fffffad9`962e62f0 fffffadc`c39c7542 : fffffadc`de700d30 00000000`00000000 00000000`10000000 fffffadf`a9e2db60 : SYMEVENT64x86!SYMEvent_GetSubTask+0x77a7
fffffad9`962e6360 fffffadc`c39e2e1d : fffffadc`de72a6e0 fffffadf`a9e2db40 fffffadc`de72a600 fffffadf`a9e2db40 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x3f2
fffffad9`962e63d0 fffff800`012827c9 : fffffadc`e2c55060 fffff800`01282170 fffffad9`962e6950 fffffadc`de700d30 : fltmgr!FltpCreate+0x3bd
fffffad9`962e6460 fffff800`01280164 : fffffadc`e2c55060 fffffadc`e2c55010 fffffad9`962e6790 00000000`00000001 : nt!IopParseDevice+0x1088
fffffad9`962e6610 fffff800`01284887 : 00000000`00000000 fffffad9`962e6780 fffffadf`00000040 00000000`00000000 : nt!ObpLookupObjectName+0x931
fffffad9`962e6720 fffff800`01291e4d : fffffadc`de700d30 fffffad9`962e6960 fffffadc`ded8bc60 00000000`00000000 : nt!ObOpenObjectByName+0x180
fffffad9`962e6910 fffff800`01298ef7 : fffffadc`e28c9600 fffff800`00000004 fffffadc`de700d00 00000000`00000110 : nt!IopCreateFile+0x630
fffffad9`962e6aa0 fffff800`01298d39 : 00000000`00e7e7d8 00000000`00000000 00000000`00000300 fffffadc`de700d30 : nt!IoCreateFile+0x12f
fffffad9`962e6b80 fffff800`0102e33d : fffffadc`dd4bdc20 fffffadf`9a27f040 00000000`00000000 00000000`00000000 : nt!NtCreateFile+0x69
fffffad9`962e6c00 00000000`77ef0f3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x3
00000000`00e7e758 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77ef0f3a


STACK_COMMAND: kb

FOLLOWUP_IP:
SYMEVENT64x86!SYMEvent_GetSubTask+76a4
fffffadc`c0cb3114 488b5c2470 mov rbx,qword ptr [rsp+70h]

SYMBOL_STACK_INDEX: 8

SYMBOL_NAME: SYMEVENT64x86!SYMEvent_GetSubTask+76a4

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: SYMEVENT64x86

IMAGE_NAME: SYMEVENT64x86.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 45515160

FAILURE_BUCKET_ID: X64_0xE3_SYMEVENT64x86!SYMEvent_GetSubTask+76a4

BUCKET_ID: X64_0xE3_SYMEVENT64x86!SYMEvent_GetSubTask+76a4

Followup: MachineOwner

petey

MKremers has subsequently reported that the issue was caused by a virus scanner on the new server.