Link to home
Start Free TrialLog in
Avatar of brihaspati79
brihaspati79

asked on

Simulutaneous Blue Screen (BSOD)

I client with only two XP workstations connected to a SBS 2003 domain said both of her computers had the BSOD this morning.  Enclosed is a screenshot.  She so no changes have been made as far as she knew.  No new hardware or software.  The both use Avast Professional av software.  Any thoughts on why they would both do this?  They have been running okay since the restarted (around 8 EST this AM), but one got another blue screen a few minutes ago.  She is running okay now.  I haven't checked event logs yet, I just wondered if this screen shot looked familiar to anyone and why both workstations.
photo.JPG
Avatar of spinzr0
spinzr0
Flag of United States of America image

I've seen that BSOD with outdated NIC drivers.  A windows update caused it to start happening.
The IRQ_NOT_LESS_OR_EQUAL usually points to a hardware error, but nothing more specific than that.  
It's odd they failed at the same time, but not impossible.  How about this: is it possible A/C when off in the building overnight and the two machines overheated?  Alternately, there may have been a power surge or brownout...
Avatar of brihaspati79
brihaspati79

ASKER

I can access their logs after 5 PM EST and see if any updates may have caused this.  Did MS push any Tuesday updates last night or early this AM that would have caused this?  They are both on auto-update.
generally blue screens of this nature are caused by hardware. I would start the trouble shooting process at the network level. check out all of cables from the switch to the computers. A short in the line could have be causing a fault witch could cause the machine to bluescreen.
Okay, I will check that too.  Thanks.
Can you upload those relavant minidump files per machine to be checked
Not till around 7 PM EST  Will you be around?
Should be(about 5hrs ahead)
many causes of this - here's MS's suggestions:
http://support.microsoft.com/kb/314063

Are both BSODs showing the 0000000a code?
Event Type:      Error
Event Source:      System Error
Event Category:      (102)
Event ID:      1003
Date:            9/21/2010
Time:            4:38:21 PM
User:            N/A
Computer:      KELLY
Description:
Error code 10000050, parameter1 985c1b60, parameter2 00000000, parameter3 8052a905, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45   System E
0008: 72 72 6f 72 20 20 45 72   rror  Er
0010: 72 6f 72 20 63 6f 64 65   ror code
0018: 20 31 30 30 30 30 30 35    1000005
0020: 30 20 20 50 61 72 61 6d   0  Param
0028: 65 74 65 72 73 20 39 38   eters 98
0030: 35 63 31 62 36 30 2c 20   5c1b60,
0038: 30 30 30 30 30 30 30 30   00000000
0040: 2c 20 38 30 35 32 61 39   , 8052a9
0048: 30 35 2c 20 30 30 30 30   05, 0000
0050: 30 30 30 30               0000    
Both PC's show this same error.
Hi. Can you go to c:\windows\minidump and upload the minidump with todays timestamp :)
Here is the mini dump
Mini092110-03.dmp
Points to afd.sys
Few things to try

>Could be malware related
Run these, in case:
TdssKiller and Hitmanpro.
http://support.kaspersky.com/viruses/solutions?qid=208280684
http://www.surfright.nl/en/hitmanpro

>Check device manager

>Avast pro? Firewall enabled?

>Reset winsock(will remove static settings, if set)
http://download.softpedia.com/dl/601898bc636a67694dd1b89d227da0be/4b3ef80b/100015337/software/tweak/winsockfix.exe
Latest Avast Pro (orange one), Firewall enabled (by SBS 2003 server).  I don't think they have a hardware firewall, I probably should get them hooked up with one.

I will check other the malware issues.  They do run malwarebytes (paid version).

I checked the server logs, no issues.  The problems on both workstations started around 4 PM yesterday.
One further note, afd.sys is a microsoft file which can be utilized by the NIC card.  I would recommend updating NIC drivers.
From the server room, the LAN feed to the two workstations is a Netgear powerline networking device.  If this device were to get a power spike or glitch, could the afd.sys file be affected on both PC's?
Its possible but can't confirm it :)
We used those devices before(the grey ones). Never had issue like that but they were inconsistant(basically "burned out")
ASKER CERTIFIED SOLUTION
Avatar of brihaspati79
brihaspati79

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
This was the solution to the problem.