Solved

Simulutaneous Blue Screen (BSOD)

Posted on 2010-09-21
20
445 Views
Last Modified: 2012-05-10
I client with only two XP workstations connected to a SBS 2003 domain said both of her computers had the BSOD this morning.  Enclosed is a screenshot.  She so no changes have been made as far as she knew.  No new hardware or software.  The both use Avast Professional av software.  Any thoughts on why they would both do this?  They have been running okay since the restarted (around 8 EST this AM), but one got another blue screen a few minutes ago.  She is running okay now.  I haven't checked event logs yet, I just wondered if this screen shot looked familiar to anyone and why both workstations.
photo.JPG
0
Comment
Question by:brihaspati79
  • 10
  • 5
  • 2
  • +3
20 Comments
 
LVL 8

Expert Comment

by:spinzr0
ID: 33727908
I've seen that BSOD with outdated NIC drivers.  A windows update caused it to start happening.
0
 
LVL 33

Expert Comment

by:paulmacd
ID: 33727919
The IRQ_NOT_LESS_OR_EQUAL usually points to a hardware error, but nothing more specific than that.  
It's odd they failed at the same time, but not impossible.  How about this: is it possible A/C when off in the building overnight and the two machines overheated?  Alternately, there may have been a power surge or brownout...
0
 

Author Comment

by:brihaspati79
ID: 33727967
I can access their logs after 5 PM EST and see if any updates may have caused this.  Did MS push any Tuesday updates last night or early this AM that would have caused this?  They are both on auto-update.
0
 

Expert Comment

by:sreichert8
ID: 33728017
generally blue screens of this nature are caused by hardware. I would start the trouble shooting process at the network level. check out all of cables from the switch to the computers. A short in the line could have be causing a fault witch could cause the machine to bluescreen.
0
 

Author Comment

by:brihaspati79
ID: 33728022
Okay, I will check that too.  Thanks.
0
 
LVL 22

Expert Comment

by:optoma
ID: 33729129
Can you upload those relavant minidump files per machine to be checked
0
 

Author Comment

by:brihaspati79
ID: 33729412
Not till around 7 PM EST  Will you be around?
0
 
LVL 22

Expert Comment

by:optoma
ID: 33729549
Should be(about 5hrs ahead)
0
 
LVL 23

Expert Comment

by:DanCh99
ID: 33730372
many causes of this - here's MS's suggestions:
http://support.microsoft.com/kb/314063

Are both BSODs showing the 0000000a code?
0
 

Author Comment

by:brihaspati79
ID: 33730446
Event Type:      Error
Event Source:      System Error
Event Category:      (102)
Event ID:      1003
Date:            9/21/2010
Time:            4:38:21 PM
User:            N/A
Computer:      KELLY
Description:
Error code 10000050, parameter1 985c1b60, parameter2 00000000, parameter3 8052a905, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45   System E
0008: 72 72 6f 72 20 20 45 72   rror  Er
0010: 72 6f 72 20 63 6f 64 65   ror code
0018: 20 31 30 30 30 30 30 35    1000005
0020: 30 20 20 50 61 72 61 6d   0  Param
0028: 65 74 65 72 73 20 39 38   eters 98
0030: 35 63 31 62 36 30 2c 20   5c1b60,
0038: 30 30 30 30 30 30 30 30   00000000
0040: 2c 20 38 30 35 32 61 39   , 8052a9
0048: 30 35 2c 20 30 30 30 30   05, 0000
0050: 30 30 30 30               0000    
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 

Author Comment

by:brihaspati79
ID: 33730448
Both PC's show this same error.
0
 
LVL 22

Expert Comment

by:optoma
ID: 33730453
Hi. Can you go to c:\windows\minidump and upload the minidump with todays timestamp :)
0
 

Author Comment

by:brihaspati79
ID: 33730461
Here is the mini dump
Mini092110-03.dmp
0
 
LVL 22

Expert Comment

by:optoma
ID: 33730619
Points to afd.sys
Few things to try

>Could be malware related
Run these, in case:
TdssKiller and Hitmanpro.
http://support.kaspersky.com/viruses/solutions?qid=208280684
http://www.surfright.nl/en/hitmanpro

>Check device manager

>Avast pro? Firewall enabled?

>Reset winsock(will remove static settings, if set)
http://download.softpedia.com/dl/601898bc636a67694dd1b89d227da0be/4b3ef80b/100015337/software/tweak/winsockfix.exe
0
 

Author Comment

by:brihaspati79
ID: 33730664
Latest Avast Pro (orange one), Firewall enabled (by SBS 2003 server).  I don't think they have a hardware firewall, I probably should get them hooked up with one.

I will check other the malware issues.  They do run malwarebytes (paid version).

I checked the server logs, no issues.  The problems on both workstations started around 4 PM yesterday.
0
 
LVL 8

Expert Comment

by:spinzr0
ID: 33730856
One further note, afd.sys is a microsoft file which can be utilized by the NIC card.  I would recommend updating NIC drivers.
0
 

Author Comment

by:brihaspati79
ID: 33730879
From the server room, the LAN feed to the two workstations is a Netgear powerline networking device.  If this device were to get a power spike or glitch, could the afd.sys file be affected on both PC's?
0
 
LVL 22

Expert Comment

by:optoma
ID: 33732456
Its possible but can't confirm it :)
We used those devices before(the grey ones). Never had issue like that but they were inconsistant(basically "burned out")
0
 

Accepted Solution

by:
brihaspati79 earned 0 total points
ID: 33996915
The power-line device from the internal NIC to the LAN was bad.  I replaced it and all was well.
0
 

Author Closing Comment

by:brihaspati79
ID: 34028114
This was the solution to the problem.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

There are 2 things you must have in order to connect to the internet behind a router, The "Gateway IP" of the router, which is usually something like 192.168.xxx.1, I've seen routers with default values of: 192.168.0.1, 192.168.1.1, 192.168.11.1, …
If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now