Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Multiple Computers on Multiple Networks Crashing because of Unknown Win Issue


  • Please log in to reply
1 reply to this topic

#1 jenkhouse411

jenkhouse411

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:12:08 PM

Posted 23 October 2015 - 10:02 AM

Hello All-

 

I am part of team of people who are experiencing a weird issue that we cannot seem to pin point the root cause of;

 

So far the only commonality between the computers seems to be Windows 7 and LabTech Software.

 

I, personally have seen the issue occur on 3 separate computers. It happens when you reboot the machine. However, we have a large network on machines on various clients and we are noticing the issue on a certain percentage of our clients, and then a certain percentage of their machines. It does not appear to be spreading, but it has affected a great number of computers.

 

One of the computers was unable to install windows updates, .NET seemed to have been turned off, unable to turn it on, event viewer was inaccessible, restoring windows worked the first few times and now the restore will not even work. (that computer is hosed after experiencing the crash 4 times)

 

Another computer, which I am currently on, is still repairing and rebooting into windows. I rebooted into a restore point from yesterday morning "after the crash." The user used the computer all day yesterday without issue. We decided that we would use it to perform some test on...

I booted it into safe mode and ran an MBAM scan.

I found 2527 threats and attempted to remove them (necessary reboot)

computer would not boot up, necessary restore.

tried to remove malware bytes which was still there, but could not, downloaded a removal tool recommended by MBAM, removed program, reboot necessary...

computer would not boot up, necessary restore.

I have had to restore the computer back to the same point in time several times now and can't seem to find a cause.

ran a rootkit scan, came back fine.

I am going to reboot the computer again now that I have been on it for a little while and see if needs to restored again.

 

 

We have seen Microsoft office try and install updates, computer is hosed upon reboot.

Windows updates has tried to install updates on some of the machines, computer is hosed.

Windows complains that it is running out of resources on some of the machines, hosed.

repair of most of the machines comes back saying that the ACPI.sys file is corrupt

We have reached out to Microsoft and they aren't sure what is going on either. They did some debugging and found that 144 sys files were missing from one of the machines in question.

most of the machines are running SEP, but not all of them.

I have seen an "Error 2908" involving Microsoft Office 2010

0xc000000e (and similar errors)

 

The symptoms appear to be wide spread at this point and are tough to narrow down.

 

We have tried virus scans, check disks, reaching out to Symantec, MS, etc...

 

I could really use some guidance here and would appreciate any help some is willing to provide.

 

As for Labtech, which people here are quick to assume is the culprit because its the only commonality. We don't use it to patch and we don't use it to script. I have reached out to their support system and they have never heard of this issue either.

 

thank you for taking the time to read this. I will promptly respond to whomever decides to help me out.

 

thank you!

 

 

 

 

 



BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:12:08 PM

Posted 23 October 2015 - 08:20 PM

2500+ threats is an awful lot.  I'd first suggest having the experts in the Am I Infected forum have a look at this:

 

If infected, I'd suggest posting over in the Am I Infected forum:  http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/
Please read the pinned topics at the top of the forum for instructions on how to post there.

 

I'd also suggest zipping up and uploading these reports:

 

Let's try looking at these reports:

1)  Please provide this information (even though you may not be reporting BSOD's) so we can provide a complete analysis (from the Pinned Topic at the top of the forum):  http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

2)  Please do the following:
- open Event Viewer (run eventvwr.msc from the "Run" dialog)
- expand the Custom Views category (left click on the > next to the words "Custom Views")
- right click on Administrative Events
- select "Save all Events in Custom View as..."
- save the file as Admin.evtx
- zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
- upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).

FYI - If we're looking for Event ID 41 errors (unexplained shutdowns), there's more info on that here:  http://support.microsoft.com/kb/2028504

While waiting for a reply, please monitor your temps with this free utility:  http://www.cpuid.com/softwares/hwmonitor.html


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users