BSOD server 2003 minifilter

This is about the minifilter driver running on Server 2003 SP2 running
Symantec antivirus. We are seeing BSOD on one of the two machines. Also,
same driver and antivirus is running on the rest of the XP SP3 clients
without any problem. Only one machine has this issue. We don’t have access
to machine so no WindBg for now. Customer is seeing Higher IRQL message on
the screen when it dies.

I am hoping to get some advice from others, in regard to why this could be
happening. Why only machine has an issue and rest are working fine?

Thanks,
AR

Are all machines running Symantecs AV, or only the machine(s) that are
failing?

Gary G. Little

H (952) 223-1349

C (952) 454-4629

xxxxx@comcast.net

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Anand Patel
Sent: Wednesday, September 08, 2010 1:09 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] BSOD server 2003 minifilter

This is about the minifilter driver running on Server 2003 SP2 running
Symantec antivirus. We are seeing BSOD on one of the two machines. Also,
same driver and antivirus is running on the rest of the XP SP3 clients
without any problem. Only one machine has this issue. We don’t have access
to machine so no WindBg for now. Customer is seeing Higher IRQL message on
the screen when it dies.

I am hoping to get some advice from others, in regard to why this could be
happening. Why only machine has an issue and rest are working fine?

Thanks,
AR
— NTFSD is sponsored by OSR For our schedule of debugging and file system
seminars (including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars To unsubscribe, visit the List Server section of
OSR Online at http://www.osronline.com/page.cfm?name=ListServer

Ask the customer for a dump and !analyze -v it.


Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com

“Anand Patel” wrote in message news:xxxxx@ntfsd…
This is about the minifilter driver running on Server 2003 SP2 running Symantec antivirus. We are seeing BSOD on one of the two machines. Also, same driver and antivirus is running on the rest of the XP SP3 clients without any problem. Only one machine has this issue. We don’t have access to machine so no WindBg for now. Customer is seeing Higher IRQL message on the screen when it dies.

I am hoping to get some advice from others, in regard to why this could be happening. Why only machine has an issue and rest are working fine?

Thanks,
AR

Gary, all machines running Symantec AV including failing machine.
Maxim, we have asked for dump and waiting on that.
Thank you both,
-AR

On Wed, Sep 8, 2010 at 2:27 PM, Maxim S. Shatskih wrote:

> Ask the customer for a dump and !analyze -v it.
>
> –
> Maxim S. Shatskih
> Windows DDK MVP
> xxxxx@storagecraft.com
> http://www.storagecraft.com
>
> “Anand Patel” wrote in message news:xxxxx@ntfsd.
> …
> This is about the minifilter driver running on Server 2003 SP2 running
> Symantec antivirus. We are seeing BSOD on one of the two machines. Also,
> same driver and antivirus is running on the rest of the XP SP3 clients
> without any problem. Only one machine has this issue. We don’t have access
> to machine so no WindBg for now. Customer is seeing Higher IRQL message on
> the screen when it dies.
>
> I am hoping to get some advice from others, in regard to why this could be
> happening. Why only machine has an issue and rest are working fine?
>
> Thanks,
> AR
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars
> (including our new fs mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

You can also just have them upload it to our online crash analysis service
and send you the results:

http://www.osronline.com/page.cfm?name=analyze

(You may need the dump anyway to do further analysis, but it’s fun :))

-scott


Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

“Anand Patel” wrote in message news:xxxxx@ntfsd…
Gary, all machines running Symantec AV including failing machine.
Maxim, we have asked for dump and waiting on that.
Thank you both,
-AR

On Wed, Sep 8, 2010 at 2:27 PM, Maxim S. Shatskih
wrote:

Ask the customer for a dump and !analyze -v it.


Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com

“Anand Patel” wrote in message news:xxxxx@ntfsd…

This is about the minifilter driver running on Server 2003 SP2 running
Symantec antivirus. We are seeing BSOD on one of the two machines. Also,
same driver and antivirus is running on the rest of the XP SP3 clients
without any problem. Only one machine has this issue. We don’t have access
to machine so no WindBg for now. Customer is seeing Higher IRQL message on
the screen when it dies.

I am hoping to get some advice from others, in regard to why this could be
happening. Why only machine has an issue and rest are working fine?

Thanks,
AR


NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

Scott, thank you for the suggestion. I think customer will opt out for this
service :frowning: I will send a note though.

Interesting thing is only one machine is failing. Can I ask them to compare
some configuration settings between two server 2003 boxes? if yes what
settings shall I be comparing?
-AR

On Wed, Sep 8, 2010 at 2:48 PM, Scott Noone wrote:

> You can also just have them upload it to our online crash analysis service
> and send you the results:
>
> http://www.osronline.com/page.cfm?name=analyze
>
> (You may need the dump anyway to do further analysis, but it’s fun :))
>
> -scott
>
> –
> Scott Noone
> Consulting Associate
> OSR Open Systems Resources, Inc.
> http://www.osronline.com
>
>
> “Anand Patel” wrote in message news:xxxxx@ntfsd.
> …
>
> Gary, all machines running Symantec AV including failing machine.
> Maxim, we have asked for dump and waiting on that.
> Thank you both,
> -AR
>
>
> On Wed, Sep 8, 2010 at 2:27 PM, Maxim S. Shatskih
> wrote:
>
> Ask the customer for a dump and !analyze -v it.
>
> –
> Maxim S. Shatskih
> Windows DDK MVP
> xxxxx@storagecraft.com
> http://www.storagecraft.com
>
> “Anand Patel” wrote in message news:xxxxx@ntfsd.
> …
>
> This is about the minifilter driver running on Server 2003 SP2 running
> Symantec antivirus. We are seeing BSOD on one of the two machines. Also,
> same driver and antivirus is running on the rest of the XP SP3 clients
> without any problem. Only one machine has this issue. We don’t have access
> to machine so no WindBg for now. Customer is seeing Higher IRQL message on
> the screen when it dies.
>
> I am hoping to get some advice from others, in regard to why this could be
> happening. Why only machine has an issue and rest are working fine?
>
> Thanks,
> AR
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars
> (including our new fs mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars
> (including our new fs mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>