Server Shuts Down on its own - not sasser

**musicman7722** · May 13th, 2008, 02:33 PM

Recently my main server is shutting itself randomly.

MS Server 2003 r2.
Fully Patched

DC, AD, DHCP Server, DNS Server

I have thes two reports that occur one after the other whenever this happens. I'll list them below.

I have googled this a lot and most seem to think it is the sasser worm. I know about the sasser worm from dealing with desktops over the last few years and except for the shut down it doesn't strike me as the sasser. I have also found this from a lot of people posting with same server issue. Replies say it's ths sasser but the servers then check out clean.

Can anybody point me in the right direction on this issue?

Thanks

Chris

************************
Here are the two messages

***
A critical system process, C:\WINDOWS\system32\lsass.exe, failed with status code c0000005. The machine must now be restarted.

****
Faulting application lsass.exe, version 5.2.3790.0, faulting module nvappfilter.dll, version 2.2.0.488, fault address 0x00005197.

**CeeBee** · May 13th, 2008, 03:53 PM

Your nVidia chipset network drivers... did you install their crappy firewall component too???

**musicman7722** · May 13th, 2008, 04:36 PM

No their firewall is disabled.

Thanks

Chris

**CCT** · May 13th, 2008, 05:01 PM

http://www.pcreview.co.uk/forums/thread-120417.php

**CeeBee** · May 14th, 2008, 08:58 AM

Originally Posted by musicman7722

No their firewall is disabled.

Disabled or not, it is still "active" but doesn't filter anything.
I would first remove the network drivers completely, then install the latest version w/o the NV firewall component. I have seen it happening before...
Alternatively if you have a different NIC in the machine (that uses non-NV drivers) try to use it instead and see if it still crashes. Your error points to the NV driver...