Blue Screen With 0x00000050 For Windows 7 And 2008R2

|
  • 108
  • 6

Issue Description

VM with OS Windows 7 or 2008R2 suddenly blue screen with error code 0x00000050.

Handling Process

  • Check the error code. When the error code is 0x00000050, most probably is due to Ransomware.
  • Check the path C:\WINDOWS\ whether there is mssecsvc.exe file.

Root Cause

The blue screen is due to Ransomware attacking the VM.

Solution

  • Disconnect the VM from network.
  • Restart the VM/restore the VM from backup or snapshot.
  • Apply patch according to this link: http://sec.sangfor.com.cn/vulns/314.html. Note that the patch must apply when disconnected from network.
  • Restart to apply changes.
  • Perform virus scanning for safety, suggest use Sangfor EDR tools.
Faisal Posted 20 Aug 2020 09:07
  
Thank you very much for the information ...
Faisal Posted 24 Oct 2020 08:02
  
Nice article ...
Faisal Posted 17 Dec 2020 08:41
  
Great info ...
Ellechar Lv4Posted 27 Jan 2021 10:21
  
Very nice infoooooooooooooooooooooooooooooo
Faisal Posted 18 Mar 2021 07:49
  
Very informative …
Faisal Posted 03 Jun 2021 13:43
  
Nice guidance ...

I want to write a case
Doc ID: 2580
Author: CTI SC
Updated: 2019-12-23 11:57
Version: