Jump to content

ChrisK1965

Members
  • Posts

    11
  • Joined

  • Last visited

Posts posted by ChrisK1965

  1. OK, after uninstalling MB,  run windows update. Ran clean up.   Re-installed MB,   ran fine all night.  This morning the system logs looked good.   On another computer on the network, we tried to access our DC drive. Clicked on the short cut folder, and the DC BSOD.  Same error.  MWAC.sys Driver IRQL not less or equal.

     

    This short cut worked fine before the windows update on the 01/10/2020  The short cut link is through the network.   \\DC\C$\   Just a basic shortcut. From what I see our security rights for the shortcut is correct.

    with out MB, shortcut works fine.      

    @nikhils     This zip is from this mornings BSOD.

    We are wondering what version of software is needed for use on our server. Its only one server. Nothing elaborate. We were hit with a ransomware in December and are looking for anti-exploit and anti-ransom software that functions but doesn't have the corporate level price and subscriptions.

    mbst-grab-results.zip

  2. Hello. I had a Windows update on FRI 1-10-2020.  Over this weekend my server rebooted after BSOD. Over 12 times since Fri.  BSOD points to MWAC.SYS. IRQL not less or equal. 

    Windows cumulative update windows server 2019 (1809) x64 based --      (KB4530715)

    We Shut off service to keep business running for the day will try reinstall malwarebytes tonight. 

    I have extracted the dump file text and memory dump text. 

    From what i gather  windows and malwarebytes are fighting for file control due to file protection, and system protection.

    I have not been able to test but an uninstall and reinstall maybe the fix. Basically resetting permissions after Windows does what ever it thinks it needed to do. 

    BSOD MalwareBytes .jpg

    Capture WinUpdate1.JPG

    event viewer MBAM Kernal.JPG

    Dumpfile text .txt MemoryDMP.txt

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.