redsoxfan Posted December 5, 2018 ID:1285137 Share Posted December 5, 2018 Over the last several weeks, we've seen almost 20 laptops suffer BSODs caused by farflt.sys. I see from the forums that it has been an issue in the past. Is there a fix planned for this? Link to post Share on other sites More sharing options...
jlans89 Posted December 5, 2018 ID:1285141 Share Posted December 5, 2018 @redsoxfan Looks like our Engineers are still currently looking into this issue. I will check with our Dev if they have an ETA when this issue will be resolved. Link to post Share on other sites More sharing options...
jlans89 Posted December 5, 2018 ID:1285146 Share Posted December 5, 2018 @redsoxfan I will open up a case and contact you via email regarding this issue. Link to post Share on other sites More sharing options...
olivern Posted December 23, 2018 ID:1288694 Share Posted December 23, 2018 I also just got a BSOD that identified farflt.sys as the cause. Link to post Share on other sites More sharing options...
RonB7G Posted January 8, 2019 ID:1291417 Share Posted January 8, 2019 Hi folks, I also had a series of BSODs on a Win 2008 Std R2 server caused by farflt.sys. I did a Malwarebytes update a few days prior to the BSOD. Had to work with Microsoft to identify the problem. To resolve the issue, I completely uninstalled Malwarebytes and rebooted. I had this software on five servers, I have removed it from all and am looking at alternatives. Can't afford to have a server down for almost a day due to a faulty software package. (And this is not the first time Malwarebytes caused issues - about a year or so ago, one of their updates caused all sorts of problems - had to turn off the Web Protection module to get around that issue). Two strikes is enough to get me out of Malwarebytes. If anyone is interested, I can attach the analysis of the memory.dmp file that was produced by Microsoft. Link to post Share on other sites More sharing options...
djacobson Posted January 10, 2019 ID:1291827 Share Posted January 10, 2019 Farflt.sys is the driver for the Anti-Ransomware / Behavior Protection engine. Restarting the endpoint will release any threads which may be stuck. Disabling the option can help avoid encountering these while the new cause for this is investigated. Consider as well, many server's need extra configuration of exclusions or what real-time protections are able to be used, this is based on what roles a server may provide. Link to post Share on other sites More sharing options...
RonB7G Posted January 15, 2019 ID:1292672 Share Posted January 15, 2019 Thanks for the detailed information, djacobson. I hope the issue gets resolved soon for all other users. Malwarebytes worked well for me in the past, but these serious issues lead me to make the decision to look at another product. Link to post Share on other sites More sharing options...
redsoxfan Posted March 5, 2019 Author ID:1302215 Share Posted March 5, 2019 We are still seeing BSODs caused by farflt.sys. It's not as frequent, but we're still seeing it. Has the issue been fixed? Link to post Share on other sites More sharing options...
djacobson Posted March 5, 2019 ID:1302227 Share Posted March 5, 2019 @redsoxfan what number is your Malwarebytes plugin for that machine in add/remove programs, 3.6.1 or 3.7.1? Link to post Share on other sites More sharing options...
DragonMaster Posted March 11, 2019 ID:1303221 Share Posted March 11, 2019 Quote I too have been getting the BSOD on "farflt.sys" and also have encountered BSOD on "System Service Exception", "Kmode-Exception not handled" and "Registry Filter Driver Exception". Each reboot can produce anyone of these errors and the BSOD. Link to post Share on other sites More sharing options...
redsoxfan Posted March 12, 2019 Author ID:1303443 Share Posted March 12, 2019 Our version numbers are all over the place, 3.5, 3.6 and 3.7. How does the plugin get updated? Link to post Share on other sites More sharing options...
djacobson Posted March 13, 2019 ID:1303539 Share Posted March 13, 2019 Hi @redsoxfan, it is currently metered. The machine must be able to access and transfer over data from sirius.mwbsys.com. If you perform a new install, it will pull the latest right away with no meter right now. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now