Crash everynight caused by mwac.sys driver

[Jackietools]

My PC is crashing once a night and Blue Screen iewer is showing MWAC.sys as driver causing it. Running Window 10 Pro and Malwarebytes Pro all up to date.

122119-11734-01.dmp    12/21/2019 6:55:48 AM    DRIVER_IRQL_NOT_LESS_OR_EQUAL    0x000000d1    00000000`00000008    00000000`00000002    00000000`00000000    fffff801`461c2cc3    mwac.sys    mwac.sys+2cc3                    x64    ntoskrnl.exe+1c14e0                    C:\WINDOWS\Minidump\122119-11734-01.dmp    8    15    18362    1,347,336    12/21/2019 6:56:28 AM    

Showing a hardware driver, Been having problems with my mobo LAN driver last 2 weeks. It is a MSI
Model    Z270 GAMING M5 (MS-7A78) (U3E1). I already uninstalled and reinstalled Killer drivers. If any more dump info is needed for any suggestions please let me know. Thank You

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

1. Download Malwarebytes Support Tool
2. Once the file is downloaded, open your Downloads folder/location of the downloaded file
3. Double-click mb-support-X.X.X.XXXX.exe to run the program
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
4. Place a checkmark next to Accept License Agreement and click Next
5. You will be presented with a page stating, "Get Started!"
6. Click the Advanced tab on the left column
   
   
    
7. Click the Gather Logs button
   
   
    
8. A progress bar will appear and the program will proceed with getting logs from your computer
   
   
    
9. Upon completion, a file named mbst-grab-results.zip will be found on your Desktop. Click OK
   
   
    
10. Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:
    
       

Click "Reveal Hidden Contents" below for details on how to attach a file:
 

Spoiler

To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

 

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

 

[nikhils]

Hello @Jackietools

Can you please follow instructions in the following document and send us the logs: https://support.malwarebytes.com/docs/DOC-2396

Thank you.

[Jackietools]

Thanks but I accidentally deleted the dump but problem has not occurred last 2 nights. If it happens again Ill be sure to follow the instructions. For now Ill send in whatever files I have . Also when I ran tool got error windows stating internet disconnected then reconnected.

mbst-grab-results.zip

[nikhils]

Hello @Jackietools

Thank you for the logs. Without the full memory dumps it's a little hard to determine what is the exact issue.

If you encounter the issue next time please send us the memory.dmp file.

I'll try to see if I can reproduce it locally.

[Jackietools]

Understood. Thanks for the reply

[Jackietools]

Happened again last night.mbst-grab-results.zip

[Jackietools]

Which security app do you have. I have Windows 10 Ring app installed on my PC>

[1PW]

Hello @Scott_M and @Jackietools:

Please locate the Windows dump (.dmp) file that resulted from the reported BSoD.  That location is likely within the Windows sub-directory at:

C:\WINDOWS\Minidump\

The .dmp file is likely much too large to attach to a forum topic reply.  Instead, please upload to the free file hosting WeTransfer web site.  Once successfully uploaded to WeTransfer, please reply to this topic with the storage access' unique URL.  When received, that information will be forwarded to the appropriate Malwarebytes staffer/developer team for a thorough analysis.

Note: If the above filesize exceeds 2 GB, you will need to zip (compress) the .dmp file into a smaller archive before uploading.

Thank you for your patience and understanding.

cc: @nikhils

Edited December 25, 2019 by 1PW

[Jackietools]

https://we.tl/t-KMspYtYlXH

Two files from successive nights. Thanks

[nikhils]

Thank you for the dump files @Jackietools

Do you also have any full dump file by any chance? c:\windows\dmp

Also can you try this: Turn off the Web Protection layer in MB 4 and check if the BSOD is still happening.

I will submit these dumps to be reviewed.

[Jackietools]

Do not see that folder. Ill turn it off. Thanks. Ill get back to you.

[Jackietools]

Sorry cant find the setting to turn it off. Please advise. Thanks

[nikhils]

@Jackietools

Here you go:

[Jackietools]

First night with web protection off and no crash. If this is the problem I hope it can be resolved. I want the web protection!

[Jackietools]

Second night with web protection off. No crash Where do we go from here?

[nikhils]

Hello @Jackietools

Our developers have identified the cause of the BSOD and we are working to get a fix in as soon as possible.

For now I would recommend keeping the Web Protection off .

Another option is to uninstall MB 4.0.4 and revert back to the older 3.8.3 build. 

I will give you a heads up when we have a build with the fix available.

Thank you.

[Jackietools]

Thanks. Do you have link to 3.8.3?

[nikhils]

Hello @Jackietools

Here is the link for 3.8.3: https://downloads.malwarebytes.com/file/mb3-windows-legacy

[Jackietools]

It is no longer crashing but when can I update to latest version?

[nikhils]

Hello @Jackietools

I am glad to hear that you are not seeing the crash mwac.sys. A few other user's have also reported the same with the fix.

We should be getting the fix into the new build soon in the next 2 weeks.

I'll keep you posted when we officially release the fixed build.

Thank you for testing out the fix.

[Jackietools]

Prompting me to update. Not sure if you applied fix to this latest version. Thanks

[Porthos]

3 hours ago, Jackietools said:

Prompting me to update. Not sure if you applied fix to this latest version. Thanks

Do not think the fix is out yet. You can stop the notifications to update see the following 2 links.

The current KB articles will help you to set version 3.x from updating to 4.x for now

Constant upgrade notifications in Malwarebytes for Windows v3
https://support.malwarebytes.com/docs/DOC-2465

Turn off upgrade notifications in Malwarebytes for Windows v3
https://support.malwarebytes.com/docs/DOC-2142

 

[nikhils]

Hello @Jackietools

The fix has not yet been applied to the latest version which you can download.

We are planning to release the fix in an upcoming release soon.

Thank you.

[eliastim]

On 1/13/2020 at 6:10 PM, nikhils said:

Hello @Jackietools

The fix has not yet been applied to the latest version which you can download.

We are planning to release the fix in an upcoming release soon.

Thank you.

This problem also affects me, causing constant random BSOD, and occasionally disabling my Ethernet connection. I installed version 3.8 per suggestion and disabled the update notifications. Please post a message here when the fix is applied to an update.