Jump to content

mwac.sys BSoD


Recommended Posts

Hello @Pani

Thank you for sending us the dump file.

We have a defect for the same and it should be fixed in the upcoming release.

I would recommend turning off Web Protection for now and installing Browser Guard : https://www.malwarebytes.com/browserguard/

Will let you know once we release the fix. 

Thank you for being a Malwarebytes Customer. 

Link to post
Share on other sites

A new version of Malwarebytes has just been released which includes fixes for several BSOD issues.  Details are available in this post.

To install the new version, open Malwarebytes and navigate to settings by clicking the small gear icon in the upper right, then click the Check for updates under the General tab and allow it to download and install the new version, restarting your system once it completes to ensure that the new components are loaded into memory.

Link to post
Share on other sites

  • 3 weeks later...
14 minutes ago, Sron said:

I've been getting the BSOD twice a day now for the last few days

I've installed the lasted version of Malwarebytes

I've added your Browser Guard and turned off your Web Protection

 

021321-21762-01.dmp 278.13 kB · 0 downloads

Thanks for the dump file.

Can you also please collect and upload as an attachment the diagnostic data using our MBST?

  • Download and run the Malwarebytes Support Tool
  • Accept the EULA and click Advanced tab on the left (not Start Repair)
  • Click the Gather Logs button, and once it completes, attach the zip file it creates on your desktop to your next reply
Link to post
Share on other sites

FWIW

Yesterday I ran Malwarebytes free version with the VPN for a few hours without any problems. Then I activated MB rebooted and made sure there were no files running associated with the VPN. My systems crashed within 30 minutes.

 

From WhoCrashed

On Mon 2/15/2021 1:10:21 AM GMT your computer crashed or a problem was reported
crash dump file: C:\Windows\MEMORY.DMP
This was probably caused by the following module: mwac.sys (mwac+0x15203)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF88001801BC0, 0xFFFFF8800C0E5DE0, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\drivers\mwac.sys
product: Malwarebytes Web Protection
company: Malwarebytes
description: Malwarebytes Web Protection
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: mwac.sys (Malwarebytes Web Protection, Malwarebytes).
Google query: mwac.sys Malwarebytes SYSTEM_SERVICE_EXCEPTION



On Mon 2/15/2021 1:10:21 AM GMT your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\021421-17284-01.dmp
This was probably caused by the following module: netio.sys (0xFFFFF88001801BC0)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF88001801BC0, 0xFFFFF8800C0E5DE0, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\drivers\netio.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Network I/O Subsystem
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.
 

mbst-grab-results.zip

Edited by AdvancedSetup
corrected font issue
Link to post
Share on other sites

Hello @Sron

Sorry to hear you are facing these BSOD's.

Can you please send the following dump files:

C:\Windows\Minidump\021221-28142-01.dmp
C:\Windows\Minidump\021221-15693-01.dmp 
C:\Windows\Minidump\021321-19968-01.dmp 
C:\Windows\Minidump\021321-21762-01.dmp 
C:\Windows\Minidump\021421-17284-01.dmp 
C:\Windows\MEMORY.DMP                   
 

Thank you

  • Thanks 1
Link to post
Share on other sites

  • Root Admin

If needed here are images for selecting a link in WeTransfer

 

Spoiler

 

Upload File(s) to WeTransfer:

  • Visit WeTransfer.com
  • Click on I Agree

    image.png
     
  • Click on Manage Cookies

    image.png
     
  • Uncheck all the cookies and other Ad settings

    image.png
     
  • Click the triple dots for more options

    image.png
     
  • Select the Link option "Get transfer link" - then click the Message and enter a message.

    image.png
     
  • Click on +Add Files - Browse to the location of the file and double-click on it or click once on it and select Open

    image.png
     
  • Click on Get a link to send the file and get the link to post back

    image.png
     
  • Once the transfer completes, click on Copy link

    image.png

     
  • Once you receive the Copied! message please save in notepad so you can post the link into your next reply

     

 

 

 

 

 

  • Thanks 1
Link to post
Share on other sites

I thought I'd mention that I only turn on the VPN about 10% of the time.

After each time I use the VPN I shut down my system, go about my life and later I turn the computer back on.

I've made sure that there are no files or drivers from the VPN that are still running and I still get the BSOD

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.