Tag Archives: leak

Mrxsmb20.sys – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1, Windows 7 SP1 and Windows Small Business Server 2011 (SBS 2011)

Mrxsmb20.sys – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1, Windows 7 SP1 and Windows Small Business Server 2011 (SBS 2011)

09-Apr-2015 – 6.1.7601.23031 – Mrxsmb20.sys – x86/x64 – https://support.microsoft.com/en-us/kb/3054251 – Stop Error in Rdbss.sys and unsaved documents in Windows 7 SP1 or Windows Server 2008 R2 SP1

25-Sep-2014 – 6.1.7601.22819 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/3002297 – The SMB Redirector may hang when the SMB protocol is used in Windows 7 SP1 or Windows 8.1

25-Sep-2014 – 6.1.7601.22819 – Mrxsmb20.sys – x86/x64 – https://support.microsoft.com/en-us/kb/3002286 – Delay in accessing a file server when a Windows 7-based computer connects to the file server

25-Jan-2013 – 6.1.7601.22231 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2807716 – Error message when you try to map a drive to a network share in Windows 7 or Windows Server 2008 R2

01-Nov-2012 – 6.1.7601.22149 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2778834 – File becomes corrupted when you try to overwrite the file while it is opened by another user on a computer that is running Windows 7 or Windows Server 2008 R2

01-Nov-2012 – 6.1.7601.17988 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2778834 – File becomes corrupted when you try to overwrite the file while it is opened by another user on a computer that is running Windows 7 or Windows Server 2008 R2

12-Oct-2012 – 6.1.7601.22133 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2769790 – File that a user adds to a remote folder is not displayed in Windows Explorer on a computer that is running Windows 7 or Windows Server 2008 R2

09-Oct-2012 – 6.1.7601.22130 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2739674 – You cannot connect to remote computers by using the SMB protocol on a computer that is running Windows 7 or Windows Server 2008 R2

09-Oct-2012 – 6.1.7601.17970 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2739674 – You cannot connect to remote computers by using the SMB protocol on a computer that is running Windows 7 or Windows Server 2008 R2

04-Apr-2012 – 6.1.7601.21957 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2559767 – File corruption occurs when you perform file operations on a file server that is running Windows 7 or Windows Server 2008 R2

24-Nov-2011 – 6.1.7601.21866 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2646563 – SMB2 directory cache is not updated correctly if a file is deleted in Windows 7 or in Windows Server 2008 R2

22-Nov-2011 – 6.1.7601.21864 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2628582 – “STATUS_OBJECT_NAME_NOT_FOUND” error message when you open a newly-created file in a shared folder in Windows 7 or in Windows Server 2008 R2

17-Sep-2011 – 6.1.7601.21822 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2618096 – Data corruption when one user on a computer that is running Windows 7 or Windows Server 2008 R2 updates a shared file that is open on multiple computers by using SMB Version 2

15-Sep-2011 – 6.1.7601.21819 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2612966 – Paged pool memory leak when you access some shared files in Windows 7 or in Windows Server 2008 R2

15-Jul-2011 – 6.1.7601.21771 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2550581 – When you try to access files on a network share, Windows Explorer stops responding on a computer that is running Windows 7, Windows Server 2008 R2, Windows Vista or Windows Server 2008

27-Apr-2011 – 6.1.7601.21714 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2536276 – MS11-043: Vulnerability in SMB Client could allow remote code execution: June 14, 2011

23-Feb-2011 – 6.1.7601.21666 – Mrxsmb20.sys – x86/x64 – http://support.microsoft.com/kb/2511455 – MS11-019: Vulnerabilities in SMB Client could allow remote code execution: April 12, 2011

Mrxsmb10.sys – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1, Windows 7 SP1 and Windows Small Business Server 2011 (SBS 2011)

Mrxsmb10.sys – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1, Windows 7 SP1 and Windows Small Business Server 2011 (SBS 2011)

28-Aug-2014 – 6.1.7601.22786 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2995054 – “400 Bad Request” error when you send a message that contains a lowercase “get” to the Gateway

15-Feb-2014 – 6.1.7601.22603 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/980380 – Windows stops responding if SMB v1 protocol is used to access shared files

28-Aug-2013 – 6.1.7601.22435 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2883703 – “0xC0000203” error when you try to access a DFS share that is located on a Windows Server 2003 R2 or earlier version of Windows-based computer from a Windows 7 SP1 or Windows Server 2008 R2 SP1-based computer

12-Jul-2013 – 6.1.7601.22382 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2728738 – You experience a long logon time when you try to log on to a Windows 7-based or a Windows Server 2008 R2-based client computer that uses roaming profiles

05-Jul-2013 – 6.1.7601.22377 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2869302 – FIX: Slow-link transitions fail in Windows 7 SP1 or Windows Server 2008 R2 SP1

28-Jun-2012 – 6.1.7601.22033 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2727324 – Computer stops responding after you connect to an SMB 1 server in Windows 7 or in Windows Server 2008 R2

15-Sep-2011 – 6.1.7601.21819 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2612966 – Paged pool memory leak when you access some shared files in Windows 7 or in Windows Server 2008 R2

08-Sep-2011 – 6.1.7601.21813 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2601014 – You are prompted for credentials again when you try to access a network share on a device that is running Samba from a Windows 7-based or Windows Server 2008 R2-based computer

02-Aug-2011 – 6.1.7601.21782 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2560452 – You may be unable to access SMB shared files or printers on a remote server in Windows 7 or in Windows Server 2008 R2

09-Jul-2011 – 6.1.7601.21767 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2536276 – MS11-043: Vulnerability in SMB Client could allow remote code execution: June 14, 2011

23-Feb-2011 – 6.1.7601.21666 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2511455 – MS11-019: Vulnerabilities in SMB Client could allow remote code execution: April 12, 2011

18-Dec-2010 – 6.1.7601.21624 – Mrxsmb10.sys – x86/x64 – http://support.microsoft.com/kb/2444328 – You cannot access shared files or shared printers in Windows 7 or in Windows Server 2008 R2

Netio.sys – Pre Service Pack 3 Revision History for Windows Server 2008 SP2, Windows Vista SP2 and Windows Small Business Server 2008 (SBS 2008)

Netio.sys – Pre Service Pack 3 Revision History for Windows Server 2008 SP2, Windows Vista SP2 and Windows Small Business Server 2008 (SBS 2008)

11-May-2012 – 6.0.6002.22856 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/2712746 – “0x00000019” Stop error when you run an SNMP application on a computer that is running Windows Vista or Windows Server 2008

12-Jan-2012 – 6.0.6002.22776 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/2664888 – Computer stops responding when you run an application that uses the Windows Filtering Platform API in Windows 7, Windows Server 2008 R2, Windows Server 2008, or Windows Vista

05-Apr-2010 – 6.0.6002.22377 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/981889 – A Windows Filtering Platform (WFP) driver hotfix rollup package is available for Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2

22-Mar-2010 – 6.0.6002.22369 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/979223 – A nonpaged pool memory leak occurs when you use a WFP callout driver in Windows Vista, Windows 7, Windows Server 2008, or in Windows Server 2008 R2

23-Oct-2009 – 6.0.6002.22250 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/976759 – WFP drivers may cause a failure to disconnect the RDP connection to a multiprocessor computer that is running Windows Vista, Windows Server 2008, windows 7 or Windows Server 2008 R2

[RESOLVED] Your computer may stop responding when you run an application, Software Firewall or anti-virus package that uses the Windows Filtering Platform API

Your computer may stop responding when you run an application, Software Firewall or anti-virus package that uses the Windows Filtering Platform API

This issue affects the following operating systems:

  • Windows 7 – Service Pack 1
  • Windows Small Business Server 2011 – Service Pack 1
  • Windows SBS 2011 – Service Pack 1
  • Windows Server 2008 R2 – Service Pack 1
  • Windows Small Business Server 2008 – Service Pack 2
  • Windows SBS 2008 – Service Pack 2
  • Windows Server 2008 – Service Pack 2
  • Windows Vista – Service Pack 2

In this situation, the computer may perform slowly or stop responding and network activity may be affected.  You find that a system restart may resolve this issue in some instances.

This issue occurs because the FwpsStreamInjectAsync0 function causes the interrupt request level (IRQL) to leak.  You can resolve the issue by updating to the latest Netio.sys driver.  The download link can be found within Microsoft KB 2664888 http://support.microsoft.com/kb/2664888

 

Windows Filtering Platform (WFP) General Description

Windows Filtering Platform (WFP) is a set of API and system services that provide a platform for creating network filtering applications. The WFP API allows developers to write code that interacts with the packet processing that takes place at several layers in the networking stack of the operating system. Network data can be filtered and also modified before it reaches its destination.

By providing a simpler development platform, WFP is designed to replace  previous packet filtering technologies such as Transport Driver Interface (TDI)  filters, Network Driver Interface Specification (NDIS) filters, and Winsock Layered Service Providers (LSP). Starting in Windows Server 2008 and Windows Vista, the firewall hook and the filter hook drivers  are not available; applications that were using these drivers should use WFP instead.

With the WFP API, developers can implement firewalls, intrusion detection systems, antivirus programs, network monitoring tools, and parental controls. WFP integrates with and provides support for firewall features such as authenticated communication and dynamic firewall configuration based on applications’ use of sockets API (application-based policy). WFP also provides infrastructure for  IPsec policy management, change notifications, network diagnostics, and stateful filtering.

More info can be found here http://msdn.microsoft.com/en-us/library/windows/desktop/aa366510(v=vs.85).aspx