Using two Windows Filtering Platform (WFP) drivers causes a computer to crash when the computer is running Windows Vista, Windows 7, or Windows Server 2008
You have a computer that is running Windows Vista, Windows 7, or Windows Server 2008. You install two third-party Windows Filtering Platform (WFP) callout drivers. In this scenario, the computer may crash and you receive a Stop error message on a blue screen when you use these drivers. Sometimes, this issue occurs before you log on to the computer.
Note WFP callout drivers are usually used in third-party antivirus and firewall programs.
This issue occurs because two WFP callout drivers are in a race condition. When one WFP callout driver tries to resume a packet, the other WFP callout driver tries to pend the packet.
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.
Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
Prerequisites
To apply this hotfix, you must be running one of the following operating systems:
Windows Vista Service Pack 1 (SP1)
Windows Vista Service Pack 2 (SP2)
Windows 7
Windows Server 2008
Windows Server 2008 Service Pack 2 (SP2)
For more information about how to obtain a Windows Vista service pack, click the following article number to view the article in the Microsoft Knowledge Base:
How to obtain the latest Windows Vista service pack
For more information about how to obtain a Windows Server 2008 service pack, click the following article number to view the article in the Microsoft Knowledge Base:
How to obtain the latest service pack for Windows Server 2008
Restart requirement
You must restart the computer after you apply this hotfix.
Hotfix replacement information
This hotfix does not replace a previously released hotfix.
File information
The global version of this hotfix package uses a Microsoft Windows Installer package to install the hotfix package. The dates and the times for these files are listed in Coordinated Universal Time (UTC) in the following table. When you view the file information, the date is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows Vista and Windows Server 2008 file information notes
Important Windows Vista hotfixes and Windows Server 2008 hotfixes are included in the same packages. However, only "Windows Vista" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows Vista" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
Collapse this tableExpand this table
Version
Product
SR_Level
Service branch
6.0.600
0
.
20xxx
Windows Vista
RTM
LDR
6.0.600
1
.
22xxx
Windows Vista and Windows Server 2008
SP1
LDR
6.0.600
2
.
22xxx
Windows Vista and Windows Server 2008
SP2
LDR
Service Pack 1 is integrated into the release version of Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000.xxxxxx version number.
The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008 and for Windows Vista" section. MUM files and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows Server 2008 and of Windows Vista
Collapse this tableExpand this table
File name
File version
File size
Date
Time
Platform
Tcpipreg.sys
6.0.6002.22319
31,232
22-Jan-2010
15:43
x86
Netio.sys
6.0.6001.22611
220,032
22-Jan-2010
22:16
x86
Bfe.dll
6.0.6001.22611
328,704
22-Jan-2010
18:40
x86
Fwpkclnt.sys
6.0.6001.22611
98,176
22-Jan-2010
22:16
x86
Fwpuclnt.dll
6.0.6001.22611
595,456
22-Jan-2010
18:42
x86
Ikeext.dll
6.0.6001.22611
438,272
22-Jan-2010
18:43
x86
Wfp.tmf
Not applicable
208,966
22-Jan-2010
16:48
Not applicable
Tcpip.sys
6.0.6001.22611
900,480
22-Jan-2010
22:15
x86
Tcpip.sys
6.0.6002.22319
909,696
22-Jan-2010
18:29
x86
For all supported x64-based versions of Windows Server 2008 and of Windows Vista
Collapse this tableExpand this table
File name
File version
File size
Date
Time
Platform
Tcpipreg.sys
6.0.6002.22319
40,448
22-Jan-2010
16:02
x64
Netio.sys
6.0.6001.22611
342,408
23-Jan-2010
00:04
x64
Bfe.dll
6.0.6001.22611
458,240
22-Jan-2010
18:39
x64
Fwpkclnt.sys
6.0.6001.22611
165,256
23-Jan-2010
00:04
x64
Fwpuclnt.dll
6.0.6001.22611
779,776
22-Jan-2010
18:40
x64
Ikeext.dll
6.0.6001.22611
454,656
22-Jan-2010
18:40
x64
Wfp.tmf
Not applicable
207,863
22-Jan-2010
16:34
Not applicable
Tcpip.sys
6.0.6001.22611
1,411,464
23-Jan-2010
00:04
x64
Tcpip.sys
6.0.6002.22319
1,421,184
22-Jan-2010
18:20
x64
For all supported IA-64-based versions of Windows Server 2008
Collapse this tableExpand this table
File name
File version
File size
Date
Time
Platform
Tcpipreg.sys
6.0.6002.22319
80,896
22-Jan-2010
15:51
IA-64
Netio.sys
6.0.6001.22611
638,344
22-Jan-2010
18:49
IA-64
Bfe.dll
6.0.6001.22611
781,312
22-Jan-2010
17:59
IA-64
Fwpkclnt.sys
6.0.6001.22611
261,000
22-Jan-2010
18:49
IA-64
Fwpuclnt.dll
6.0.6001.22611
1,122,304
22-Jan-2010
18:00
IA-64
Ikeext.dll
6.0.6001.22611
925,696
22-Jan-2010
18:01
IA-64
Wfp.tmf
Not applicable
207,769
22-Jan-2010
16:18
Not applicable
Tcpip.sys
6.0.6001.22611
2,937,736
22-Jan-2010
18:49
IA-64
Tcpip.sys
6.0.6002.22319
2,953,600
22-Jan-2010
18:13
IA-64
Windows 7 and Windows Server 2008 R2 file information
The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 7 and of Windows Server 2008 R2
Collapse this tableExpand this table
File name
File version
File size
Date
Time
Platform
Fwpkclnt.sys
6.1.7600.16385
187,472
14-Jul-2009
01:20
x86
Tcpip.sys
6.1.7600.20648
1,287,056
19-Feb-2010
08:00
x86
For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
Collapse this tableExpand this table
File name
File version
File size
Date
Time
Platform
Fwpkclnt.sys
6.1.7600.16385
288,336
14-Jul-2009
01:47
x64
Tcpip.sys
6.1.7600.20648
1,898,896
19-Feb-2010
08:11
x64
For all supported IA-64-based versions of Windows 7 and of Windows Server 2008 R2
Back to the top
