~fhusson

Cisco AnyConnect, BSOD on Windows 10

The issue

Today, I had 2-3 random BSOD on my computer !

  • Memory check : ok
  • Hardisk check : ok
  • Windows update : ok

The (Mini) Dump

You can find them in the folder %SystemRoot%\Minidump more information

21/04/2017  14:26           922 844 042117-6109-01.dmp
28/04/2017  17:43           922 836 042817-3296-01.dmp
28/04/2017  10:32           922 868 042817-9765-01.dmp
               3 file(s)        2 768 548 bytes

Yeah I have 3 of them !

Windows Driver Kit (WDK) for Windows 10

I have just installed the wdsksetup.exe (WDK for Windows 10, version 1703) found on the Microsoft Windows Driver Kit page

Dump Check

After the WDK install you can find dumpchk.exe and some other tools in the folder C:\Program Files (x86)\Windows Kits\10\Debuggers\x64>

It’s time to check the dumps !

  • dumpchk.exe 042117-6109-01.dmp

Probably caused by : acsock64.sys ( acsock64+c446 )

  • dumpchk.exe 042817-3296-01.dmp

Probably caused by : ntoskrnl.wrong.symbols.exe ( nt_wrong_symbols!58F6FD4788A000 )

  • dumpchk.exe 042817-9765-01.dmp

Probably caused by : ntoskrnl.wrong.symbols.exe ( nt_wrong_symbols!58F6FD4788A000 )

Cisco AnyConnect the culprit

I have found the driver acsock64.sys in the folder C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client it’s the “Cisco AnyConnect Kernel Driver Framework Socket Layer Interceptor” and I had the blue screen when I was on the VPN ! and when I look on the web I am not alone :-) LeinahtanwcDec on tomshardware !

I had the Cisco AnyConnect v3.1.11004, on the Cisco website we can look at the Changelog

Caveats Resolved by AnyConnect 3.1.14018:

Identifier Component Headline
CSCuy01698 vpn BSOD on Windows 8.1 and Windows 10

\o/

The solution

Not so quick !

I can’t download the latest client on the Cisco website :(

To Download this software, you must Log In and have a valid service contract associated to your Cisco.com profile.

I must ask my company support/network team to update the client on the portal …

Discuss on Twitter