Blue screen :( please help (log attached)

John, no payment is necessary - all advice is free of charge.

Please re-run DM Log Collector again, waiting for it to finish completely before uploading the new ZIP file that it creates on your desktop - the current ZIP file is incomplete of all the files need to analyse the BSOD and provide a solution.

1. Download the DM Log Collector application to your desktop by clicking the link below

DM Log Collector.exe

2. Run it by double-clicking the icon on your desktop, and follow the prompts.
3. Locate the .ZIP file that is created on your desktop, and upload it here in your next reply.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, fffffa800a9676a0, fffffa800a9676c0, 4020015}

*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a )

Followup: MachineOwner
---------

1: kd> !thread
GetPointerFromAddress: unable to read from fffff80003511000
THREAD fffffa800ba07200  Cid 0b74.9418  Teb: 000000007ef5c000 Win32Thread: 0000000000000000 RUNNING on processor 1
IRP List:
    Unable to read nt!_IRP @ fffffa8008955340
Not impersonating
GetUlongFromAddress: unable to read from fffff80003450ba8
Owning Process            fffffa8008383610       Image:         mbamservice.ex
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      9803393      
Context Switch Count      3092           IdealProcessor: 1             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x0000000000343d70
Stack Init fffff8800618fc70 Current fffff8800618ee80
Base fffff88006190000 Limit fffff8800618a000 Call 0
Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`0618f1e8 fffff800`0340ccae : 00000000`00000019 00000000`00000020 fffffa80`0a9676a0 fffffa80`0a9676c0 : nt!KeBugCheckEx
fffff880`0618f1f0 fffff880`01727d2d : 00000000`00000008 00000000`0000000c 00000000`676e7049 fffffa80`0952a11c : nt!ExDeferredFreePool+0x12da
fffff880`0618f2a0 fffff880`0140a066 : 00000000`00000000 fffff880`014060c3 00000000`00000000 fffffa80`0782ec70 : tcpip!IppInspectBuildHeaders+0x65d
fffff880`0618f580 fffff880`077e212d : 00000000`00000008 00000000`00000014 00000000`00000000 fffffa80`0b49f7e0 : fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+0x20a
fffff880`0618f620 00000000`00000008 : 00000000`00000014 00000000`00000000 fffffa80`0b49f7e0 fffffa80`0b49f7f4 : mwac+0x612d
fffff880`0618f628 00000000`00000014 : 00000000`00000000 fffffa80`0b49f7e0 fffffa80`0b49f7f4 fffffa80`00000011 : 0x8
fffff880`0618f630 00000000`00000000 : fffffa80`0b49f7e0 fffffa80`0b49f7f4 fffffa80`00000011 00000000`00000000 : 0x14

John, at first glance the Malwarebytes service seems to be the issue, but thats a red-herring. I think the problem lies with your ethernet/wifi adapter driver.

Please do the following:
1. Run Windows Update, make a note of all updates including Oprional Updates, that are offered and install then all.
2. In the Start Search bar, type MSINFO and double click the entry that appears.

Once MSINFO open, click File > Save As, and name it John.nfo, then upload that .nfo file here please.

Thats better - thanks John. Ignore the request for MSINFO - its in your new ZIP file, but please double check Windows Update.

You can ignore the MSINFO request John. Can you confirm there are no Windows Updates (incl. Optional Updates) available?

Please list them here too, so I can cross check with what I'm seeing in the .dmp files.