Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 21 replies
  • Answers 2 answers
  • Subscribers 6 subscribers
  • Views 57034 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos 10 swi_filter.dll crash

jkillebrew

We just deployed SAV 10 to a small group of users today and immediately complaints started rolling in regarding Firefox and IE crashing, or at least in IE just a tab crashing. I am able to consistently recreate the problem on Firefox and multiple versions of IE on various Windows 32 adn 64 bit platforms. The most consistent way to make it crash is to try look at the web interface for our Cisco WLAN controller and view the properties of a wireless AP. (I know that may seem obscure or mean nothing to most of you). All crashes seems to be on pages with a lot of javascript or other fancy stuff, so is pretty much a deal breaker for us. Rolling back to 9.7 now.

The windows application log shows the following:

Faulting application name: iexplore.exe, version: 9.0.8112.16421, time stamp: 0x4d76255d

Faulting module name: swi_filter.dll, version: 3.1.6.0, time stamp: 0x4eb90ba4

Exception code: 0xc0000005

Fault offset: 0x0001c120

Faulting process id: 0x1038

Faulting application start time: 0x01ccbf993dcaf516

Faulting application path: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Faulting module path: C:\ProgramData\Sophos\Web Intelligence\swi_filter.dll

and then:

Fault bucket 2703348986, type 1

Event Name: APPCRASH

Response: Not available

Cab Id: 0

Problem signature:

P1: iexplore.exe

P2: 9.0.8112.16421

P3: 4d76255d

P4: swi_filter.dll

P5: 3.1.6.0

P6: 4eb90ba4

P7: c0000005

P8: 0001c120

P9:

P10:

:20099


This thread was automatically locked due to age.
Parents
  • 0

    Similar experience this morning on a server 2008 machine trying to access an internal site. I had to disable the web control service in order to restore access in our production environment. I am currently unable to reproduce in my test environment, but the site that was experiencing the error simply will not open on my test machine with the web control services enabled. It never even times out, just sits there "loading" forever.

    Log Name:      Application
    Source:        Application Error
    Date:          12/21/2011 9:56:26 AM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      xen-app604.wataugamc.org
    Description:
    Faulting application name: iexplore.exe, version: 8.0.7600.16869, time stamp: 0x4e4f21db
    Faulting module name: swi_filter.dll, version: 3.1.6.0, time stamp: 0x4eb90ba4
    Exception code: 0xc0000005
    Fault offset: 0x0001c120
    Faulting process id: 0x3010
    Faulting application start time: 0x01ccbff05a0707f3
    Faulting application path: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Faulting module path: C:\ProgramData\Sophos\Web Intelligence\swi_filter.dll
    Report Id: f4375ec5-2be3-11e1-885a-005056895402
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2011-12-21T14:56:26.000000000Z" />
        <EventRecordID>560774</EventRecordID>
        <Channel>Application</Channel>
        <Computer>xen-app604.wataugamc.org</Computer>
        <Security />
      </System>
      <EventData>
        <Data>iexplore.exe</Data>
        <Data>8.0.7600.16869</Data>
        <Data>4e4f21db</Data>
        <Data>swi_filter.dll</Data>
        <Data>3.1.6.0</Data>
        <Data>4eb90ba4</Data>
        <Data>c0000005</Data>
        <Data>0001c120</Data>
        <Data>3010</Data>
        <Data>01ccbff05a0707f3</Data>
        <Data>C:\Program Files (x86)\Internet Explorer\iexplore.exe</Data>
        <Data>C:\ProgramData\Sophos\Web Intelligence\swi_filter.dll</Data>
        <Data>f4375ec5-2be3-11e1-885a-005056895402</Data>
      </EventData>
    </Event>

    :20115
Reply
  • 0

    Similar experience this morning on a server 2008 machine trying to access an internal site. I had to disable the web control service in order to restore access in our production environment. I am currently unable to reproduce in my test environment, but the site that was experiencing the error simply will not open on my test machine with the web control services enabled. It never even times out, just sits there "loading" forever.

    Log Name:      Application
    Source:        Application Error
    Date:          12/21/2011 9:56:26 AM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      xen-app604.wataugamc.org
    Description:
    Faulting application name: iexplore.exe, version: 8.0.7600.16869, time stamp: 0x4e4f21db
    Faulting module name: swi_filter.dll, version: 3.1.6.0, time stamp: 0x4eb90ba4
    Exception code: 0xc0000005
    Fault offset: 0x0001c120
    Faulting process id: 0x3010
    Faulting application start time: 0x01ccbff05a0707f3
    Faulting application path: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Faulting module path: C:\ProgramData\Sophos\Web Intelligence\swi_filter.dll
    Report Id: f4375ec5-2be3-11e1-885a-005056895402
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2011-12-21T14:56:26.000000000Z" />
        <EventRecordID>560774</EventRecordID>
        <Channel>Application</Channel>
        <Computer>xen-app604.wataugamc.org</Computer>
        <Security />
      </System>
      <EventData>
        <Data>iexplore.exe</Data>
        <Data>8.0.7600.16869</Data>
        <Data>4e4f21db</Data>
        <Data>swi_filter.dll</Data>
        <Data>3.1.6.0</Data>
        <Data>4eb90ba4</Data>
        <Data>c0000005</Data>
        <Data>0001c120</Data>
        <Data>3010</Data>
        <Data>01ccbff05a0707f3</Data>
        <Data>C:\Program Files (x86)\Internet Explorer\iexplore.exe</Data>
        <Data>C:\ProgramData\Sophos\Web Intelligence\swi_filter.dll</Data>
        <Data>f4375ec5-2be3-11e1-885a-005056895402</Data>
      </EventData>
    </Event>

    :20115
Children
No Data
Unfiltered HTML