WRkrn.sys causes blue screen failure

Show first post

67 replies

Userlevel 7
Hi NancyProut
Welcome to the Community Forums.
You say it won't even start up; can you explain exactly what occurs when you try to start it?  WHat version of Windows are you running on the laptop? Do you manage to start it and it BSODs?  
Because if that is the case and you have a WIndows Recovery disc then you should be able to use that to boot up and then have a go a repairing WIndows so that you can boot or at the very least booting up into Safe Mode, after which you should be able to uninstall WSA, and then see if you can boot normally.
Regards, Baldrick
Userlevel 7
This most likely because it affects a minute number of users and is most likely due to an issue on those user's systems.  My suggestion is to take the advice of a couple of posts above your and do complete uninstall/clean reinstall of WSA and that will most likely resolve the local issue.
Of course, if the very small number sof user affected cannot get WSA to work on their systems after that then they should indeed look for and find a suitable alternative to WSA (I personally have had similar problems with other major anti virus/anti malware names to be mentioned...which has meant that I cannot use them).
Regards, Baldrick 
after some years my post is still populated and, most important thing, this issue is still there....ridiculous.
There is a solution, DO NOT use this product anymore
I just got the WRkrn.sys blue screen of death.  And I do mean death!  It crashed my laptop and it won't even start up now. :-(
I don't think it can be fixed.  It will probably have to go to the computer scrapyard now.  If anyone knows how to start up a dead computer I'm all ears.
Userlevel 7
^ The above may work, however if you delete the WRKrn.sys driver the service will still try to run and it may cause a boot failure. 
Just had to look this up for a client. Didnt find a solution so had to improvise.
It has a simple enough solution but does require you to have a boot device like a rescue DVD. Just something to let you get to the file system. If you do not have a boot DVD made or something use another computer and simple create one.
Once you can get to the file system navigate to the file and delete it. Restart the pc and your good to go. make sure to COMPLETELY remove Webroot then reinstall it. This last step is critical and do not miss it.
Whole thing takes maybe 10mins.
Good luck
Userlevel 7
Hi cracker
Welcome to the Community Forums.
Sorry to hear that you are experiencing this issue.  One course of action, and probably the most appropriate unless you are computer savvy/happy to tweak your system, is to follow MikeR's advice ealier in the thread (actually Post 2), and Open a Support Ticket  and let the Support Team deal with it for you.
Following on from that may I ask as to why you would be running Windows Repair?  Can I ask as to whether you may have uninstalled WSA and following that you have been getting BSODs (Blue Screen of Death)?
The reason I ask is because this has been seen before and is due to WRkrn.sys being left over after an uninstall (especailly if done with a 3rd party uninstaller rather than the Add/Removew Program option built into Windows.
If the above is true, and only if the above is the case in all aspects, i.e, uninstall  & BSODs, etc., then what I suspect that you need to do is to delete the left over WRkrn.sys....and as we are talking about dabbling in the System File area YOU NEED TO BE CONFIDENT ABOUT YOU TECHNICAL SKILLS before doing so.
If confident you most probably need to boot into Safe Mode WITHOUT Networking, navigate to the location of the file (this is usually C:WindowsSystem32driversWRkrn.sys) and RENAME it to something like WRkrnOLD.sys (always better than a straight delete), and then reboot.
That should now mean that the fiel won't be found at boot and so not cause the issue.
But again, I caution that this is just based on my assumptions that you may have uninstalled WSA and following that you have been getting BSODs.  If that is not correct or you have any dubts then please go the Support Ticket route, as it is the safest.
Please do post back to let us know what you decide/opt to do.
Regards, Baldrick
wrkrn.sys is the file nominated by my startup repair as corrupt. Startup reppair cannot fix this fault, so I can't use my computer at the moment. 
I have the same problem too. Twice already seen this BSOD. It seems that I have at least a third user with this problem.
Userlevel 7
I'll add just a touch to this.
Firstly, you normally should not need to reformat the system.  If something is crashing, remediating the thing that is crashing is much more effective than wiping out everything.
Secondly, utilities that try to determine what crashed are not usually fully correct.  As a good example, one of my prior machines had horrible trouble with a security driver, crashing multiple times per day.  The security driver was fine though, it turned out that the RAM (Computer memory) was bad and had to be replaced.  The driver in question was just the lucky thing stuck at the bad part of the memory space.
Now that we have you in the correct support system, things should go much better for getting solutions to the problem.  Mike will be able to help you out from there.
Userlevel 7
Hey saintshaka,
Thank you for opening a support ticket. I just found the ticket you submitted today and I have replied with instructions for you to follow. This will allow us to gather logs so we may research the mini-dumps and crashes you have experienced.
However, if you would like to reformat your notebook as you have mentioned, you may use this  to reinstall the latest SecureAnywhere software.
Thank you,
thanks a lot. Im gonna wait another wekk, then i will format the whole notebook and put the os back...
Userlevel 7
Hello saintshaka,
I am sorry that you are still experiencing this issue and we do want to resolve it for you!
Kit and I wanted to find where you had submitted your ticket before troubleshooting the issue. I had previously given you instructions on how to open a support ticket for our newer software. Based on your last response I see that you had opened a support ticket under our old system, this is why you received an automated response. 
You may be experiencing this issue because of remnants of the older software. Please open a support ticket here so that we can help you remove the older software and get the necessary logs to troubleshoot further. Use the same email address you registered your account under.
Thank you,
how long is it gonna take before somebody from the staff explains me how to overcome this issue cuased by wrkrn.sys ?
do i have to uninstall the whole os and put it back cleaned?
this is what i received from the staff:

You have submitted a trouble ticket for Webroot’s 2011 edition (or older) product line. We would like to inform you that if you are currently experiencing an issue with Spy Sweeper, Webroot AntiVirus, Webroot Internet Security Essentials, or Webroot Internet Security Complete, you can now upgrade to the 2012 version of these products for free. Our new product line is called Webroot SecureAnywhere, and is already getting rave reviews. 

If you are currently using a Webroot SecureAnywhere product and you require assistance, please submit a support request using the Help and Support link in the software or on our website at

If you submitted this ticket regarding Window Washer, or if upgrading to the new Webroot SecureAnywhere product is not a solution for you, skip the instructions below and reply to this message for further assistance.

In order to upgrade to Webroot SecureAnywhere, follow the steps below. Keep in mind that this new product version runs differently, so any previous issues you have experienced may be resolved. For more information about the new product line, see:

-- -- -- -- -- -- -- -- 

The following instructions will guide you through the process of upgrading from the 2011 edition (or older) Webroot Security software to the new Webroot SecureAnywhere 2012 version. 

** Note: If you currently have the Beta or Trial version of Webroot SecureAnywhere 2012 installed on your computer, please uninstall it before following these instructions. To uninstall, navigate to Start > Programs > Webroot SecureAnywhere > Tools > Uninstall Webroot.

To upgrade to the Webroot SecureAnywhere 2012 software: 

1. Ensure that you are connected to the Internet.

2. Open your 2011 or older Webroot Security product and click “Check for Updates”. 

In Spy Sweeper, this button is available on the main screen and under Options > Update > Check for Updates. 
In the 2011 version of Webroot Security software, you can check for updates by opening the main interface, then navigating to Settings > Updates > Check for updates now.

**Note: We recommend that you use the “Check for Updates” method to download the Webroot SecureAnywhere software. If you are unable to use this method because your previous Webroot Security software is not currently installed or is not functioning as desired, skip the following steps and reply to this message. Be sure to include why you are unable to use the Check for Updates button to upgrade in your reply.

3. When you click “Check for Updates”, a web page appears with download instructions for Webroot SecureAnywhere. Click the button labeled “Install Free Update”. This action initiates the download process. When prompted, save the installer file to your desktop.

4. Locate the “wsainstall” file on your desktop. Double-click it to begin the installation.

5. The installer searches for currently installed legacy Webroot Security software on your computer. If found, a “Thank you for upgrading!” dialog appears. If this dialog appears, click Continue.

6. When the installer launches, it searches for previously used keycodes on your system. If it locates a keycode, the installer displays the keycode in the installation window. If the keycode is correct, click “Agree & Install” to proceed. If no keycode, or the wrong keycode, is displayed, enter the correct one before clicking “Agree & Install”.

**Note: While performing this upgrade to Webroot SecureAnywhere, you may receive an informational pop-up message (containing a blue circular icon) from the 2011 version of the software. The message reads “Product Update Complete” and provides two options: “Restart Now” and “Restart Later”. DO NOT select “Restart Now”. This can result in an incomplete or damaged upgrade to the new Webroot SecureAnywhere software. Be sure to select “Restart Later”. (A restart is not necessary to complete installation of SecureAnywhere.) If you choose “Restart Now” unintentionally, skip the steps below and reply to this message with this information.

7. After clicking “Agree & Install”, the keycode is validated and the installer searches for and applies updates. You may be provided a new keycode during this process. Be sure to use this new keycode for all future installations.

The installation process itself takes a matter of seconds, and an initial system scan runs upon completion. Please do not cancel this initial scan; it will only take a few minutes.

8. Once the initial scan is complete, the Webroot SecureAnywhere software is fully installed and protecting your system. The Webroot SecureAnywhere user interface will appear for you to explore. To close it, simply click the “X” at the top right corner.

-- -- -- -- -- -- -- -- 

We hope you find this information helpful. Once Webroot SecureAnywhere has been installed, it is not recommended that your reply back to this ticket since this ticketing system is dedicated to our previous 2011 edition and older product lines. Rather we recommend you visit our new self-help, user guides, FAQs and other support options, including the ability to start a conversation with us in our new support ticket/conversation interface, available to you at any time at:

Thank you,

The Webroot Technical Support Team
Now do you think there is something tied up with what i reported above with the minidump of the software WHOCRASHED?
Userlevel 7
Did you receive that in an email, or did you receive an email saying there was a reply to your ticket and to log in to the support system to view it?  If it was the former, then it's an autoresponse that tries to guess based on what you write and the ticket was potentially not viewed yet.  The response time can be up to 72 business hours officially.  Normally it isn't, but i do know that support was changing floors in the building at the end of last week, so  it slowed things down a touch.
I am very disappointed. I opened the ticket and i reported what you read above in this topic, but i received an useless email:
      To manage your subscriptions or to change your subscription options, click here.
If this link doesn't work:
  1. Log on to Webroot Community.
  2. Click My Profile.
  3. Click the Subscriptions & Bookmarks tab.
  4. Change your settings and click Save Changes.
Thanks for being a Webroot Community member.
Your Webroot Community Team
well i dont know how to overcome this problem and nobody of the staff seems to be able to help me, even though i bought several licenses...
Userlevel 7
Hey saintshaka,
Welcome to the Community and thank you for the detailed post.
I would like you to open a support ticket so that we may gather specific information about this minidump. Please use the email address your product may be registered under as well as any keycodes for your product when you open the ticket. You can also copy and paste the information on the minidump that you provided below.
Thank you!