+34 900 840 407
support@cytomic.ai

BSOD caused by NNSPRV.sys

Related Products_
  • Advanced EPDR
  • Advanced EDR
Issue Status_

Open

Symptoms_

BSoD caused by endpoint protection network interception driver (NNSPRV.sys) due to a TCP misalignment when requesting a header size from a network packet.

Affected protection versions:

  • v8.00.25.0001
  • v8.00.25.0002

To see your Advanced product version, see this article.

Solution_

A hotfix is available to resolve this issue.
To apply the hotfix on the affected endpoint:

  1. Download and save this hotfix file to the endpoint: hf-wgua6572-nnsprv-tcpheaderincrease.exe
  2. Double-click the downloaded file. The hotfix does not require a restart of the endpoint.
    However, under certain circumstances, you may be prompted to restart the hotfix to be fully applied. If you cannot restart the computer right away, select No when prompted.

Note: To install the unattended or silent version of the hotfix, click here. The hotfix is applied after the next system restart.

File Details 

The hotfix updates the following files:

File name Location File Version Modified Date Hotfix to be included in future versions?
NNSPRV.sys C:\Windows\System32\Drivers\NNSPRV.sys 7.0.0.434 November 27th, 2025 Yes

To verify that the hotfix was successful, check the file version in the File Details section, or verify these values in the Windows Registry:

32 bits Architecture 64 bits Architecture
Registry Key Value Registry Key Value
HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup\Hotfix history\HF_NNSPRV_TCPheaderIncrease Revision [REG_DWORD]
1
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_NNSPRV_TCPheaderIncrease Revision [REG_DWORD]
1
HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup\Hotfix history\HF_NNSPRV_TCPheaderIncrease Result [REG_DWORD]
0 = Success
1 = Not Applied
2 = Error
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_NNSPRV_TCPheaderIncrease Result [REG_DWORD]
0 = Success
1 = Not Applied
2 = Error