Loading...

Knowledge Center


Event ID: 5004, Could not contact Filter Driver. Error=0x2 : The system cannot find the file specified
Technical Articles ID:  KB56059
Last Modified:  08/13/2012
Rated:


Environment

McAfee VirusScan Enterprise  8.x

 

Problem

The following error is displayed in the Application Event Viewer:
Event id: 5004
Description: Could not contact Filter Driver. Error =0x2 : The system cannot find the file specified

Cause

Another loaded driver can interfere with communication between the McShield service and the mfehidk.sys driver.
 
If the driver is missing or a driver conflict exists, this prevents communication between McShield.exe (the On-Access Scanner service) and the McAfee file system filter driver.

Solution 1

Verify that the following filter driver files are present in C:\Windows\System32\Drivers
  • mfeavfk.sys
  • mfeapfk.sys
  • mfebopk.sys
  • mfehidk.sys
  • mfetdik.sys

If the filter driver files are not present, then uninstall and reinstall them:

  1. Click Start, Run, type cmd, and then click OK.
  2. From the command prompt, navigate to: C:\Program Files\McAfee\VirusScan Enterprise.
  3. To uninstall the driver, type the following and press ENTER:

    mfehidin -u mfeavfk.sys mfeapfk.sys mfebopk.sys mfehidk.sys mfetdik.sys

     
  4. To reinstall the driver, type the following and press ENTER:

    mfehidin.exe -i mfeavfk.sys mfeapfk.sys mfebopk.sys mfehidk.sys mfetdik.sys
     
If the filter driver files are present, ensure they are enabled in Device Manager:

  1. From the desktop, right-click My Computer and select Properties.
  2. Click the Hardware tab.
  3. Click Device Manager.
  4. Select View, Show Hidden devices.
  5. Expand Non-Plug and Play Drivers.
  6. For every McAfee Inc. entry, right-click the entry, select Properties, and from the drop-down menu, select Enable.
  7. When prompted Do you want to restart your computer now? click No.
  8. When all McAfee Inc. entries have been processed, close the Device Manager and restart your computer.
     

Solution 2

If the filter driver files are present and enabled, but the error (Event id : 5004) is still generated, uninstall and reinstall VSE.

If this does not resolve the issue, it is likely that a third-party product is present that is not compatible with VSE. Upgrade to the latest version of VSE and apply the latest patch.

McAfee product software, upgrades, maintenance releases, and documentation are available from the McAfee Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE:
 You will need a valid Grant Number for access. KB56057 provides additional information about the McAfee Downloads site, as well as alternate locations for some products.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Glossary of Technical Terms


Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.
United States - English
© 2003-2013 McAfee, Inc.