Loading...

Knowledge Center

System crashes with Application Control BugCheck E0100010 on every bootup
Technical Articles ID:   KB83203
Last Modified:  12/10/2015
Rated:

Environment

McAfee Application Control (MAC) 6.1
Microsoft Windows (all supported versions) 

Summary

This article describes an issue where the system may crash on every boot cycle with BugCheck E0100010. 

Problem

BugCheck E0100010 is an Application Control generated crash that occurs if the system boots in Enable mode and the inventory (whitelist) is corrupt. 

If the inventory is scanned and determined to be corrupt, Application Control has a recovery process where the system is crashed and booted in Disable mode. The issue occurs because the recovery process fails to put the system in Disable mode, leading to the system getting booted in Enable mode with a corrupt inventory. This causes the crash to occur on every bootup.

Cause

The inventory (whitelist) may become corrupt in the following scenarios:
  • There is a crash or hard reboot while the inventory is getting updated for the changes to the files on the system.
  • The inventory has been edited or tampered with in Disable mode or Update mode.

Solution

This issue is resolved in MAC 6.1.3.392, which is available by contacting Technical Support.

To contact Technical Support, log on to the ServicePortal and go to the Create a Service Request page at https://support.mcafee.com/ServicePortal/faces/serviceRequests/createSR:
  • If you are a registered user, type your User Id and Password, and then click Log In.
  • If you are not a registered user, click Register and complete the required fields. Your password and logon instructions will be emailed to you.

Workaround

Steps to recover:
  1. Boot the system in Safe Mode with Networking.
  2. Open a command prompt and run the scsrvc -d command.
    NOTE: Keep the command prompt running.
  3. Open another command prompt and run the sadmin disable command.
  4. Reboot in normal mode.
  5. Run the sadmin so command or push the solidification task from ePO to re-solidify the system.
  6. Enable Application Control with the command sadmin enable or the enable task from ePO.

Rate this document

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.