Loading...

Knowledge Center

Various BugChecks possible with VirusScan Enterprise 8.8 Patch 6/7 installed
Technical Articles ID:   KB86279
Last Modified:  1/30/2017

Environment

McAfee Agent 5.0.1, 5.0.2
McAfee Host Intrusion Prevention (Host IPS) 8.0 Patch 6
McAfee VirusScan Enterprise (VSE) 8.8 Patch 7, Patch 6

Problem

Systems with VSE 8.8 Patch 6/7 can experience random BugChecks with mfehidk always fairly low in the stack. The BugCheck string might vary, depending on which operation failed at the time of the BugCheck. At the time of this publication, BugChecks 7E and D5 have been reported.

The stack of the crashing thread will exhibit the following characteristics:
fffff880`021ee448 fffff800`022f4297 : 00000000`00000050 fffff981`8bd40fc2 00000000`00000000 fffff880`021ee5b0 : nt!KeBugCheckEx
fffff880`021ee450 fffff800`02275d6e : 00000000`00000000 fffff981`8bd40fc2 00000000`00000000 fffff981`8bd40fc2 : nt! ?? ::FNODOBFM::`string'+0x417df
fffff880`021ee5b0 fffff880`014a14b0 : fffff880`0147d37b 00000000`00000036 fffffa80`0d6cbd00 00000000`00000000 : nt!KiPageFault+0x16e
fffff880`021ee748 fffff880`0147d37b : 00000000`00000036 fffffa80`0d6cbd00 00000000`00000000 00001f80`01087640 : mfehidk!sschr_+0x10
fffff880`021ee750 fffff880`0147dcb6 : fffffa80`08df7060 fffff981`8bd40f90 fffffa80`07d2cd00 fffff880`021ee8f0 : mfehidk!VOLHOOKMINI::CanonicalizeNameAllocUsingDirWalk+0x13b
fffff880`021ee890 fffff880`0147e658 : 00000000`00000018 00000000`00000009 fffffa80`0d6cbe60 fffffa80`0d6cbe58 : mfehidk!VHMINI_FILEOBJCTX::GetFileName+0x1e6
fffff880`021ee940 fffff880`0300b502 : 00000000`00000018 00000000`00000029 fffff880`021eea58 fffff880`021eea50 : mfehidk!VHMINI_FILEOBJCTX::GetFileName+0xb88

System Change

Installed a product that uses Syscore 15.4.x:
  • VSE 8.8 is installed with, or upgraded to, Patch 6 or later.
  • McAfee Agent 5.0.1 or 5.0.2 is deployed or installed.

Cause

Two threads attempt to perform the same or similar operations. This can result in a race condition and cause the system to halt.

Solution

This issue is resolved in VSE 8.8 Patch 8.

{GENSPPA.EN_US}

Related Information

To learn more about race conditions, see https://support.microsoft.com/en-us/kb/317723.

Disclaimer

The content of this article originated in English. If there are differences between the English content and its translation, the English content is always the most accurate. Some of this content has been provided using Machine Translation translated by Microsoft.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.