Loading...

Knowledge Center


BugCheck 19 error possible for mfefirek.sys (displays in blue screen dump after installing VirusScan Enterprise 8.8 Patch 7 to 10)
Technical Articles ID:   KB87669
Last Modified:  4/24/2018

Environment

McAfee VirusScan Enterprise (VSE) 8.8 Patch 7 to 10

Microsoft Direct Access servers

For details of VSE supported environments, see KB51111.

Problem

After installing VSE 8.8 with Patch 7, 8,  9, or 10, in rare cases, a BugCheck 19 error is possible for mfefirek.sys.

The blue screen dump error page shows output similar to the following:
BugCheck 19, {3, ffffe0003be35010, fffff8016bee73e0, fffff8016beaaf70}
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+ebb )
 Example stack text:
ffffd000 24cf47b8 fffff800 28ab172b : 00000000 00000019 00000000 00000003 ffffe000 3be35010 fffff801 6bee73e0 : nt!KeBugCheckEx
ffffd000 24cf47c0 fffff800 288a827a : 00000000 00000000 00000000 00000001 00000000 00000200 00000000 00000000 : nt!ExDeferredFreePool+0xebb
ffffd000 24cf4890 fffff801 6b257d32 : 00000000 00000000 00000000 000009b7 00000000 00000000 ffffd000 00000000 : nt!ExAllocatePoolWithTagPriority+0x6a
Enabling driver verify shows the faulting thread to be mfefirek.sys. For example:
BugCheck C4, {13, 1df3, ffffe001bb1af960, 6a0008}
Probably caused by : mfefirek.sys ( mfefirek!CNetHook::NetSendBatch+189 )

Example stack text:
NOTE: In the following example, <redacted> indicates internal McAfee function names not approved for public release.
fffff800 069f00f8 fffff800 0589cdc2 : 00000000 000000c4 00000000 00000013 00000000 00001df3 ffffe001 bb1af960 : nt!KeBugCheckEx
fffff800 069f0100 fffff800 0587c125 : ffffe001 bb1af970 ffffe001 bbf0d902 ffffe001 b4184d00 00000000 00000000 : nt!ExFreePoolSanityChecks+0x10e
fffff800 069f0140 fffff801 6524df99 : ffffe001 bb1af970 ffffe001 bb1af970 ffffe001 bb1af970 fffff800 069f01d0 : nt!VerifierExFreePoolWithTag+0x39
fffff800 069f0170 fffff801 64936ac3 : 00000000 00000000 ffffe001 bbf0d950 ffffe001 bbf0d950 ffffe001 bb938890 : mfefirek!<redacted>+0x189
fffff800 069f01b0 fffff801 649430c9 : fffff801 64965000 ffffe001 bb938890 fffff800 069f0b30 ffffe001 bbf0d950 : mfewfpk!<redacted>+0xb3
fffff800 069f0200 fffff801 64944d12 : fffff800 069f0b60 00000000 00000000 fffff800 069f0470 fffff800 069f05c0 : mfewfpk!<redacted>+0x549
fffff800 069f0280 fffff801 6493e51a : fffff800 069f12c0 ffffe001 b44f0040 fffff800 069f1590 00000000 00000001 : mfewfpk!<redacted>+0x32
fffff800 069f02e0 fffff800 05290c23 : 00000000 00000000 00000000 00000001 ffffe001 b55950f0 ffffe001 b40adb38 : mfewfpk!<redacted>+0x8a
fffff800 069f0310 fffff801 6493e47b : fffff801 6493e490 fffff800 069f0470 00000000 00000202 fffff800 0588e909 : nt!KeExpandKernelStackAndCalloutInternal+0xf3
fffff800 069f0400 fffff801 649414b3 : fffff800 069f2000 00000000 00000000 ffffcf81 5b55af02 fffff800 0588e12b : mfewfpk!<redacted>+0x2b
fffff800 069f0440 fffff801 63c1c256 : 00000000 00000140 fffff800 069f05c0 fffff800 069f0780 00000000 00000000 : mfewfpk!<redacted>+0x63
fffff800 069f04c0 fffff801 63c01c30 : 00000000 00000004 fffff800 069f0b20 00000000 00000000 ffffe001 bb938890 : NETIO!ProcessCallout+0x226
fffff800 069f0630 fffff801 6467e600 : fffff800 00000001 fffff800 069f1d30 ffffe001 b3618198 00000000 00000030 : NETIO!KfdClassify+0x200

Solution

{VSE88P11.EN_US}
{VSE88PATCHES.EN_US}

Disclaimer

The content of this article originated in English. If there are differences between the English content and its translation, the English content is always the most accurate. Some of this content has been provided using Machine Translation translated by Microsoft.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Languages:

This article is available in the following languages:

English United States
Japanese

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.