Knowledge Center

Random system crash (blue screen) with BugCheck 18 - REFERENCE_BY_POINTER occurs on Windows Server 2012 with VirusScan Enterprise 8.8 Patch 7, 8 or 9
Technical Articles ID:   KB88340
Last Modified:  12/28/2017


McAfee VirusScan Enterprise (VSE) 8.8 Patch 9, 8 and 7
Microsoft Windows Server 2012 Standard (NT kernel version 6.2.x)


In very rare circumstances, a system might experience a system crash (blue screen error) with the following BugCheck code: BugCheck 18 - REFERENCE_BY_POINTER. The BugCheck can occur if the driver mfewfpk.sys references an invalid object used by the kernel.

The stack of the crashing thread contains several references to mfewfpk.

System Change

You installed VSE 8.8 Patch 7 or Patch 8 on Windows Server 2012 (NT version 6.2.x).


This issue is resolved in VirusScan Enterprise 8.8 Update 10, which is available from the Product Downloads site at: http://mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Updates are cumulative; Technical Support recommends that you install the latest one.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.