Error initializing with link driver 2, Failed to load mfehidk! 2 (on-access scanner functions until a system restart is initiated)
技術的な記事 ID:
KB90482
最終更新: 4/30/2020
環境
McAfee VirusScan Enterprise (VSE)
For details of VSE supported environments, see KB51111.
問題
After you successfully install VSE, the product functions as expected:
It can detect the test virus Eicar.
It successfully updates.
It communicates with the ePO Server successfully.
Only after a system restart does the on-access scanner (OAS) become non-operational. After the restart, the test virus Eicar is no longer detected.
Windows System Event log records the following errors on the client:
Type:
ERROR
Source
Service Control Manager
Category
none
Event ID:
7001
Description
The McAfee Validation Trust Protection Service service depends on the McAfee Inc. mfehidk service which failed to start because of the following error: %%31
OR
Description
The McAfee McShield service depends on the McAfee Validation Trust Protection Service service which failed to start because of the following error: %%1068
An ETL trace taken during a system startup records that the Mfehidk fails to load:
NOTES:
The VSE driver mfehidk.sysappears to be in its designated location at %windir%\system32\drivers.
All required files are in place. For example, installation directory.
The respective registry keys HKLM\system\CCS\services\mfe*\ controlling the startup behavior of MFE services, do not exhibit apparent corruption when compared to a known good installation.
原因
The investigation found that the following key was being reset:
NOTE: If the value is reset to "1" during any subsequent system restarts, use a tool like ProcMon during startup to determine the cause of the reset. For assistance, see the article KB72766 which covers utilities used for troubleshooting.
