SYSTEM_SERVICE_EXCEPTION (3b) (blue screen error occurs after installing Endpoint Security 10.5.4 August Update)

Technical Articles ID: KB90848
Last Modified: 1/7/2020

Environment

McAfee Endpoint Security (ENS) 10.5.4 August Update
McAfee ENS Common Client 10.5.4.4287
McAfee ENS Firewall 10.5.4.4223
McAfee ENS Threat Prevention 10.5.4.4318
McAfee ENS Web Control 10.5.4.4223

Summary

Due to the issue described in this article, McAfee has removed ENS 10.5.4 August Update from the Product Downloads site. For those customers that have already downloaded ENS 10.5.4 August Update, McAfee recommends to not install this update.

Problem

A blue screen error with BugCheck SYSTEM_SERVICE_EXCEPTION (3b) can occur after you install the ENS 10.5.4 August Update.

A memory dump might show the characteristics in the following example:

SYSTEM_SERVICE_EXCEPTION (3b)

An exception happened while executing a system service routine.

Arguments:

Arg1: 00000000c0000005, Exception code that caused the bugcheck

Arg2: fffff800018dc858, Address of the instruction which caused the bugcheck

Arg3: fffff880073153d0, Address of the context record for the exception that caused the bugcheck

Arg4: 0000000000000000, zero.

STACK_TEXT:

fffff880`07315da8 fffff800`018dc8c5 : fffffa80`06401310 fffff880`034e1010

fffff880`07315ea0 fffff8a0`08c8d670 : nt!RealSuccessor

fffff880`07315db0 fffff880`03496c5b : fffffa80`08009b00 fffffa80`04b32630

fffff880`07315eb0 ffffffff`fffffc00 : nt!RtlEnumerateGenericTableWithoutSplayingAvl+0x1d

fffff880`07315de0 fffff880`034a7526 : 00000000`00000003 00000000`00000000

00000000`00000001 fffffa80`06e11038 : mfencbdc!GetOpenFileDataByFsContext+0xab

fffff880`07315e40 fffff880`034a8de8 : fffff880`034e1010 fffff880`07316520

fffff880`07316858 00000003`00000006 : mfencbdc!ImageLoading+0x6c6

fffff880`073164d0 fffff880`0144b821 : 00000000`00000000 fffff880`07316858

fffffa80`03fd1220 00000000`00000000 : mfencbdc!ImageLoading_+0x98

fffff880`07316500 fffff880`01409803 : fffff880`073166d0 fffffa80`03ffa000

fffffa80`08888ab2 fffffa80`0492a0c8 : mfehidk!ProcessHookLoadImageNotifyRoutine+0xc1

fffff880`07316640 fffff880`01409fb7 : fffffa80`0492a0c8 00000000`00000960

00000000`0000003e fffff880`07316858 : mfehidk!CONTROLDEVICE::InternalImageLoadNotify+0x1e3

System Change

Installing the ENS product versions listed in the Environment field of this article upgrades the Common Client version to 10.5.4.4287.

Cause

The driver involved in the issue is mfencbdc.sys.

Solution

This issue is resolved in Endpoint Security 10.5.4 September Update, which is available from the Product Downloads site at: https://www.mcafee.com/enterprise/en-us/downloads/my-products.html.

NOTE: You need a valid Grant Number for access. For more information about the Product Downloads site, and alternate locations for some products, see KB56057 - How to download Enterprise product updates and documentation.

Updates are cumulative; Technical Support recommends that you install the latest one.

Affected Products

Endpoint Security Firewall 10.5.x
Endpoint Security Threat Prevention 10.5.x
Endpoint Security Web Control 10.5.x
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Japanese
Portuguese Brasileiro
Chinese Simplified

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

SYSTEM_SERVICE_EXCEPTION (3b) (blue screen error occurs after installing Endpoint Security 10.5.4 August Update)

Environment

Summary

Problem

System Change

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Knowledge Center

SYSTEM_SERVICE_EXCEPTION (3b) (blue screen error occurs after installing Endpoint Security 10.5.4 August Update)

Environment

Summary

Problem

System Change

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title