cancel
Showing results for 
Search instead for 
Did you mean: 
nicolaas
Level 7

Warning mfehidk.sys

Hello

I got recently lots of warnings send by mfehidk.sys, stated the MCSVHOST.EXE contains a signed  but not trusted code.

I find this very strange because both systemfiles are Mcafee's .

I'm using mcafee internet security and windows 7-64bits.

This is the report in html:

- <System>
<Provider Name="mfehidk" />
<EventID Qualifiers="33024">516</EventID>
<Level>3</Level>
<Task>256</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-06-14T08:12:00.586883200Z" />
<EventRecordID>120821</EventRecordID>
<Channel>System</Channel>
<Computer>Nico-PC</Computer>
<Security />
</System>
- <EventData>
<Data>\Device\mfehidk</Data>
<Data>**\MCSVHOST.EXE</Data>
<Data>1868</Data>
<Binary>00000000030030000001000004020081000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>
Any ideas on how to solve this problem?
pm: This morning, the logbook contains 9 reports (all the same content) within 10 minutes.

Thanks in advance

Nicolaas

0 Kudos
1 Reply
confour
Level 7

Re: Warning mfehidk.sys

This is not confined it seems to Windows 7. I am running Windows XP SP3 - with of all McAfees latest , and my Event Viewer - System Log - shows:

I get more than 10 within a few minutes of starting up - every time.

Event Type: Warning
Event Source: mfehidk
Event Category: (256)
Event ID: 516
Date:  06/08/2010
Time:  17:07:22
User:  N/A
Computer: AC-CF1111
Description:
Process **\MCSHIELD.EXE pid (3340) contains signed but untrusted code, but was allowed to perform a privileged operation with a McAfee driver.
Data:
0000: 00 00 00 00 03 00 58 00   ......X.
0008: 00 01 00 00 04 02 00 81   .......&#129;
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

0 Kudos