1 2 Previous Next 10 Replies Latest reply on Jul 5, 2009 9:15 PM by Vinod R

    mfehidk.sys usb bsod/crash

      Whenever I "safely remove" a USB device from my WINXPSP3 computer, the system crashes/blue screens. The system also crashes when ejecting a newly burned DVD or CD.

      The debuglog indicates it is the mfehidk.sys file. I can post the debuglog.txt contents if anyone needs it.

      Thanks for any help.

      Also, should mention that I uninstalled McAfee, used the cleaner/removal tool, then reinstalled using a download from McAfee.
        • 1. RE: mfehidk.sys usb bsod/crash
          Vinod R


          Could you post the detailed system information as well as the details of the McAfee that is installed..

          it would help if you could mention the installed security application, service packs , RAM siz ,processor details and brand of the computer etc......


          P.S: Did you use Windbg to debug the crash dump? (we may need that logs or the crash dump them selves but not now we will indicate that at that point


          Thanks for sharing this information with us.
          • 2. RE: mfehidk.sys usb bsod/crash
            McAfee:
            SecurityCenter
            Version 9.11
            Build 9.11.109
            AffId 0
            Language en-us
            Language Pack 9.11.100
            Last Update 6/24/09

            VirusScan
            Version 13.11
            Build 13.11.102
            AffId 0
            Language en-us
            Language Pack 13.11.102
            Last Update 7/4/2009
            DAT Version 5666.0000
            DAT Creation Date 7/4/2009
            Engine Version 5301.4018

            Personal Firewall
            Version 10.11
            Build 10.11.120
            AffId 0
            Language en-us
            Language Pack 10.11.102
            Last Update 6/24/2009

            Specs:
            Windows XP (5.1.2600) Professional
            Processor Name: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+
            Videocard Name: NVIDIA GeForce 6800 GT
            Installed Memory: 2,047.23 MB
            Latest Service Pack Installed: Service Pack 3
            Language: English (United States) (ID: $0409)
            Country: United States (Country Code: 1)
            Time zone: (GMT-05:00) Eastern Time (US & Canada)
            Physical Processors: 1
            Logical Processors: 2
            Processor Vendor: AMD
            Processor Name: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+
            Additional Name: x86 Family 15 Model 3 Stepping 2
            Popular Name: Athlon 64 X2
            Frequency: 2000MHz
            BIOS Vendor: American Megatrends Inc.
            BIOS Type: AT/AT COMPATIBLE
            BIOS Version: 1017.002
            Motherboard Vendor: ASUSTeK Computer Inc.
            Motherboard Model: A8V Deluxe
            Video Adapter Name: NVIDIA GeForce 6800 GT
            Video Memory: 256.00 MB
            Chipset Name: GeForce 6800 GT
            BIOS Name: Version 5.40.02.15.05
            BIOS Date: 06/07/04
            Current Resolution: 1280 x 1024 pixels
            Current Color Mode: 32 bits per pixel
            DirectX Version: 4.09.00.0904
            • 3. RE: mfehidk.sys usb bsod/crash
              af709000 af713000 secdrv secdrv.sys Wed Sep 13 09:18:32 2006 (45080528)
              afc3b000 afc41f80 mfebopk mfebopk.sys Wed May 06 11:33:35 2009 (4A01ADCF)
              b0715000 b0718900 ndisuio ndisuio.sys Sun Apr 13 14:55:57 2008 (4802573D)
              b0f1c000 b0f4e9c0 mfehidk mfehidk.sys Wed May 06 11:31:21 2009 (4A01AD49)
              b0f4f000 b0fbe280 mrxsmb mrxsmb.sys Fri Oct 24 07:21:07 2008 (4901AFA3)
              b0fbf000 b0fe9e80 rdbss rdbss.sys Sun Apr 13 15:28:38 2008 (48025EE6)
              b0fea000 b100bd00 afd afd.sys Thu Aug 14 06:04:35 2008 (48A40333)
              b100c000 b1033c00 netbt netbt.sys Sun Apr 13 15:20:59 2008 (48025D1B)
              b1034000 b1059500 ipnat ipnat.sys Sun Apr 13 14:57:10 2008 (48025786)
              b1387000 b13ae000 Mpfp Mpfp.sys Thu Apr 09 14:21:32 2009 (49DE3CAC)
              b13d1000 b1429480 tcpip tcpip.sys Fri Jun 20 07:51:09 2008 (485B99AD)
              b142a000 b143c600 ipsec ipsec.sys Sun Apr 13 15:19:42 2008 (48025CCE)
              b23e1000 b23e1b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
              b28cd000 b28d1200 ElbyCDIO ElbyCDIO.sys Tue Feb 17 12:11:28 2009 (499AEFC0)
              b28d5000 b28db700 USBSTOR USBSTOR.SYS Sun Apr 13 14:45:37 2008 (480254D1)
              b2ba2000 b2ba5e60 ASPI32 ASPI32.SYS Wed Jul 17 11:53:00 2002 (3D3592DC)
              b44be000 b44c0280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
              b45a9000 b45af000 symlcbrd symlcbrd.sys Sun Aug 22 04:10:18 2004 (412854EA)
              b45d1000 b45d8880 Npfs Npfs.SYS Sun Apr 13 14:32:38 2008 (480251C6)
              b573a000 b5748d80 arp1394 arp1394.sys Sun Apr 13 14:51:22 2008 (4802562A)
              b893a000 b8997f00 update update.sys Sun Apr 13 14:39:46 2008 (48025372)
              b89b8000 b89bbf00 MODEMCSA MODEMCSA.sys Fri Aug 17 16:57:37 2001 (3B7D8541)
              b89c0000 b89efe80 rdpdr rdpdr.sys Sun Apr 13 14:32:50 2008 (480251D2)
              b89f0000 b8a00e00 psched psched.sys Sun Apr 13 14:56:36 2008 (48025764)
              b8a01000 b8a17580 ndiswan ndiswan.sys Sun Apr 13 15:20:41 2008 (48025D09)
              b8a18000 b8a79c00 ALCXSENS ALCXSENS.SYS Mon Feb 23 13:11:09 2004 (403A423D)
              b8a7a000 b8a9da80 portcls portcls.sys Sun Apr 13 15:19:40 2008 (48025CCC)
              b8a9e000 b8b314c0 ALCXWDM ALCXWDM.SYS Fri Mar 19 08:02:06 2004 (405AE13E)
              b8b32000 b8b55200 USBPORT USBPORT.SYS Sun Apr 13 14:45:34 2008 (480254CE)
              b8b56000 b8b6dc80 AnyDVD AnyDVD.sys Thu Jun 11 16:33:38 2009 (4A316A22)
              b8b6e000 b8c20400 HSF_CNXT HSF_CNXT.sys Wed Nov 08 18:59:29 2006 (45526F61)
              b8c21000 b8d12a00 HSF_DPV HSF_DPV.sys Wed Nov 08 19:00:07 2006 (45526F87)
              b8d13000 b8d51d80 HSFHWBS2 HSFHWBS2.sys Wed Nov 08 18:59:34 2006 (45526F66)
              b8d52000 b8d88780 yk51x86 yk51x86.sys Wed Oct 27 03:51:43 2004 (417F538F)
              b8d89000 b8dab700 ks ks.sys Sun Apr 13 15:16:34 2008 (48025C12)
              b8dac000 b8dd7940 aticxcap aticxcap.sys Tue Apr 08 09:47:22 2003 (3E92D2EA)
              b8dd8000 b8debf00 VIDEOPRT VIDEOPRT.SYS Sun Apr 13 14:44:39 2008 (48025497)
              b8dec000 b914a880 nv4_mini nv4_mini.sys Fri Nov 11 17:24:25 2005 (43751A19)
              b9157000 b9159780 ndistapi ndistapi.sys Sun Apr 13 14:57:27 2008 (48025797)
              b915b000 b915ed80 serenum serenum.sys Sun Apr 13 14:40:12 2008 (4802538C)
              b9167000 b9169880 pfc pfc.sys Tue Sep 02 03:24:46 2003 (3F5445BE)
              b95f0000 b95feb00 drmk drmk.sys Sun Apr 13 14:45:12 2008 (480254B8)
              b9600000 b960fc00 serial serial.sys Sun Apr 13 15:15:44 2008 (48025BE0)
              b9610000 b961cd00 i8042prt i8042prt.sys Sun Apr 13 15:17:59 2008 (48025C67)
              b9620000 b962e100 redbook redbook.sys Sun Apr 13 14:40:27 2008 (4802539B)
              b9630000 b963f600 cdrom cdrom.sys Sun Apr 13 14:40:45 2008 (480253AD)
              b9640000 b964a480 imapi imapi.sys Sun Apr 13 14:40:57 2008 (480253B9)
              b9650000 b965c100 STREAM STREAM.SYS Sun Apr 13 14:45:14 2008 (480254BA)
              b9660000 b966f180 nic1394 nic1394.sys Sun Apr 13 14:51:22 2008 (4802562A)
              b9670000 b967e880 usbhub usbhub.sys Sun Apr 13 14:45:36 2008 (480254D0)
              b9cc5000 b9cc8b00 usbscan usbscan.sys Sun Apr 13 14:45:34 2008 (480254CE)
              b9ced000 b9cf0c80 mssmbios mssmbios.sys Sun Apr 13 14:36:45 2008 (480252BD)
              b9d25000 b9d3eb80 Mup Mup.sys Sun Apr 13 15:17:05 2008 (48025C31)
              b9d3f000 b9d59260 snapman snapman.sys Fri Oct 06 09:44:30 2006 (45265DBE)
              b9d5a000 b9db8ec0 timntr timntr.sys Mon Sep 25 09:44:11 2006 (4517DD2B)
              b9db9000 b9de5980 NDIS NDIS.sys Sun Apr 13 15:20:35 2008 (48025D03)
              b9de6000 b9e72600 Ntfs Ntfs.sys Sun Apr 13 15:15:49 2008 (48025BE5)
              b9e73000 b9e89880 KSecDD KSecDD.sys Sun Apr 13 14:31:40 2008 (4802518C)
              b9e8a000 b9ead000 PCTCore PCTCore.sys Thu Apr 02 19:57:05 2009 (49D550D1)
              b9ead000 b9eccb00 fltmgr fltmgr.sys Sun Apr 13 14:32:58 2008 (480251DA)
              b9ecd000 b9edf200 ulsata ulsata.sys Wed Sep 24 23:24:03 2003 (3F725FD3)
              b9ee0000 b9ef7880 SCSIPORT SCSIPORT.SYS Sun Apr 13 14:40:29 2008 (4802539D)
              b9ef8000 b9f0ae00 viasraid viasraid.sys Thu Oct 30 05:38:31 2003 (3FA0DC17)
              b9f0b000 b9f22900 atapi atapi.sys Sun Apr 13 14:40:29 2008 (4802539D)
              b9f23000 b9f48700 dmio dmio.sys Sun Apr 13 14:44:45 2008 (4802549D)
              b9f49000 b9f67880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
              b9f68000 b9f78a80 pci pci.sys Sun Apr 13 14:36:43 2008 (480252BB)
              b9f79000 b9fa6d80 ACPI ACPI.sys Sun Apr 13 14:36:33 2008 (480252B1)
              ba0a8000 ba0b1180 isapnp isapnp.sys Sun Apr 13 14:36:40 2008 (480252B8)
              ba0b8000 ba0c7100 ohci1394 ohci1394.sys Sun Apr 13 14:46:18 2008 (480254FA)
              ba0c8000 ba0d5080 1394BUS 1394BUS.SYS Sun Apr 13 14:46:18 2008 (480254FA)
              ba0d8000 ba0e2580 MountMgr MountMgr.sys Sun Apr 13 14:39:45 2008 (48025371)
              ba0e8000 ba0f4c80 VolSnap VolSnap.sys Sun Apr 13 14:41:00 2008 (480253BC)
              ba0f8000 ba100e00 disk disk.sys Sun Apr 13 14:40:46 2008 (480253AE)
              ba108000 ba114180 CLASSPNP CLASSPNP.SYS Sun Apr 13 15:16:21 2008 (48025C05)
              ba118000 ba125180 mrfoldr mrfoldr.sys Mon Aug 15 06:42:01 2005 (43007179)
              ba128000 ba131200 PxHelp20 PxHelp20.sys Wed Mar 12 21:57:44 2008 (47D88A18)
              ba138000 ba143580 gagp30kx gagp30kx.sys Sun Apr 13 14:36:40 2008 (480252B8)
              ba168000 ba173900 pcouffin pcouffin.sys Tue Dec 05 09:39:53 2006 (457584B9)
              ba178000 ba181f00 termdd termdd.sys Sun Apr 13 14:38:36 2008 (4802532C)
              ba188000 ba196000 AmdLLD AmdLLD.sys Wed Nov 01 16:42:12 2006 (454906A4)
              ba248000 ba250700 wanarp wanarp.sys Sun Apr 13 14:57:20 2008 (48025790)
              ba258000 ba260080 ipfltdrv ipfltdrv.sys Fri Aug 17 16:55:07 2001 (3B7D84AB)
              ba268000 ba270780 netbios netbios.sys Sun Apr 13 14:56:01 2008 (48025741)
              ba288000 ba292e00 Fips Fips.SYS Sun Apr 13 14:33:27 2008 (480251F7)
              ba298000 ba2a1e80 NDProxy NDProxy.SYS Sun Apr 13 14:57:28 2008 (48025798)
              ba2c8000 ba2d6000 AmdK8 AmdK8.sys Sun Jul 02 01:39:38 2006 (44A75C1A)
              ba2d8000 ba2e4880 rasl2tp rasl2tp.sys Sun Apr 13 15:19:43 2008 (48025CCF)
              ba2e8000 ba2f2200 raspppoe raspppoe.sys Sun Apr 13 14:57:31 2008 (4802579B)
              ba2f8000 ba303d00 raspptp raspptp.sys Sun Apr 13 15:19:47 2008 (48025CD3)
              ba308000 ba310900 msgpc msgpc.sys Sun Apr 13 14:56:32 2008 (48025760)
              ba328000 ba32e180 PCIIDEX PCIIDEX.SYS Sun Apr 13 14:40:29 2008 (4802539D)
              ba330000 ba334d00 PartMgr PartMgr.sys Sun Apr 13 14:40:48 2008 (480253B0)
              ba338000 ba33ed00 viaagp1 viaagp1.sys Wed Jul 02 06:08:01 2003 (3F02AF01)
              ba368000 ba36e500 usbprint usbprint.sys Sun Apr 13 14:47:37 2008 (48025549)
              ba3c8000 ba3cd500 TDTCP TDTCP.SYS Sun Apr 13 14:38:35 2008 (4802532B)
              ba3d8000 ba3df120 aticxtun aticxtun.sys Tue Apr 08 09:47:25 2003 (3E92D2ED)
              ba418000 ba41d000 flpydisk flpydisk.sys Sun Apr 13 14:40:24 2008 (48025398)
              ba428000 ba42e180 HIDPARSE HIDPARSE.SYS Sun Apr 13 14:45:22 2008 (480254C2)
              ba430000 ba435200 vga vga.sys Sun Apr 13 14:44:40 2008 (48025498)
              ba438000 ba43ca80 Msfs Msfs.SYS Sun Apr 13 14:32:38 2008 (480251C6)
              ba440000 ba447580 Modem Modem.SYS Sun Apr 13 15:00:18 2008 (48025842)
              ba448000 ba44eb00 ElbyCDFL ElbyCDFL.sys Thu Dec 14 16:22:33 2006 (4581C099)
              ba450000 ba455080 usbuhci usbuhci.sys Sun Apr 13 14:45:34 2008 (480254CE)
              ba458000 ba45f600 usbehci usbehci.sys Sun Apr 13 14:45:34 2008 (480254CE)
              ba460000 ba466000 kbdclass kbdclass.sys Sun Apr 13 14:39:46 2008 (48025372)
              ba468000 ba46cf80 point32 point32.sys Thu Jun 03 04:45:18 2004 (40BEE51E)
              ba470000 ba475a00 mouclass mouclass.sys Sun Apr 13 14:39:47 2008 (48025373)
              ba478000 ba479000 fdc fdc.sys unavailable (00000000)
              ba480000 ba484a80 TDI TDI.SYS Sun Apr 13 15:00:04 2008 (48025834)
              ba488000 ba48c580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
              ba490000 ba494080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
              ba4b8000 ba4bb000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
              ba5a0000 ba5a21c0 aticxxbr aticxxbr.sys Tue Apr 08 09:47:27 2003 (3E92D2EF)
              • 4. RE: mfehidk.sys usb bsod/crash
                ba5a8000 ba5a9b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
                ba5aa000 ba5ab100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
                ba5ac000 ba5ad500 viaide viaide.sys Sun Apr 13 14:40:30 2008 (4802539E)
                ba5ae000 ba5af700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
                ba5f2000 ba5f3200 ElbyDelay ElbyDelay.sys Wed Dec 13 14:14:57 2006 (45805131)
                ba5f4000 ba5f5100 swenum swenum.sys Sun Apr 13 14:39:52 2008 (48025378)
                ba61c000 ba61d280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
                ba652000 ba653f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
                ba654000 ba655080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
                ba656000 ba657080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
                ba658000 ba659080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
                ba6a2000 ba6a2da0 aslm75 aslm75.sys Tue Apr 22 21:15:58 1997 (335D62CE)
                ba6dd000 ba6ddc00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
                ba72e000 ba72ed00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
                bf000000 bf011600 dxg dxg.sys Sun Apr 13 14:38:27 2008 (48025323)
                bf012000 bf3d0400 nv4_disp nv4_disp.dll Fri Nov 11 17:18:35 2005 (437518BB)
                bf800000 bf9c2f80 win32k win32k.sys Fri Apr 17 08:26:26 2009 (49E87572)
                bffa0000 bffe5c00 ATMFD ATMFD.DLL Sun Apr 13 20:09:55 2008 (4802A0D3)

                Unloaded modules:
                a8680000 a86ab000 kmixer.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                a8680000 a86ab000 kmixer.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                a96ab000 a96d6000 kmixer.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                ba6c2000 ba6c3000 drmkaud.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                aa179000 aa186000 DMusic.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                a96d6000 a96f9000 aec.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                aa008000 aa016000 swmidi.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                adff8000 adffa000 splitter.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                aa607000 aa61b000 Parport.SYS
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                ba278000 ba281000 processr.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                b44c2000 b44c6000 kbdhid.sys
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                ba420000 ba425000 Cdaudio.SYS
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                b44c6000 b44c9000 Sfloppy.SYS
                Timestamp: unavailable (00000000)
                Checksum: 00000000
                Closing open log file c:\debuglog.txt
                • 5. RE: mfehidk.sys usb bsod/crash
                  Vinod R
                  HI...

                  It would be good if you delete those posts... and instead post only the system logs and the details of the installed application on this machine.

                  If possible also mention when was McAfee first installed on this machine and how did you re-install it?


                  NOTE:
                  Either me or another person will indicate/inform you if we need any logs or the crash dump .
                  • 6. RE: mfehidk.sys usb bsod/crash
                    Please give me a little more information on which system logs you are referring to. I have left the post with the McAfee installation details and my system specs.

                    I can't remember when McAfee was first installed, but when I began to have this problem, I uninstalled, ran the McAfee removal tool, then reinstalled using the recommended download from the McAfee site (you need to log in to get the download). This was on 6/24/09.
                    • 7. RE: mfehidk.sys usb bsod/crash
                      I believe I have found the culprit.

                      I uninstalled all McAfee products, ran the cleaning tool, and tried to insert and remove a USB thumb drive. The system blue screened again. I checked the dmp file and this time it indicated that a file PCTcore.sys caused the crash. PCTcore.sys is a file used by PC Tools which is installed with Spyware Doctor (I had the starter edition installed, which is noted to be incompatible with McAfee). I removed Spyware Doctor, and retried the USB, and had no issues.

                      I then reinstalled McAfee and no problems.

                      I have had Spyware Doctor installed along with McAfee for quite some time, and never had any problems. When last using SD, I must have updated the PCTcore.sys file which may have new issues??

                      Thanks for the attention.
                      • 8. RE: mfehidk.sys usb bsod/crash
                        Vinod R


                        There you go.... Glad that you are ok now....

                        Care to post the version of the PCTcore.sys and the version of PCtool on the machine that caused the crash?
                        • 9. RE: mfehidk.sys usb bsod/crash
                          Wish I could but it has all been eliminated from the system. Maybe this will help:
                          b9e8a000 b9ead000 PCTCore PCTCore.sys Thu Apr 02 19:57:05 2009 (49D550D1)
                          Looks like maybe the file date is 4/2/09???

                          The version of Spyware Doctor was 6, but I don't know the build number.
                          1 2 Previous Next