1 Reply Latest reply on Feb 16, 2010 10:52 AM by epository

    Bluescreen "FirePM.sys"

      Dear McAfee,


      I am experiencing BlueScreens for the component FirePM.sys multiple times a day.


      Here is the information corporate support staff has extracted from the Windows minidumps.


      EXCEPTION_CODE: (NTSTATUS) 0xc0000005
      BUGCHECK_STR: 0x8E
      IMAGE_NAME: FirePM.sys


      I am using Host Intrusion Prevention (en_US) as part of our corporate policy.


      Can you assist me with a solution to retain a workable Desktop ?


      Kind regards,


        • 1. Re: Bluescreen "FirePM.sys"

          Some reports were that Microsoft was blaming this on the TDSS Rootkit and atapi.sys and its interaction with MS10-015...........


          Don't know if they have backed off of that and the TDSS detection seems complicated.  If you can get a system back up and you can pull the HD out and use a USB to IDE connector to scan it, you might be able to see if its infected.


          You might also be able to check some registry stuff.........