1 Reply Latest reply on Aug 6, 2010 2:17 AM by confour

    Warning mfehidk.sys

      Hello

      I got recently lots of warnings send by mfehidk.sys, stated the MCSVHOST.EXE contains a signed  but not trusted code.

      I find this very strange because both systemfiles are Mcafee's .

      I'm using mcafee internet security and windows 7-64bits.

      This is the report in html:

      - <System>
      <Provider Name="mfehidk" />
      <EventID Qualifiers="33024">516</EventID>
      <Level>3</Level>
      <Task>256</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2010-06-14T08:12:00.586883200Z" />
      <EventRecordID>120821</EventRecordID>
      <Channel>System</Channel>
      <Computer>Nico-PC</Computer>
      <Security />
      </System>
      - <EventData>
      <Data>\Device\mfehidk</Data>
      <Data>**\MCSVHOST.EXE</Data>
      <Data>1868</Data>
      <Binary>00000000030030000001000004020081000000000000000000000000000000000000000000000000</Binary>
      </EventData>
      </Event>
      Any ideas on how to solve this problem?
      pm: This morning, the logbook contains 9 reports (all the same content) within 10 minutes.

      Thanks in advance

      Nicolaas

        • 1. Re: Warning mfehidk.sys
          confour

          This is not confined it seems to Windows 7. I am running Windows XP SP3 - with of all McAfees latest , and my Event Viewer - System Log - shows:

          I get more than 10 within a few minutes of starting up - every time.

           

          Event Type: Warning
          Event Source: mfehidk
          Event Category: (256)
          Event ID: 516
          Date:  06/08/2010
          Time:  17:07:22
          User:  N/A
          Computer: AC-CF1111
          Description:
          Process **\MCSHIELD.EXE pid (3340) contains signed but untrusted code, but was allowed to perform a privileged operation with a McAfee driver.
          Data:
          0000: 00 00 00 00 03 00 58 00   ......X.
          0008: 00 01 00 00 04 02 00 81   .......&#129;
          0010: 00 00 00 00 00 00 00 00   ........
          0018: 00 00 00 00 00 00 00 00   ........
          0020: 00 00 00 00 00 00 00 00   ........