4 Replies Latest reply on Aug 27, 2012 8:44 AM by jipdee77

    mfehidk.sys 54835 bluescreen at startup

    jipdee77

      Hi,

       

      I had a bleuscreen mfehidk 54835 "observer events

       

      Container error X64_0x24_mfehidk 54835, type 0

       

      Event Name: BlueScreen

       

      Response: Not available

       

      Cab Id: 0

       

      Problem signature:

       

      P1:

       

      P2:

       

      P3:

       

      P4:

       

      P5:

       

      P6:

       

      P7:

       

      P8:

       

      P9:

       

      P10:

       

      Attachments:

       

      C: \ Windows \ Minidump \ 082612-25022-01.dmp

       

      C: \ Users \ jean-pierre \ AppData \ Local \ Temp \ WER-47471-0.sysdata.xml

       

      C: \ Users \ jean-pierre \ AppData \ Local \ Temp \ WERCA50.tmp.WERInternalMetadata.xml

       

      These files may be available here:

       

      C: \ Users \ jean-pierre \ AppData \ Local \ Microsoft \ Windows \ WER \ ReportArchive \ Kernel_0_0_cab_0f858c28

       

      Analysis symbol: 54,835 X64_0x24_mfehidk

       

      New search solution: 0

       

      Report ID: 082612-25022-01

       

      Report status: 0. "What to do to correct this problem. Thanks for your help.

       

      My operating system: Model Name Satellite L450D

      Part Number PSLY5E-01801RFR

      Serial Z9550414K

      Version Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1

      BIOS version V1.30

      CPU AMD Sempron (tm) SI-42

      3072MB physical memory RAM

        • 1. Re: mfehidk.sys 54835 bluescreen at startup
          Hayton

          See this thread for what mfehidk is.

           

          It's mostly a problem on the Mcafee Enterprise versions. What McAfee protection have you got?

           

          And to try and find the cause of this I would need to know what is the Stop Code that the BSOD message shows.

          • 2. Re: mfehidk.sys 54835 bluescreen at startup
            jipdee77

            Hi,

             

            I do not know where to find the code off, I did find that this

             

            Version=1

            EventType=BlueScreen

            EventTime=129904058342118642

            ReportType=4

            Consent=1

            UploadTime=129904555958734534

            ReportIdentifier=9b8157da-ef00-11e1-9f48-fa6d28ee20d4

            IntegratorReportIdentifier=082612-25022-01

            Response.type=4

            Response.AnalysisBucket=X64_0x24_mfehidk+54835

            DynamicSig[1].Name=Version du système

            DynamicSig[1].Value=6.1.7601.2.1.0.768.3

            DynamicSig[2].Name=Identificateur de paramètres régionaux

            DynamicSig[2].Value=1036

            UI[2]=C:\Windows\system32\wer.dll

            UI[3]=Windows a redémarré après un arrêt non planifié.

            UI[4]=Windows peut rechercher une solution au problème la prochaine fois que vous serez en ligne.

            UI[5]=Re&chercher une solution

            UI[6]=&Vérifier ultérieurement

            UI[7]=Annuler

            UI[8]=Windows a redémarré après un arrêt non planifié.

            UI[9]=Un problème empêche Windows de fonctionner correctement. Windows vous préviendra si une solution est disponible.

            UI[10]=Fermer

            Sec[0].Key=BCCode

            Sec[0].Value=24

            Sec[1].Key=BCP1

            Sec[1].Value=00000000001904FB

            Sec[2].Key=BCP2

            Sec[2].Value=FFFFF88006C68BC8

            Sec[3].Key=BCP3

            Sec[3].Value=FFFFF88006C68420

            Sec[4].Key=BCP4

            Sec[4].Value=FFFFF8000378D705

            Sec[5].Key=OS Version

            Sec[5].Value=6_1_7601

            Sec[6].Key=Service Pack

            Sec[6].Value=1_0

            Sec[7].Key=Product

            Sec[7].Value=768_1

            State[0].Key=Transport.DoneStage1

            State[0].Value=1

            State[1].Key=CA

            State[1].Value=1

            State[2].Key=BLOB

            State[2].Value=CHKSUM=705A084AEA6291BEFA83FB744DA51227;BID=OCATAG;ID=423d2544-28 0e-402b-a367-7874671d47e7;SUB=8//26//2012 4:53:25 AM

            File[0].CabName=082612-25022-01.dmp

            File[0].Path=082612-25022-01.dmp

            File[0].Flags=589826

            File[0].Type=2

            File[0].Original.Path=C:\Windows\Minidump\082612-25022-01.dmp

            File[1].CabName=sysdata.xml

            File[1].Path=WER-47471-0.sysdata.xml

            File[1].Flags=589826

            File[1].Type=5

            File[1].Original.Path=C:\Users\jean-pierre\AppData\Local\Temp\WER-47471-0.sysdat a.xml

            File[2].CabName=WERInternalMetadata.xml

            File[2].Path=WERCA50.tmp.WERInternalMetadata.xml

            File[2].Flags=589826

            File[2].Type=5

            File[2].Original.Path=C:\Users\jean-pierre\AppData\Local\Temp\WERCA50.tmp.WERInt ernalMetadata.xml

            File[3].CabName=Report.cab

            File[3].Path=Report.cab

            File[3].Flags=196608

            File[3].Type=7

            File[3].Original.Path=Report.cab

            FriendlyEventName=Arrêt non planifié

            ConsentKey=BlueScreen

            AppName=Windows

            AppPath=C:\Windows\System32\WerFault.exe

             

            thank you .

            • 3. Re: mfehidk.sys 54835 bluescreen at startup
              Hayton

              You have a minidump file -

              File[0].Original.Path=C:\Windows\Minidump\082612-25022-01.dmp

               

              If you download and run the French-language version of Nirsoft's Blue Screen View tool it will tell you what the error was and also give some more information about the likely cause.

               

              The program can be downloaded from HERE.

              • 4. Re: mfehidk.sys 54835 bluescreen at startup
                jipdee77

                Hello,

                 

                I give you the information on NirSoft Bluescreen view both crash. Thank you for your help

                Crash 1.PNG

                Crash 2.PNG