4 Replies Latest reply on Aug 21, 2015 1:00 PM by catdaddy

    Memory leak in mfehidk.sys (and, possibly, other McAfee Drivers)

    mightyflea

      We have a virtualized Windows Server 2012r2 server running McAfee Endpoint Security:

      McAfee.jpg

      We appear to have a memory leak in the mfehidk.sys driver:

      MemoryLeak.jpgMemoryLeak2.jpg

      This results in a need to restart the system every 7-10 days or so.  Looking at this post ( VirusScan Enterprise leaks nonpaged pool ), I did shut down one service that had 18,000+ handles open.  However, this did not change anything.

       

      Has anyone else experienced this?  Where do I go from here?  At this point, it appears the choice is between analysis of a memory dump (something with which I have no experience), and simply uninstalling McAfee.  Are there any other options?