BSOD - mfehidk.sys - McAfee 5.0.0 engine

[Starrick]

I've been running Daemon Tools v 4.0.3 for several months. Yesterday it would appear that our managed AV (McAfee) installed an engine update. Since that time the two machines in the office with Daemon tools installed keep BSOD'ing on bootup.

Looking, it appears that McAfee has clobbered the sptd.sys file.

McAfee convieniently has a KBase article blaming this issue on Daemon Tools. Their recomended work-around is to un-install Daemon Tools. Convinient given it was all happy yesterday until their update loaded, but I digress.

http://knowledge.mcafee.com/SupportSite/dynamickc.do?sliceId=SAL_Public&command=show&forward=nonthreadedKC&externalId=KB47537

At any rate, I'm hoping the folks here might be able to fix/provide a better work around to this as I find Daemon Tools a very usefull tool.

I'll be submitting shots of the BSOD and minidumps shortly.

Interestingly, I'm un-installed Daemon tools in safe mode while entering this message on my laptop, and upon bootup now my AV is dead.

[Copytrooper]

The issue is under investigation.

[dcc24]

Just happened to me....

I was merilly working on my system for two hours then bam.. bsod with mfehdik.sys. I am also with McAfee Managed Virus Scan and they just forced!! all there customers to go to their Total Protection for Small Business.

Anyway, I am in safe mode as I type this. I uninstalled Daemon Tools using the uninstaller in the start menu but my machine still crashes just as McAfee is trying to turn on its real time protection.

I am going to try uninstalling McAfee and see if it lets me boot. I really need my DaemonTools. Please help soonest! Thanks

[Jareb Coupe]

Ditto

Yea, there must have been an automatic update to McAfee last night. Regarding dcc24's post, it does appear that uninstalling McAfee resolves the issue (unlike his experience of uninstalling Daemon Tools).

But, alas, I'm in the same situation where we are required to use the McAfee software when connected to our company network.

I imagine that McAfee tweaked a layer of their protection, and now Daemon Tools will have to suck up and wiggle their way through to McAfee's development team just to even begin to understand what is going on, so DT can figure out a work-around (since it's obvious that McAfee won't do dick all to remedy the situation they created).

*grumbles*

[Underscore]

Has McAfee become a virus?

Happened to me as well. McAfee updates just rolled out with no warning and took out every computer that was running DAEMON Tools. BSOD's everywhere. There response is to blame it on DAEMON so it is no longer there problem. This is now a big clean-up job gotta fix all the machines. Uninstalling McAfee appears to be the only solution, but that is a big call. Any idea who can supply a better automated antivirus solution?

Any idea if DAEMON are going to come to the rescue and provide a fix for McAfee's mess?

[Underscore]

Temp fix for McAfee problems

I've managed to get McAfee and DAEMON working on the same machine by excluding the files mfehidk.sys and sptd.sys from being scanned by the McAfee on-access scanner. You have to do this from the McAfee administrator web site. I uninstalled both DAEMON and McAfee then installed McAfee then set the exclusions, then installed DAEMON...so far it looks stable!

Hopefully DAEMON will supply a fix soon as I don't like having excluded files. Is there some way we can be notified when a fix is available?

[PCOECSI]

BSOD via mfehidk.sys

http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&externalId=KB47537&sliceId=SAL_Public

Technically this is a McAfee issue, While all McAfee's debugging may point to Daemon Tools, it is mfehidk that is causing and throwing the unhandled exception (UE) BSOD list the sys files involved in the (UE) in reverse order of the calls, apparently mfehidk attempts to interact with the Daemon Tools file in my case (vaxscsi.sys distribued by Alcohol 120%) in a mannor that is interfering with vaxscsi.sys's proper operation. Perhaps Microsoft can litigate who is at fault, I say it is McAfee by virtue of the fact that the Anti Virus is an API that hooks other applications in order to intercept potential invasions and is a Software Class Driver, Daemon Tools on the other hand is a Hardware Class Driver. Hardware Class Drivers allways take precedence over Software Class Drivers. Software Class Drivers that hook Hardware Drivers are supposed to do so in a manner that does not, nor attempts to interfere with their operation. You know how they say it "You break it... You buy it..." it is Time for McAfee to step up to the plate and eat crow... "McAfee broke it... McAfee fixes it"!

[Jito463]

Any idea who can supply a better automated antivirus solution?

My personal suggestion would be NOD32. It's a corporate-level A-V, but they sell individual user licenses which is how I'm running it on both of my machines. And it's a small footprint. The whole download is less then 10MB.

[btrombley]

I'm a Product Manager at McAfee. Our VirusScan Core team engineers would like to troubleshoot this issue with Daemon Tools developers. However, none of us have any contacts at Daemon Tools. Any help would be appreciated...

[Jito463]

LocutusOfBorg would be the best one to contact.

[LocutusofBorg]

@btrombley: Please contact me via our internal PM-system
here, I already messaged you and you should see the popup
after you logged in here.

[Underscore]

McAfee say this is Daemon Tools problem so that's just too bad.

Well I've had a few emails back and forward to McAfee. They have been looking into this problem, and trying to solve it. They even came back with a solution which was thoughtful. Unfortunately, the solution disabled virus scanning on the PC so it wasn't really a solution. I even posted a fix on this forum that was supposed to solve it (excluding files from scanning). Unfortunately that appeared to work but after a while the BSOD came back.

Anyway, McAfee have come back with the final answer. They say this is a bug in Daemon Tools and there is nothing they can do to fix it. Apparently this bug is crashing all sorts of other software as well.

So what's happening Daemon Tools developers? Is McAfee right and you are working on a fix for this?

[Jito463]

McAfee is horrible software, in my professional opinion. What's all this "other software" that's having so many problems with Daemon Tools? I certainly haven't encountered any, and I run a lot of software. My suggestion, get NOD32 instead. Light AV that doesn't use a lot of system resources but with a very good scanner.

[Underscore]

I don't know which software. It was the McAfee support person who said this. I expect they are just making excuses. There does appear to be some other BSOD reports in this forum, I haven't gone through them all.

[mr-b]

I have just found out that I'm hitting this issue - it took several weeks for McAfee to diagnose the problem.

Their support ppl point to http://www.daemon-tools.cc/dtcc/show...ight=uninstall

--------------------------
Blue Screen in MFEHIDK.SYS with Daemon Tools installed

Question or Problem

Blue Screen in MFEHIDK.SYS with Daemon Tools installed.
--------------------------------------------------------------------------------
System blue screens while booting.

Solution

This issue occurs due to an interaction between Daemon Tools and the 5.0.00 Scanning Engine. Currently it has been seen with McAfee Policy Enforcer and Total Protection for Small Business. This issue can be expected for any product using the 5.0.00 and later versions of the McAfee Scanning Engine.

After analyzing multiple crash logs, McAfee has determined the cause of the issue is with Daemon Tools. Escalations for this issue will no longer be accepted by McAfee Technical Support. Customers are advised to contact Daemon Tools at http://www.daemon-tools.cc for further assistance.

--------------------------------------------------------------------------------
As a workaround, McAfee recommends removing Daemon Tools from the affected system.

Cause

This issue occurs when Daemon Tools version 4.0.3 is installed on the system.
################

So is there any update?