--------- 1: kd> ! analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* SESSION_HAS_VALID_POOL_ON_EXIT (ab) Caused by a session driver not freeing its pool allocations prior to a session unload. This indicates a bug in win32k.sys, atmfd.dll, rdpdd.dll or a video driver. Arguments: Arg1: 00000018, session ID Arg2: 00000020, number of paged pool bytes that are leaking Arg3: 00000000, number of nonpaged pool bytes that are leaking Arg4: 00000001, total number of paged and nonpaged allocations that are leaking. nonpaged allocations are in the upper half of this word, paged allocations are in the lower half of this word. Debugging Details: ------------------ PEB is paged out (Peb.Ldr = 7ffd900c). Type ".hh dbgerr001" for details PEB is paged out (Peb.Ldr = 7ffd900c). Type ".hh dbgerr001" for details CORRUPTING_POOL_TAG: Gtvp BUGCHECK_STR: 0xAB_Gtvp IMAGE_NAME: mfehidk.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4db76291 MODULE_NAME: mfehidk FAULTING_MODULE: bf800000 win32k DEFAULT_BUCKET_ID: CODE_CORRUPTION PROCESS_NAME: csrss.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from 809314db to 808278d3 STACK_TEXT: b839fc24 809314db 000000ab 00000018 00000020 nt!KeBugCheckEx+0x1b b839fc68 809ae01f 883f2aa0 883f2aa0 00000000 nt!MiCheckSessionPoolAllocations+0x107 b839fce8 8084d4d1 883f2aa0 00000000 8742cdb0 nt!MiDereferenceSessionFinal+0x183 b839fd04 8094e1e7 883f2aa0 8742cdb0 8742cff0 nt!MmCleanProcessAddressSpace+0x6b b839fd8c 8094e33b 00000000 00000000 8742cdb0 nt!PspExitThread+0x5f1 b839fda4 8094b86e 8742cdb0 00000000 00000001 nt!PspTerminateThreadByPointer+0x4b b839fddc 8088f64e bf92d20e 87d9baf0 00000000 nt!PspSystemThreadStartup+0x3c 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16 STACK_COMMAND: kb CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt 80833e8a-80833e8e 5 bytes - nt!NtYieldExecution [ 8b ff 55 8b ec:e9 11 d6 9d 76 ] 80925172-80925176 5 bytes - nt!NtUnmapViewOfSection [ 8b ff 55 8b ec:e9 53 c3 8e 76 ] 8092f19e-8092f1a4 7 bytes - nt!NtMapViewOfSection (+0xa02c) [ 6a 38 68 b8 41 80 80:e9 11 23 8e 76 90 90 ] 8094664a-8094664e 5 bytes - nt!NtOpenProcess (+0x174ac) [ 68 c8 00 00 00:e9 29 ae 8c 76 ] 809468d8-809468dc 5 bytes - nt!NtOpenThread (+0x28e) [ 68 c4 00 00 00:e9 af ab 8c 76 ] 8094e410-8094e414 5 bytes - nt!NtTerminateProcess (+0x7b38) [ 8b ff 55 8b ec:e9 c9 30 8c 76 ] 32 errors : !nt (80833e8a-8094e414) FOLLOWUP_NAME: MachineOwner MEMORY_CORRUPTOR: PATCH_mfehidk FAILURE_BUCKET_ID: MEMORY_CORRUPTION_PATCH_mfehidk BUCKET_ID: MEMORY_CORRUPTION_PATCH_mfehidk Followup: MachineOwner --------- 1: kd> lmvm mfehidk start end module name f71d2000 f723aac0 mfehidk (deferred) Image path: mfehidk.sys Image name: mfehidk.sys Timestamp: Wed Apr 27 10:25:53 2011 (4DB76291) CheckSum: 000771BA ImageSize: 00068AC0 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 We found few blog on Mcafee site https://kc.mcafee.com/corporate/index?page=content&id=KB73281&actp=LIST We have found few link over the Mcafee sites. Could you please have a look and advise further course of action. https://kc.mcafee.com/corporate/index?page=content&id=KB73485 https://kc.mcafee.com/corporate/index?page=content&id=KB71812 Vishwa

Its clearly related to Mcafee it has nothing to do with windows so please seek assistance with the Mcafee forums :). Thanks for the understanding.http://www.arabitpro.com

Hello, I would agree with Syed. You have to contact them on McCafee forums / support for assistance. Bug Check Code 0xab: http://msdn.microsoft.com/en-us/library/windows/hardware/ff560119(v=vs.85).aspx As I see, your McCafee have not been updated since 2011. Please make sure that it is up-to-date. Another option is to uninstall it and replace it with Microsoft MSE as it is fully compatible with Windows Operating systems. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer