Operational Defect Database
BugZero found this defect 3225 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
Veeam | kb2064
Hyper-V crash consistent Backups/Replicas due to McAfee mfehidk driver
Last update date:
8/13/2020
Affected products:
Veeam Backup & Replication
Affected releases:
ALL
Fixed releases:
No fixed releases provided.
Description:
Challenge
If McAfee FS minifilter MFEHIDK driver is loaded into Windows kernel, then it doesn’t allow any other driver to load at lower altitudes, it only allows other drivers to load at higher altitudes, supposedly because of proactive defense logic of McAfee Antivirus. Therefore Veeam CBT driver cannot track changes on CSV and backups/replicas are in crash consistent state.
Solution
Please uninstall McAfee Antivirus from all production Hyper-V nodes
More Information
Driver function FltAttachVolume returns error 0xC00000BB when mfehidk mini-filter driver is loaded/installed.VeeamFCT mini-filter driver can’t load at lower altitude(201900) and cannot attach to CSV volume.McAfee PER/BUG number is 37418
