BSOD from McAfee related to AnyDVD

Discussion in 'AnyDVD HD (DVD issues)' started by EME, Apr 25, 2008.

  1. EME

    EME Member

    A few months ago I had to rebuild my OS after a head crash and since then I'd have random BSODs typically with the error IRQL_NOT_LESS_OR_EQUAL. I analyzed the dump files and they most often stated that the BSOD was "Probably caused by: mfehidk" which is a file used by McAfee VirusScan. I sent my dumps (the files) to McAfee and they told me to remove AnyDVD. Seeing that I have used the two in conjunction for over a year, I didn't see what difference it would make. So to prove to the guy that AnyDVD has no relation, I removed it and waited for the next dump. Well, two days passed without a dump. I reinstalled AnyDVD and by the next morning, BSOD. Removed AnyDVD again and, aside from the missing AnyDVD, all was well. Reinstalled and a few hours later got a BSOD.

    Up until my crash, my drive had remained un-rebuilt since just after XP came out. Either something in my previous mess of files had kept this problem from happening or, one of the recent AnyDVD or McAfee updates started something. To eliminate a lot of other things, I've held off installing much else until this problem is resolved.

    Yes, I've checked the CPU temp and have run WinDiag and Memtest86 without any issues.

    OS - XP/SP2
    CPU - P4/3.06Ghz
    RAM - 1.5Gb

    Anyone run into the problem?

    Thanks!
     
  2. Frank

    Frank SlySoft Support Team

    It's up to you

    That BSOD indicates a conflict between two drivers on the machine and the crash just happens to occur when AnyDVD is running. ;)

    See this please:

    http://forum.slysoft.com/showthread.php?t=15536

    If you have Roxio products installed, or InCD running at the same time or any other Packet Writer, Drag&Drop stuff, etc., these compete for the same resources in Windows and it is a matter of circumstances as to how this ends. Mostly it's AnyDVD not working.

    You might also want to open Device Manager and cruise the list looking for yello triangles - fix those with updating the driver.

    Without a closer look at your machine that is the first analysis of your problem. Fix the conflict and this will go away.

    On the Mcafee front, this COULD be a version problem with your AV product which has nothing to do with AnyDVD:

    After analyzing multiple crash logs, McAfee has determined the cause of the issue is with Daemon Tools. Escalations for this issue will no longer be accepted by McAfee Technical Support.

    Customers are advised to contact Daemon Tools at http://www.daemon-tools.cc for further assistance.

    So that is another direction for you to look. AnyDVD may just be triggering an old issue on McAfee.
     
    Last edited: Apr 25, 2008
  3. EME

    EME Member

    Yeah, I HAVE been believing the cause is a McAfee update despite what they claim. I'm hoping that by posting about it here, I'll find someone else experiencing the same issue. I don't have Daemon Tools installed so I know it's not that but perhaps related. I've checked the device manager and all is ok from that aspect, Roxio is not installed and I never liked the Drag & Drop to CD crap so when I installed Nero, I left out InCD plus. The BSODs were also appearing before I installed Nero.

    Below are all of the drivers collected by latest dump.

    kd> lm
    start end module name
    804d7000 806eb500 nt # (pdb symbols) c:\websymbols\ntoskrnl.pdb\A3930799CDF74A3CA818CCF481C59BAB2\ntoskrnl.pdb
    806ec000 8070c380 hal (deferred)
    b59f1000 b5a1b180 kmixer (deferred)
    b633b000 b634f400 wdmaud (deferred)
    b6468000 b6476d80 sysaudio (deferred)
    b6508000 b652b000 Fastfat (deferred)
    b661b000 b662b6a0 MDP_VDD (deferred)
    b663c000 b66443e0 mfesmfk (deferred)
    b671c000 b675c280 HTTP (deferred)
    b6965000 b6976b80 mfeavfk (deferred)
    b6bf7000 b6c48480 srv (deferred)
    b6d11000 b6d3cd80 mrxdav (deferred)
    b6ef5000 b6ef8280 ndisuio (deferred)
    b72ce000 b72e5480 dump_atapi (deferred)
    b73ae000 b73cef00 ipnat (deferred)
    b73cf000 b73fe820 mfehidk T (no symbols)
    b73ff000 b746da00 mrxsmb (deferred)
    b746e000 b7498a00 rdbss (deferred)
    b7499000 b74bad00 afd (deferred)
    b74bb000 b74e2c00 netbt (deferred)
    b74e3000 b7507000 Mpfp (deferred)
    b7507000 b755ee80 tcpip (deferred)
    b755f000 b7571400 ipsec (deferred)
    b75b2000 b75b4f80 mouhid (deferred)
    b75ba000 b7656000 ctac32k (deferred)
    b7656000 b767d000 ctsfm2k (deferred)
    b767d000 b76aa000 emupia2k (deferred)
    b76aa000 b77ae000 ha10kx2k (deferred)
    b77c6000 b77c6b80 Null (deferred)
    b77cc000 b77f6000 hap16v2k (deferred)
    b7806000 b780a500 watchdog (deferred)
    b780e000 b7814f60 mfebopk (deferred)
    b7826000 b782c180 HIDPARSE (deferred)
    b9946000 b9948580 hidusb (deferred)
    b996e000 b99c6e80 update (deferred)
    b99c7000 b99f7100 rdpdr (deferred)
    b99f8000 b9a08e00 psched (deferred)
    b9a09000 b9a1f680 ndiswan (deferred)
    b9a3c000 b9a6f000 ctoss2k (deferred)
    b9a6f000 b9a92980 portcls (deferred)
    b9a93000 b9b0d000 ctaud2k (deferred)
    b9b0d000 b9b2fe80 USBPORT (deferred)
    b9b30000 b9b52680 ks (deferred)
    b9b53000 b9b6a000 AnyDVD (deferred)
    b9b6a000 b9b7d900 parport (deferred)
    b9b7e000 b9b91780 VIDEOPRT (deferred)
    b9b92000 ba2a9480 nv4_mini (deferred)
    ba2ba000 ba2c8d80 arp1394 (deferred)
    ba2ca000 ba2d2700 wanarp (deferred)
    ba2da000 ba2e2880 Fips (deferred)
    ba32a000 ba332700 netbios (deferred)
    ba33a000 ba342080 ipfltdrv (deferred)
    ba856000 ba858280 rasacd (deferred)
    ba85a000 ba85c900 Dxapi (deferred)
    badb6000 badb6c00 audstub (deferred)
    baed0000 baed8d80 HIDCLASS (deferred)
    bafd0000 bafd3c80 mssmbios (pdb symbols) c:\websymbols\mssmbios.pdb\CEAE494998B24A458588AE7866D1B9421\mssmbios.pdb
    bafe8000 bafea580 ndistapi (deferred)
    baffc000 baffe980 gameenum (deferred)
    bf800000 bf9c2800 win32k (deferred)
    bf9c3000 bf9d4580 dxg (deferred)
    bf9d5000 bff56900 nv4_disp (deferred)
    f7423000 f742c480 NDProxy (deferred)
    f7433000 f7444f00 sr (pdb symbols) c:\websymbols\sr.pdb\B2985B1EA5A340DCA067B59677B5CAAF1\sr.pdb
    f7445000 f7464780 fltmgr (deferred)
    f7465000 f747c800 SCSIPORT (deferred)
    f747d000 f749a000 viamraid (deferred)
    f749a000 f74b1480 atapi (deferred)
    f74b2000 f74d7700 dmio (deferred)
    f74d8000 f74f6880 ftdisk (deferred)
    f74f7000 f7505100 usbhub (deferred)
    f7507000 f7510f00 termdd (deferred)
    f7517000 f751f900 msgpc (deferred)
    f7527000 f7532d00 raspptp (deferred)
    f7537000 f7541200 raspppoe (deferred)
    f7547000 f7553880 rasl2tp (deferred)
    f7557000 f7561380 imapi (deferred)
    f7567000 f7576180 nic1394 (deferred)
    f7577000 f7585b80 drmk (deferred)
    f7587000 f7595080 redbook (deferred)
    f7597000 f75a7a80 pci (deferred)
    f75a8000 f75d5d80 ACPI (deferred)
    f75f7000 f75ffc00 isapnp (deferred)
    f7607000 f7615e80 ohci1394 (deferred)
    f7617000 f7624000 1394BUS (deferred)
    f7627000 f7631500 MountMgr (deferred)
    f7637000 f7643c80 VolSnap (deferred)
    f7647000 f764fe00 disk (deferred)
    f7657000 f7663200 CLASSPNP (deferred)
    f7667000 f766fde0 PxHelp20 (deferred)
    f7677000 f7681080 sisagp (deferred)
    f76c7000 f76cfd00 intelppm (deferred)
    f76d7000 f76e3e00 i8042prt (deferred)
    f76e7000 f76f6d80 serial (deferred)
    f76f7000 f7703180 cdrom (deferred)
    f7707000 f770d200 PCIIDEX (deferred)
    f770f000 f7713900 PartMgr (deferred)
    f772f000 f7734000 ElbyCDIO (deferred)
    f7737000 f773d780 USBSTOR (deferred)
    f7767000 f776d500 usbprint (deferred)
    f776f000 f7773080 epusbsto (deferred)
    f778f000 f7795000 kbdclass (deferred)
    f7797000 f779e000 fdc (deferred)
    f779f000 f77a3280 usbohci (deferred)
    f77a7000 f77ad800 usbehci (deferred)
    f77af000 f77b7000 sisnic (deferred)
    f77bf000 f77c7000 ctprxy2k (deferred)
    f77c7000 f77cc000 usbuhci (deferred)
    f77cf000 f77d3880 TDI (deferred)
    f77d7000 f77db580 ptilink (deferred)
    f77df000 f77e3080 raspti (deferred)
    f77e7000 f77eca00 mouclass (deferred)
    f77ef000 f77f4000 flpydisk (deferred)
    f7807000 f780c200 vga (deferred)
    f780f000 f7813a80 Msfs (deferred)
    f7817000 f781e880 Npfs (deferred)
    f7828000 f7842580 Mup (deferred)
    f7843000 f786fa80 NDIS (deferred)
    f7870000 f7886780 KSecDD (deferred)
    f7887000 f7896900 Cdfs (deferred)
    f7897000 f789a000 BOOTVID (deferred)
    f791f000 f7921180 VCdRom (deferred)
    f794b000 f794ec80 serenum (deferred)
    f7987000 f7988b80 kdcom (deferred)
    f7989000 f798a100 WMILIB (deferred)
    f798b000 f798c700 dmload (deferred)
    f7999000 f799b000 ElbyDelay (deferred)
    f799b000 f799c100 swenum (deferred)
    f799d000 f799e280 USBD (deferred)
    f79a1000 f79a2f00 Fs_Rec (deferred)
    f79a3000 f79a4080 Beep (deferred)
    f79a5000 f79a6080 mnmdd (deferred)
    f79a7000 f79a8080 RDPCDD (deferred)
    f79d3000 f79d4100 dump_WMILIB (deferred)
    f79df000 f79e0a80 ParVdm (deferred)
    f7a4f000 f7a4fd00 pciide (deferred)
    f7aab000 f7aabd00 dxgthk (deferred)
    f7b52000 f7bde400 Ntfs (pdb symbols) c:\websymbols\ntfs.pdb\DEF98FCD9F6340F6B23B65421A08CFD72\ntfs.pdb

    Unloaded modules:
    b62c5000 b62f0000 kmixer.sys
    f7aad000 f7aae000 drmkaud.sys
    b6318000 b633b000 aec.sys
    b65ab000 b65b8000 DMusic.sys
    b6418000 b6426000 swmidi.sys
    f79d5000 f79d7000 splitter.sys
    ba31a000 ba323000 processr.sys
    f77ff000 f7804000 Cdaudio.SYS
    ba85a000 ba85d000 Sfloppy.SYS
     
  4. oldjoe

    oldjoe Well-Known Member

    Lose McAfee and try a different AV program. AVG Free is an excellent alternative.
     
  5. EME

    EME Member

    I'm considering that. McAfee is also a resource hog.
     
  6. Webslinger

    Webslinger Retired Moderator

    You still appear to have virtual drive software on your system.


    Do this please (use any original dvd) if you can without crashing:


    a) Ensure Anydvd is running.
    b) Put the problematic original movie dvd in your burner. Wait for Anydvd to scan the disc.
    c) Right click the red fox icon on your toolbar.
    d) Select "Create Logfile"
    e) Wait for Anydvd to create a log file.
    f) A pop-up screen will appear. Take note of the location where Anydvd created the logfile and the logfile's name. Click "ok".
    g) Go to your My Documents folder
    h) You will see a zip file called "Anydvd_Info_titleofmydisc.zip" (or something similar; see step f)
    i) When replying or posting in the Slysoft forums, look for the icon that looks like [​IMG] (in other words, look for the paperclip after clicking "quote" or when creating a new thread)
    j) If you don't see that paperclip icon, click the "go advanced" button. You should see that icon now. Click the paperclip.
    k) A small pop-up screen should appear (if it doesn't please ensure your browser is enabled to allow pop-ups from the Slysoft forums)
    l) Click the "Browse" button, and locate and select the .zip file you created.
    m) click "upload"
    n) Close the window. When you submit reply, or submit a new thread, the .zip file will be attached automatically for us to take a look at
     
  7. Fernando

    Fernando Redfox Development Team

    EME, if you could send me the .dmp file. Let's see, what I can do.

    The more dumps the better.
     
  8. EME

    EME Member

    Hmmm...I think I remember doing something with a virtual Cd app because I needed to mount an ISO but now I don't remember if that was at home or work. I'll check it out when I get home and post the log.

    I should be able to get the log without a crash as they happen at unexpected times, when AnyDVD is running, whether or not I've actively utilizing AnyDVD.
     
  9. EME

    EME Member

    That would be great! Attached are some of them.

    I've got a couple complete dumps but they're over a gig.
     

    Attached Files:

  10. Fernando

    Fernando Redfox Development Team

    You seem to be familiar with the windows kernel debugger.

    Could you load the corresponding long dump of Mini042308-01.dmp and call lmvu & lmvk and post the output here? If you don't have that file, use any other long dump file (which also saves user space).

    Thanks. I see the cause but don't see the originator.
     
  11. EME

    EME Member

    Somewhat familier. Google has been helping me out.

    That crash happened when I was zipping up a full dump and checking my yahoo email at the same time. I then removed AnyDVD and tried the same situation again without a crash. I went to bed while my dumps were buring to a DVD so I didn't retry the scenario with AnyDVD installed once again. I'll possibly try tonight.

    The results were to long so it's now attached.
     

    Attached Files:

  12. Fernando

    Fernando Redfox Development Team

    First of all thank you very much!

    Could you do it again with the command lmvu ? You incorrectly executed lmvl :)
     
  13. EME

    EME Member

    oops....

    Here is the correct 411.
     

    Attached Files:

  14. EME

    EME Member

    Here is the AnyDVD log.

    I have uninstalled VCDrom.sys; hopefully that was the cause.
     

    Attached Files:

    Last edited: Apr 25, 2008
  15. Webslinger

    Webslinger Retired Moderator

    Well, unfortunately, I'm not seeing anything terribly exciting. Anyway, maybe Fernando will find something.
     
  16. EME

    EME Member

    Everything ran perfectly from the time of my last post to late last night when I got the IRQL BSOD. I think that's at least the longest run I've had so far. I started up the erase/burn of a DVD-RW, for my dumps, before I went to bed but the process was unable to finish due to some random reboot. I didn't have time to reburn this morning so the dumps will have to wait until I get home.
     
  17. EME

    EME Member

    Fernando, attached is the latest info.

    Hopefully it'll provide some insight?

    Why does kmixer show up so many times? Is that normal?
     

    Attached Files:

  18. EME

    EME Member

    I may have narrowed it down to memory after all despite the multitude of tests I've run. It got to a point where I couldn't even complete a burn of my dumps to a dvd without a BSOD. I took out my 1GB stick and suddenly everything was working again. I'm now down to only 512Mb, which sucks, but plan on getting some more once I complete testing the weekend with McAfee reinstalled.
     
  19. Webslinger

    Webslinger Retired Moderator

    Yeah, actually a bad stick of ram is a very common cause of BSODs. Sorry that your ram is bad, but I'm happy you found the problem.