https://login.veeam.com/en/oauth?client_id=nXojRrypJ8&redirect_uri=https%3A%2F%2Fwww.veeam.com%2Fservices%2Fauthentication%2Fredirect_url&response_type=code&scope=profile&state=eyJmaW5hbFJlZGlyZWN0TG9jYXRpb24iOiJodHRwczovL3d3dy52ZWVhbS5jb20va2IyMDY0IiwiaGFzaCI6IjdhNTJhMTYzLWZhYjgtNGRjOC1iMTJkLWU1ZGIzYmI3NDIyMSJ9
1-800-691-1991 | 9am - 8pm ET
EN

Hyper-V crash consistent Backups/Replicas due to McAfee mfehidk driver

Challenge

If McAfee FS minifilter MFEHIDK driver is loaded into Windows kernel, then it doesn’t allow any other driver to load at lower altitudes, it only allows other drivers to load at higher altitudes, supposedly because of proactive defense logic of McAfee Antivirus. 
Therefore Veeam CBT driver cannot track changes on CSV and backups/replicas are in crash consistent state.

Solution

Please uninstall McAfee Antivirus from all production Hyper-V nodes

More information

Driver function FltAttachVolume returns error 0xC00000BB when mfehidk mini-filter driver is loaded/installed.
VeeamFCT mini-filter driver can’t load at lower altitude(201900) and cannot attach to CSV volume.
McAfee PER/BUG number is 37418
 
KB ID:
2064
Product:
Veeam Backup & Replication
Version:
6.x 7.x 8.x
Published:
2015-09-29
Last Modified:
2020-08-13
Please rate how helpful this article was to you:
5 out of 5 based on 1 ratings
Thank you for helping us improve!
An error occurred during voting. Please try again later.

Couldn't find what you were looking for?

Below you can submit an idea for a new knowledge base article.
Report a typo on this page:

Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!

Spelling error in text

Knowledge base content request
By submitting, you agree that your personal data will be managed by Veeam in accordance with the Privacy Policy.

ty icon

Thank you!

We have received your request and our team will reach out to you shortly.

OK

error icon

Oops! Something went wrong.

Please go back try again later.