Bugcheck (7e) found when BVT is run with driver verifier

Technical Articles ID: KB93605
Last Modified: 2022-12-29 03:14:19 Etc/GMT

Environment

Application and Change Control (ACC) 8.3.2.149

Microsoft Windows

Problem

On rare occasions, 8.3.2 can cause a blue screen when MsMpEng.exe is running on the system. The issue happens on RFA, or when MsMpEng restarts.

Cause

ACC opens MsMpEng.exe to get the embedded name. Sometimes, it's not able to open that file, which leads to a Null pointer dereference.

Workaround

Remove MsMpEng.exe from the config SkipMsftList (validate the name), and add the same binary to Process passthru. After it's removed from SkipMsftList, ACC doesn't try to go into the path where the Null pointer dereferences happen.

To perform the steps locally:

Open a Command Line with Administrator rights.

Start > Run > Cmd as admin
Recover Solidcore CMD.

Sadmin recover
Remove MsMpEng.exe from the Solidcore config SkipMsftList.

Sadmin config set SkipMsftList=""
Add MSMPENG to process passthru:

Sadmin attr add -p MsMpEng.exe

To perform the steps through ePO:

Create a Client Task (Run Commands) using the following commands (sadmin isn't needed as part of these commands):

config set SkipMsftList=""
Add MsMpEng.exe to a Solidcore rule group under exclusions:
1. Click Menu, Solidcore Rules.
2. Create a rule group or add to the existing rule group.
3. Click Exclusions Tab.
4. Click Add, Advanced Options.
5. Select Exclude from Write protection and allow Script Execution.
6. Add MsMpEng.exe.
7. Save the rule group and add to your assigned policy.

Affected Products

Trellix Application and Change Control 8.3.x

Languages:

This article is available in the following languages:

Knowledge Center

Bugcheck (7e) found when BVT is run with driver verifier

Environment

Problem

Cause

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Bugcheck (7e) found when BVT is run with driver verifier

Environment

Problem

Cause

Workaround

Affected Products

Languages:

Choose your region

Title

Title