Symantec DLP agent is known to cause BSOD. I am running version 15.5 in my environment now and all fingers seem to be pointing to it.
Vfsmfd.sys crash param1 0x0000003b (0x00000000c0000005, 0xfffff8800cecb860, 0xfffff8801fcdfbf0, 0x0000000000000000)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
Help!
vfsmfd.sys is repeatedly crashing some system with BSOD in our environment.
I have the DMP file and i will appreciate it if you can review and help me resolve the issues. I have about 4 instances reported so far.
| param1 | 0x0000003b (0x00000000c0000005, 0xfffff8800cecb860, 0xfffff8801fcdfbf0, 0x0000000000000000) |
|---|
PatryckOk
Windows for home | Windows 10 | Settings
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
5 answers
Sort by: Most helpful
-
Anonymous
2019-10-14T14:14:53+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 10%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIL%3C/text%3E%3C/svg%3E)
Igor Leyko 111K Reputation points Independent Advisor2019-10-11T21:39:53+00:00 Hi Patrick,
this error code means either hardware or software works incorrectly. Error details say this may be caused by modified or damaged software module.
Please run off-line antivirus check using Defender, Kaspersky Rescue Disk, or any other similar program.
Run thorough memory check.
Run sfc /scannow
then
DISM.exe /Online /Cleanup-Image /RestoreHealth
commands from Windows PowerShell (administrator) environment.
-
Anonymous
2019-10-11T17:59:51+00:00 Use this link instead
-
Anonymous
2019-10-11T17:56:25+00:00 Here is the link to the file on Dropbox
https://www.dropbox.com/l/scl/AACD8ftmgY4H2-MeVHor\_5XIHoLTh8aIhho
-
DaveM121 889.2K Reputation points Independent Advisor2019-10-11T17:22:57+00:00 Hi Patryck, to diagnose the underlying issue, I need to analyse your Mini-dump file(s):
Open Windows File Explorer
Navigate to C:\Windows\Minidump
Copy any minidump files onto your Desktop, then zip those up
Upload the zip file to the Cloud (OneDrive, DropBox . . . etc.), then choose to share those and get a share link
Then post the link here to the zip file, so we can take a look for you . . .