Jump to content

e.denboer

Members
  • Content Count

    41
  • Joined

  • Last visited

About e.denboer

  • Rank
    Candidate

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. Hello Oleg, Incident is created, INC000009862629 Regards, Edwin
  2. Hi Oleg, I installed the new driver, but no, it doesn't solve the problem. The same error's are written in the event viewer.
  3. Hello Oleg, The test driver loaded successfully, i have nothing changed with Driver Signature checking.
  4. Hi Oleg, Kernel memory dump successfully created and uploaded. (Saving the file has taken a very long time and resulted in a gateway time-out. If an re-upload is necessary, please let me know!) Regards, Edwin
  5. Hi Oleg, I've made a mistake, sorry! I just looked into the folder Minidump, while a complete memory dump is stored somewhere else. I try it again with a kernel dump. A full memory dump is about 8 Gigabytes, a bit large for uploading. :-) Regards, Edwin
  6. Hello Oleg, The server was configured to create a kernel memory dump. Changing it to a complete memory dump does not change the size of the memory dump at all. Every memory dump is that small size! I've tried it twice. Is there a possibility to reproduce the error in the Kaspersky labs with the same configuration (Windows Server 2016 with Data deduplication enabled)? Regards, Edwin
  7. Hello Oleg, No problem. Filedump is created and uploaded! Regards, Edwin
  8. Hello Oleg, Yes, services are stopped, see attachment 1. Output from command fltmc instances in attachment 2. Regards, Edwin
  9. Hello, I cannot unload the klam driver: C:\Windows\system32>fltmc unload klam Unload failed with error: 0x801f0010 Do not detach the filter from the volume at this time. C:\Windows\system32>fltmc Filter Name Num Instances Altitude Frame ------------------------------ ------------- ------------ ----- vsepflt 49 328200 0 klam 17 320450 0 Cbafilt 16 261150 0 Datascrn 2 261000 0 storqosflt 0 244000 0 wcifs 0 189900 0 Dedup 47 180450 0 FileCrypt 0 141100 0 luafv 1 135000 0 Quota 0 125000 0 npsvctrig 1 46000 0 Wof 1 40700 0 C:\Windows\system32>fltmc unload klam Unload failed with error: 0x801f0010 Do not detach the filter from the volume at this time.
  10. Hello Oleg, Could you please describe in more detail the following step: unload the current KLAM driver instance (fltmc unload klam), do it from the Administrator console. Make sure it is unloaded (use "fltmc" command for it) Thanks in advance!
×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.