locked
Memory Dump/kbdhid.sys RRS feed

  • Question

  • Hi All,

    Recently i have upgrade my windows 8.1 to windows 10 pro all works successfully however we use Intel McAfee Products as a antivirus server , to block usb and cd rom we use "data lost prevention".but after installing DLP following issues happens.

    Mouse and Keyboard Freeze
    Task bar hidden
    Cortana hide
    hang if system idles 5 mins

    The above issue comes randomly not a every time so at a time of moment i just restart system manually / Hard boot.When i uninstall DLP 9.4 Windows works fine.Unable to find any logs/clue on event viewer.

    I just raised an SR on McAfee they ask for "COMPLETE MEMORY DUMP" using "Forcing a System Crash from the Keyboard" so i just send DMP file.

    and below is there response.


    We have analyzed the Memory Dump and I could see following driver is causing the issue (refer attachments).

    Dump Result:

    "Probably caused by : kbdhid.sys ( kbdhid!KbdHidProcessCrashDump+1e0 )"

    It appears the issue is with Windows driver, I would request you to open a support ticket with Microsoft and share the same Memory Dump with them, please get the root cause analysis from Microsoft. So that, we can start the investigation further.

    but in my small knowledge "kbdhid.sys" appears in log file due to CRASH system from Keyboard.

    kindly help and elaborate


    • Moved by Just Karl Monday, August 15, 2016 1:59 PM Looking for the correct forum.
    Monday, August 15, 2016 5:23 AM

Answers

All replies

  • Memory Dump Analyze is here

    https://1drv.ms/f/s!AtEq7Mbg_T4iknsnj_xONh7q0bFb

    Monday, August 15, 2016 6:38 AM
  • Hello,

    The Windows Desktop Perfmon and Diagnostic tools forum is to discuss performance monitor (perfmon), resource monitor (resmon), and task manager, focusing on HOW-TO, Errors/Problems, and usage scenarios.

    As the question is off topic here, I am moving it to the Where is the Forum... forum.

    Karl


    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book: Windows PowerShell 2.0 Bible
    My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

    Monday, August 15, 2016 1:58 PM
  • Hello,

    I'd ask in one of the Windows 10 IT Pro forums.

    Karl


    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book: Windows PowerShell 2.0 Bible
    My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

    Monday, August 15, 2016 1:59 PM
  • Thanks for response.
    Tuesday, August 16, 2016 6:08 AM
  • You are welcome.

    Glad to help.

    Karl


    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book: Windows PowerShell 2.0 Bible
    My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

    Tuesday, August 16, 2016 1:44 PM