We help IT Professionals succeed at work.

What is mfebcdata?

RogersRetail
RogersRetail asked
on
Hi all,

Recently, we have had some Windows 2003 servers crash to a grey screen that appears upon bootup (no CTRL-ALT-DEL prompt). As we search for a resolution, we noticed that the following file has appeared:

C:\windows\mfebcdata

It seems to have been the last file copied/added/referenced before the machine rebooted and came up with the grey screen issue.

Anyone know what it is? Can't seem to find any reference to it online apart from being listed in files that people show using hijackthis, etc, etc.

Thanks!
Comment
Watch Question

I would suggest to logon in safe mode and run antivirus scan as a starter.

Rename the file if the antivirus does not detect anything.

Author

Commented:
Yeah, first thing we tried on the machines. Nothing comes up. Deleted the file too and the machines will still not boot to a logon screen.

Just wondering what that file is associated with.
Do you still have a chance to login via safe mode?

I found a similar incident and it was linked to malware/virus, therefore suggesting you to read and follow the instruction below as I am not trained to support using combofix.
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Author

Commented:
The problem we were having had to do with Kace Kontainers software.  This isn't really the solution but it's just easier to choose this as the solution than to cancel the question.