Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
74274 Views 258 Replies Latest reply: May 15, 2013 3:47 PM by Peacekeeper RSS Branched from an earlier discussion. Go to original post 1 ... 3 4 5 6 7 ... 26 Previous Next
  • thecreator Veteran 1,132 posts since
    Nov 6, 2003
    Currently Being Moderated
    40. Jul 21, 2011 4:54 PM (in response to Hayton)
    Re: Mcshield.exe High Virtual Memory Usage

    Hi Hayton,

     

    You seem to be running with version 2010 of McAfee Internet Security Suite.

     

    I am running with the latest version of McAfee Total Protection 2011 Beta, full of unwanted behavior.

     

    Even though I run with Real-Time Scanning off, but took a PrtScrn Snapshot of mine with it turned on. McAfee total Protection 2011 version has two Scan Settings. One for Boot. One for regular scanning. Boot can't be disabled.

     

    2011-07-21 - Real-Time Scanning Latest Version.JPG


    === thecreator - One of the people, that has a very good memory.

    See the McAfee Builds I am running at: https://community.mcafee.com/groups/mcafee-total-protection-beta/blog

    TheCreator's Installations


    Don't forget to Vote: https://community.mcafee.com/ideas/1341
    Like to See a Way to Limit CPU Usage for Real-Time Scanning
  • Hayton Volunteer Moderator 4,590 posts since
    Sep 27, 2010
    Currently Being Moderated
    41. Jul 21, 2011 7:23 PM (in response to thecreator)
    Re: Mcshield.exe High Virtual Memory Usage

    Yes, I have 2010. Looking at the 2011 interface I think I prefer the greater level of fine-tuning in the 2010 version.

     

    mcshield update :  now behaving better - except when opening and using Chrome (like now). Changing those settings definitely helped, to some extent at least.

     

    I've been looking through the tools available from SysInternals, and I've found something that might be useful, if anyone else wants to download it and give it a go : ProcDump - from http://technet.microsoft.com/en-us/sysinternals/dd996900

     

    ProcDump is a command-line utility whose primary purpose is monitoring an application for CPU spikes and generating crash dumps during a spike that an administrator or developer can use to determine the cause of the spike. ProcDump also includes hung window monitoring (using the same definition of a window hang that Windows and Task Manager use), unhandled exception monitoring and can generate dumps based on the values of system performance counters. It also can serve as a general process dump utility that you can embed in other scripts.

     

    It's command-line, so presumably needs to be run from a DOS window (you might get away with running it with a short argument list from Start-->Run). I don't know whether this definition of a "cpu spike" quite describes the runaway cpu hogging that mcshield is guilty of, but it might be worth a try.


    Volunteer Moderator  Leeds, UK
    No PM's please
  • Hayton Volunteer Moderator 4,590 posts since
    Sep 27, 2010
    Currently Being Moderated
    42. Jul 21, 2011 10:05 PM (in response to thecreator)
    Re: Mcshield.exe High Virtual Memory Usage

    @Anyone reporting problems with winlogon.exe : have a look at the snippet below, taken from a malwarecity report about a new botnet spreading by (among other means) getting users to click on a fake Java Update alert :

    On top of that, the bot proceeds to uninstalling other bots such as Cerberus, Blackshades, CyberGate, or OrgeneraL DDoS Bot Cryptosuite if found injected into winlogon.exe, csrss.exe and services.exe.

     

    According to the latest VirusTotal report (HERE) this is detected by McAfee as Artemis!B2282DE189F1, so you should perhaps run a quick scan to check you're okay.

     

    Message was edited by: Hayton on 22/07/11 04:05:31 IST

    Volunteer Moderator  Leeds, UK
    No PM's please
  • jmckee Apprentice 220 posts since
    Jan 12, 2010
    Currently Being Moderated
    43. Jul 22, 2011 2:06 AM (in response to Hayton)
    Re: Mcshield.exe High Virtual Memory Usage

    Hayton wrote:

     

    @Anyone reporting problems with winlogon.exe : have a look at the snippet below, taken from a malwarecity report about a new botnet spreading by (among other means) getting users to click on a fake Java Update alert :

    On top of that, the bot proceeds to uninstalling other bots such as Cerberus, Blackshades, CyberGate, or OrgeneraL DDoS Bot Cryptosuite if found injected into winlogon.exe, csrss.exe and services.exe.

     

    According to the latest VirusTotal report (HERE) this is detected by McAfee as Artemis!B2282DE189F1, so you should perhaps run a quick scan to check you're okay.

     

    Message was edited by: Hayton on 22/07/11 04:05:31 IST

     

     

     

    At least in my case , that is not the cause. A complete uninstall / reinstall on 6/23 did not solve the issue. A scan has been run and nothing was found.

     

    Message was edited by: jmckee on 7/22/11 3:06:00 AM EDT
  • islandgirl Apprentice 209 posts since
    Oct 14, 2009
    Currently Being Moderated
    44. Jul 25, 2011 8:14 AM (in response to jmckee)
    Re: Mcshield.exe High Virtual Memory Usage

    Hello Spyron, Peacekeepr, jwolford and all again - Its been  while....

    Just thought I'd throw in my observations going back a few weeks - namely that mcshield.exe IS using a lot of memory and its only started doing it realtively recently ( say 6 weeks ago? )

     

    I see it going as highly as 280,000 sometimes - though not often. After reboot it goes steadily up and up  for about 10 minutes, then stays steady at - and I'm giving you right now numbers - 71,200.. The only process running higher than this if Firefox. 

     

    Does this seem high to you? t times, it has gone so high that the system locks up completely - shutting down the process is the only way I'm running. I've been away for a few weeks so can't say this has happened in the last week or so, but it was certainly happeneing back in mid June.

     

    Security Center Version 11

    Build  11.0.572

     

    Virus Scan 15

    Vuild 15.0.291

    DAT 6317     \

     

    Firewall 12

    Build 12.0.338     

     

    XP SP3

     

    On current observation, as I was writing this message,  the 71,000 suddenly dropped down to 29,000 ( no reason for this - all I ws doing was typing this message, and its racking up again. Now at 34,600.

    10 minutes later now at 57,300

     

    I'm quite ready to be told this is all normal! Just grateful for some feedback

     

    Message was edited by: islandgirl on 7/25/11 7:14:51 AM GMT-06:00
  • Peacekeeper Volunteer Moderator 21,347 posts since
    Nov 23, 2002
    Currently Being Moderated
    45. Jul 25, 2011 2:57 PM (in response to islandgirl)
    Re: Mcshield.exe High Virtual Memory Usage

    Not usual mine maxs out at 34K when scanning We will talk about it today. What is your ram size?


    Tony
    Volunteer Moderator
    Mcafee Total Protection 7.0 beta, Windows 8 64bit
    No Unrequested PMs please
    Do you have an idea for improving McAfee products? Please share it in the new Ideas community space!  NOTE: You must register an account first.

  • islandgirl Apprentice 209 posts since
    Oct 14, 2009
    Currently Being Moderated
    46. Jul 25, 2011 3:00 PM (in response to Peacekeeper)
    Re: Mcshield.exe High Virtual Memory Usage

    2Gb. In the course of the day McShield.exe has gone down to 12,000   - which is where it should be.  Strange,.

     

    I will reboot and see what happens. 

  • islandgirl Apprentice 209 posts since
    Oct 14, 2009
    Currently Being Moderated
    47. Jul 25, 2011 3:16 PM (in response to islandgirl)
    Re: Mcshield.exe High Virtual Memory Usage

    rebooted and the moment i started Firefox it shot up to around 320,000. Nothing else open.  Then dropped down again to around 33,000 then rose to around 60,000. Ten minutes or so later - with no browinsg in Firefox, just sitting open now dropped to 32,000

  • blarty-fargo Newcomer 39 posts since
    Jun 18, 2011
    Currently Being Moderated
    48. Jul 25, 2011 3:24 PM (in response to islandgirl)
    Re: Mcshield.exe High Virtual Memory Usage

    I am lurking on this forum to see how another thread is going - when I spotted this one.

     

    Has anyone investigated/checked/considered what version of the C++ library is installed on PC's that are having the problems?

     

    Just a thought...

  • thecreator Veteran 1,132 posts since
    Nov 6, 2003
    Currently Being Moderated
    49. Jul 25, 2011 4:33 PM (in response to islandgirl)
    Re: Mcshield.exe High Virtual Memory Usage

    islandgirl wrote:

     

    rebooted and the moment i started Firefox it shot up to around 320,000. Nothing else open.  Then dropped down again to around 33,000 then rose to around 60,000. Ten minutes or so later - with no browinsg in Firefox, just sitting open now dropped to 32,000

    Hi islandgirl and All,

     

    Everyone is complaining about Mcshield.exe memory usage. When is the last time, you have done maintenance on the Hard Drive and operating system?

     

    By maintenance, I mean, manually cleaning out your \Temp folders, deleting all possible files and sub-folders. Running Disk Cleanup. Cleaning the caches of FireFox, Java and Adobe Flash Player. Running Chkdsk and defragmenting the Hard Drive.

    Cleaned the History List?


    === thecreator - One of the people, that has a very good memory.

    See the McAfee Builds I am running at: https://community.mcafee.com/groups/mcafee-total-protection-beta/blog

    TheCreator's Installations


    Don't forget to Vote: https://community.mcafee.com/ideas/1341
    Like to See a Way to Limit CPU Usage for Real-Time Scanning
1 ... 3 4 5 6 7 ... 26 Previous Next

Actions

More Like This

  • Retrieving data ...

Bookmarked By (3)