We have had problems with regular disruption to our Internet connection, and after diagnosing I have tracked it down to analytics.ccs.mcafee.com (184.108.40.206).
I have blocked this address on our router firewall, and the Internet connection is working again.
The problem was that approximately every 5 minutes the Internet connection would suffer significant lag for around a minute -- ping times would jump from 50-100ms to 500ms or even 1000ms+, slow all traffic from the Internet, and make online games unplayable due to the high lag.
Looking at some traffic graphs, this would correspond to a burst of outbound traffic to the internet. I correlated this to a wired network (it was not seen on the wireless network), and then down to a single computer. A corresponding burst of sent traffic was visible in Performance Monitor on that computer.
Running Wireshark on another computer to analyse the traffic, it was seen to be making an HTTPS connection to 220.127.116.11 (after a DNS lookup for analytics.ccs.mcafee.com), and then send up a large amount of data.
Blocking this connection has resolved the issue.
The computer sending the traffic causing the problem has McAfee Antivirus Plus installed (which a subscription was paid for), and is the only computer on the network with McAfee, so this is likely the culprit. (I guess it is also possible there is some hidden virus or trojan that is making a DDOS attack against McAfee / making you look bad, but I think that would be an unlikely coincidence).
Why does your paid for product behave so badly and cause such trouble with our Internet connection, why are you uploading a large amount of data from our computer every 5 minutes, and is there any way to disable/stop your product from doing this (without having to block it at the firewall)?
We have tried turning off every part/feature of the software, but it continue to send the traffic.
Since no one else is reporting this problem, it's likely to be something specific to your PC - My advice, uninstall, run MCPR, and install again?
Having same problem!
I noticed problems loading web pages and very bad response times using a hosted application (via citrix). Did the same trouble shooting steps as above, as well as watched resource monitor to identify McCSPServiceHost.exe is trying to talk to anaytics.ccs.mcafee.com. Link is a slowish DSL Link (1.2Mbps up, 330Kbps down), and the process seems to bury the upload. Ping times went from 55ms to 1500ms. Then a Google search brought me here.
McAfee came with computer (Dell laptop) so I don't have install disks per above, etc. Also, that seems kinda drastic.
Anybody have a solution?
You never reinstall from a disk. Use the online account.
Malware can cause the above problem as McAfee should never interfere with an internet connection under normal conditions.
Check for malware using Malwarebytes Free from the following link: Anti-Spyware/Malware/Hijacker Tools
It checks for some types of malware that regular antiviruses don't always cover.
Been on phone with MaAfee since I posted.
After I finally convinced them what was going on, they downloaded and ran a scan tool of some sort - it showed no problems. Tech gave up, told me to call the corporate number for support. Corporate says they can't work on it
The link I posted gives lots of hi8nts and links to help with possible malware. It certainly looks like malware to me.
If you can't run a scan at least follow the Hijackthis suggestions to enlist the help of an expert malware removal forum.
By the way, you can't disable data upload using the consumer software unless you put that machine's firewall in lockdown, then no traffic at all will get in or out, rendering it basically useless for Internet purposes.
You could re-contact Technical Support and escalate the issue to a higher level.
Business Portal can't help with consumer software being used, even in a Business environment.