mcshield process is using 96% of the CPU when a web application is running!

[it1024]

Dear guys,

Clients should run a portable application which creates some folders where it resides plus a shortcut on the Desktop. The user double clicks the shortcut and then he/she is able to login to a web service. Up to now everything seems normal. Once the user chooses an item in the web service the mcshield.exe fills the CPU up to 96%. After investigation we found that it is On-Access scan which causes the CPU usage. However excluding the folder where the EXE file resides along with all the sub-folders does not solve the issue. How and what should we investigate more to find the real cause of this situation?

Thank you in advance.

McAfee Endpoint Security 

[yaz]

Hi it1024

Thanks for reaching out to us in our community.

I believe there are other processes as well that is being scanned apart from the actual executable that is excluded in the on access scan.

These unknown executable can be found by using McAfee Profiler tool. 

You can run profiler tool on this machine and you can track the other processes. 

Details on profiler could be found on the KB below.

https://kc.mcafee.com/corporate/index?page=content&id=KB69683

Once the processes are isolated, you can add them to On Access Scan exclusions or you can add them to low risk processes. 

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[it1024]

@yaz 

Thank you for your reply.

Actually it is the original EXE file which is being scanned. The EXE file runs the operations QueryNetworkOpenInformationFile and McAfee Scanner Service starts a non-stop scanning although the filename is excluded in Exclusions and is set to Low Risk in Process Settings and it is definitely On-Access policy which is causing the issue.