Showing results for 
Search instead for 
Did you mean: 

McAfee PortalShield for SharePoint


   We are getting a lot of these errors in the event log. We are using SharePoint 2010 SP2 on Windows 2008 R2.

    If anyone can offer help on how to get rid of them we would greatly appreciate it.

Log Name:      Application

Source:        Application Error

Date:          1/14/2016 8:19:02 AM

Event ID:      1000

Task Category: (100)

Level:         Error

Keywords:      Classic

User:          N/A



Faulting application name: PSPickerx64Srv.exe, version:, time stamp: 0x51d67fdd

Faulting module name: MSVCP80.dll, version: 8.0.50727.6229, time stamp: 0x4ec340fd

Exception code: 0xc0000005

Fault offset: 0x000000000002bb72

Faulting process id: 0x24f8

Faulting application start time: 0x01d14ece21645fa7

Faulting application path: C:\Program Files (x86)\McAfee\McAfee PortalShield\bin\PSPickerx64Srv.exe

Faulting module path: C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_88dcc0bf2fb1b808\MSVCP80.dll

2 Replies
Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: McAfee PortalShield for SharePoint

Discussion moved from Community Interface Help to Security for Microsoft Sharepoint (PortalShield)




Reliable Contributor Aidan
Reliable Contributor
Report Inappropriate Content
Message 3 of 3

Re: McAfee PortalShield for SharePoint

When I see this it usually that psPickerx64Srv process is trying to run with account with insuffient privileges to allow the process to launch or there are multiple ones listed in task manager (not closed during an upgrade possibly)  

You could try something like this - use the farm admin as a test  - this can be changed at any time and there is a section in the guide to assist in creating an account with least privileges required (appendix A) .... but give this a go ..

In Services applet - stop the McAfee Portalshield service.
Access task manager and ensure all our processes have left task manager. These are:-
Safeservice.exe, RPCServ.exe (2), several Postgres.exe processes and PSPickerx64Srv.exe.
(Kill any of these processes that remain).

Run Cmd prompt with fulll admin account - Right click CMD Icon and select "Run with Administrator" if User Access Control in enabled in Windows

In this cmd prompt window cd to <msms install folder>bin and run setsqlact.exe as follows

SetSqlAct.exe /USER=SPFarmAdmin /PASSWORD=ThePassword! /DOMAIN=SPDomain.
(Obviously substitute the correct entries for your Domain\SPFarmadmin and password)

It should state the user credentials have successfully been changed once done.

Now start the McAfee Portalshield Service again.

Open Interface
- OAS should show enabled
- Test OD Scan config  - you should be able to select "Scan Selected Folder" and expand Workspaces.
(This will be blank if wrong account is used)

Check Task Manager    

Safeservice.exe, RPCServ.exe (2), several Postgres.exe processes should all be loaded under system account
PSPickerx64Srv.exe - should be loaded under your SPFarmAdmin account.

As stated you can change the account at any time with SetSQLAct  -  but - that account must have sufficient privileges as per details in Guide.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator