cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 7
Report Inappropriate Content
Message 1 of 5

Event 7043 "The McAfee McShield service did not shut down properly after receiving a preshutdown control."

It doesn't happen on every shutdown, I can't tell what triggers it.  It doesn't seem to hang up the computer or slow the shutdown process, but it happens occasionally on every computer in the domain.

VSE 8.8.0

HIP 8.0

4 Replies
Highlighted

Re: Event 7043 "The McAfee McShield service did not shut down properly after receiving a preshu

We have this event ID 7043 as well.

  •  «The McAfee McShield service did not shut down properly after receiving a preshutdown control.»

Doesn't happen on every type of workstation.

 

Any hint on the direction we should dive into ?

 

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 5

Re: Event 7043 "The McAfee McShield service did not shut down properly after receiving a preshu

Hi @5d88e650 

Thank you for your post.

@ozzium  I have just noticed this post and I am not sure if you need any assistance currently with this. But in case you do or you have a solution, please do share it here.

I would first start by comparing the shutdown time and On Demand scan running on the machine. I would do that by comparing On Demand scan schedule time and the shutdown time.

Also, I will look into the On-Access Scan log and check the same with the shutdown time stamp to see if I can find out any anomalies there.

Both On Access Scan log and On Demand Scan log are available at : C:\ProgramData\McAfee\Endpoint Security\Logs.

Can you please confirm if these shutdown happened when there were activities being recorded in these logs. This would make more sense!

Also, It is important to understand how these Shutdown events were triggered on the days when the error is received. I sincerely hope this helps to find a good path for further investigation.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
Highlighted

Re: Event 7043 "The McAfee McShield service did not shut down properly after receiving a preshu

Thanks for the quick answer !

I checked, the only things we have are mentions of 'Not scanned (scan timed out)' around these timestamps, related to scanning svchost.exe and the LocalSystem font cache in OnAccessScanLog.txt. Could a timeout in the scanning engine cause the whole service to be unresponsive to «preshutdown controls» ?

Thanks again,
Highlighted

Re: Event 7043 "The McAfee McShield service did not shut down properly after receiving a preshu

Hi,

 

We looked down the path you mentioned (checking the logs for events around the same timestamps) but could not find anything related to shutting down, and these were not related to the machine shutting down itself.

 

Do you have :

* more hints on further diagnostic paths

* secret debugging flags to disclose

* internal bug tracker entries related to this

?

 

Thanks,

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community