Showing results for 
Search instead for 
Did you mean: 
Level 7
Report Inappropriate Content
Message 11 of 11

Re: Howto kill mcafee services from the command line?

Jump to solution

It's under orchestration, and I am aware of the fact that ePO periodically overwrites my config and restarts OAS.  However, in this particular case, MFEConsole on the endpoint consistently reported that OAS was NOT active at the time (I even restarted MFEConsole to make sure) yet there was mcshield.exe pegged on one core.

I just repeated the process described above (restarted MFEConsole, unlocked the admin i/f on it, and unchecked the On-Access Scan and Access Protection checkboxes under "Threat Prevention" ).  McShield is still eating up a full core and continues to eat it (it's not winding down).

Stack trace of busy thread (via Process Explorer):


According to Process Monitor, it's recursively scanning my filesystem (millions of files), despite my not having kicked off a manual scan *AND* OAS being disabled.  I'd be tempted to think that the fact of my resizing the partition just before mcshield.exe went bananas might have been misinterpreted as insertion of a removable drive and that there is a policy to scan removable drives upon insertion -- though I see no evidence of such an option/policy in MFEConsole.

The solution was (for now) to add the volume(s) in question to the excluded directory lists for now and mcschield.exe quieted down.  ePO will eventually overwrite my exclusions.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community