We have upgraded from VSE87 to 88 and then to VSE88 patch 1. We manage them trought ePO4.5.
We have found computer which have multiple scan64.exe process running that are not using any CPU but are just consuming RAM. At first , we tought it was a misconfigured ePO scanning task but we have found with process explorer that it could be related to an installation that as not been completed sucessfuly since every process is launch with /UninstallMAS.
Any Idea what might cause this issue and how to solve it?
Well, I have seen the following scenario:
- 3rd party application (hMail) configured to utilise scan64 to scan objects,every time a mail popped in, this spawned a process
You can cross reference your agent log (agent_machinename.log) with the windows event log to see if there is correlation between start of the scan64 process and a task being run by the McAfee Agent. If not then something else invokes the process (3rd Party most likely).
Thank's for your reply sbenedix
I have take a look at the agent log and the Windows event log. I have found nothing near the process stard time I have found using process explorer. I am preaty sure it is not an agent planned task. Maybe a 3rd party but if so, why would it use /UninstallMAS switch since it is used to remove anti- spyware module?
For me, it still look like someting went wrong with the upgrade to patch1
i'm starting noticing this on some of our machines (win2008r2 servers) the only "way" to "clean up" is reboot. this "issue" tend to be a memory leak problem.