cancel
Showing results for 
Search instead for 
Did you mean: 

OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

Hi,

I am facing a problem of system hanging due to OAS enable and disable every 1-2 mins. My Laptop hangs everytime because of this. I have VSE 8.0 and following is captured from McAfee shield .


1/17/2010  12:00:11 AM McAfee OAS: disabled.
1/17/2010  12:01:11 AM OK
1/17/2010  12:02:49 AM McAfee OAS: disabled.
1/17/2010  12:03:49 AM OK
1/17/2010  12:05:25 AM McAfee OAS: disabled.
1/17/2010  12:06:25 AM OK
1/17/2010  12:08:03 AM McAfee OAS: disabled.
1/17/2010  12:09:03 AM OK
1/17/2010  12:10:39 AM McAfee OAS: disabled.
1/17/2010  12:11:39 AM OK
1/17/2010  12:13:15 AM McAfee OAS: disabled.
1/17/2010  12:14:15 AM OK
1/17/2010  12:15:53 AM McAfee OAS: disabled.
1/17/2010  12:16:53 AM OK
1/17/2010  12:18:29 AM McAfee OAS: disabled.
1/17/2010  12:19:29 AM OK
1/17/2010  12:21:07 AM McAfee OAS: disabled.
1/17/2010  12:22:07 AM OK
1/17/2010  12:23:43 AM McAfee OAS: disabled.
1/17/2010  12:24:43 AM OK
1/17/2010  12:26:21 AM McAfee OAS: disabled.
1/17/2010  12:27:21 AM OK
1/17/2010  12:28:57 AM McAfee OAS: disabled.
1/17/2010  12:29:57 AM OK
1/17/2010  12:31:35 AM McAfee OAS: disabled.
1/17/2010  12:32:35 AM OK
1/17/2010  12:34:11 AM McAfee OAS: disabled.
1/17/2010  12:35:11 AM OK
1/17/2010  12:36:47 AM McAfee OAS: disabled.
1/17/2010  12:40:54 AM OK
1/17/2010  12:40:55 AM McAfee OAS: disabled.
1/17/2010  12:41:55 AM OK
1/17/2010  12:43:33 AM McAfee OAS: disabled.
1/17/2010  12:44:33 AM OK
1/17/2010  12:46:09 AM McAfee OAS: disabled.
1/17/2010  12:47:09 AM OK
1/17/2010  12:48:47 AM McAfee OAS: disabled.
1/17/2010  12:49:47 AM OK
1/17/2010  12:51:23 AM McAfee OAS: disabled.
1/17/2010  12:52:23 AM OK
1/17/2010  12:54:01 AM McAfee OAS: disabled.
1/17/2010  12:55:01 AM OK
1/17/2010  12:56:37 AM McAfee OAS: disabled.
1/17/2010  12:57:37 AM OK
1/17/2010  12:59:15 AM McAfee OAS: disabled.
1/17/2010  1:00:15 AM OK
1/17/2010  1:01:59 AM McAfee OAS: disabled.
1/17/2010  1:02:59 AM OK
1/17/2010  1:04:52 AM McAfee OAS: disabled.
1/17/2010  1:05:51 AM OK
1/17/2010  1:05:53 AM McAfee OAS: disabled.

This started from 1/14/2010 when 5860 DAT was updated in system.

Following is OnAccessScanLog is attached.

Problem is I think Backdoor-ALD which is removed from DAT version 5860 and ahead and my laptop is infected by this...

Please let me know how to fix this problem

6 Replies
Mal09
Level 12
Report Inappropriate Content
Message 2 of 7

Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

I'm curious why you're using an extra.dat with 115 definitions in it.That could be causing an issue with the scanner if the extra.dat has been created incorrectly or patched together by an admin.

If you rename C:\Program Files\Common Files\McAfee\Engine\Extra.dat to something else (Note you may need to disable the "Access Protection" to do this, does the problem still occur?

Also, what size is that extra.dat and how was it created?

Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

extra.dat file is 1 kb , I have no idea how it was created, as it mcafee was not installed by me.

regards,

Satya

Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

Problem of hanging and disabling OAS seems to be resolved when extra.dat was renamed, but I was using this configuration for last 8 months without any change. can you elaborate on what might be the reason

thanks

Satya

Mal09
Level 12
Report Inappropriate Content
Message 5 of 7

Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

The extra.dat that was being used was not 8 months old. At most it is 5 days old, perhaps even less. It also changed a few times during the log file.

Sometimes extra.dats can have compatability problems if they are buggy or have been modified by an Administrator. So I am still wondering where the extra.dat came from - is this McAfee installation managed via EPO and an Administrator is checking in extra.dats there?

Also, something to note is that V8 of McAfee VirusScan is End of Life at the end of March this year. At that time, support for the version will end - and dat updates will as well.

Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

McAfee is managed and installed via EPO agent this is business laptop.

Thanks

nbee
Level 7
Report Inappropriate Content
Message 7 of 7

Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

I have the same symptoms with v8.5. No extra.dat currently. mcafee status: issue detected and OAS disabled messages.

2/2/2010  5:18:03 PM OK
2/2/2010  5:18:13 PM McAfee OAS: disabled.
2/2/2010  7:50:34 PM McAfee OAS: disabled.
2/2/2010  10:11:18 PM OK
2/2/2010  10:11:28 PM McAfee OAS: disabled.
2/3/2010  9:06:18 AM McAfee OAS: disabled.
2/3/2010  9:24:16 AM OK
2/3/2010  9:24:27 AM McAfee OAS: disabled.

Also EPO managed.

System Information 
Computer Name: <>
  
McAfee Agent 
Version number: 4.5.0.1270
Managed 
Last security update check: 03/02/2010 09:24:22
Last agent-to-server communication: 03/02/2010 09:24:08
Agent to Server Communication Interval (every): 2 hours
Policy Enforcement Interval (every): 1 hour
Agent ID: {8F3C4E57-365F-4E14-B238-F506400A8D6A}
ePO Server/Agent Handler 
DNS Name: <>
IP Address: <>
Port Number: 9000
  
  
Host Intrusion Prevention 7.0.0 
Version number: 7.0.0.833
Language: English (United States)
  
  
McAfee VirusScan Enterprise Workstation 
Version number: 8.5.0.781
Language: Multiple
Virus Definitions 
     Version: 5880.0000
     Install Date: 03/02/2010 09:06:19
     Created On: 02022010
Scan Engine 
     Version: 5400.1158
     Install Date: 19/11/2009 08:12:16
Hotfixes 
     Version: 7
     Install Date: 05/01/2009 12:10:05
  
  
McAfee AntiSpyware Enterprise Module 
Version number: 8.5.0.163
Language: Multiple