Showing results for 
Search instead for 
Did you mean: 

OnAccess Scan (McShield.exe) Freezes System, Generates Windows Event ID 5051 and 1008

VirusScan Enterprise 8.7 Patch 4

Managed by ePO 4.0

We have a user reporting a recurring issue with one system in which McShield.exe is apparently consuming all system resources, then terminates generating Windows event ID 5051 and 1008 errors.

What's unusual is that Windows event 5051 is stating the timeouts are occuring on a RAID 5 device, but are not specifying any particular filename:

Object being scanned = \Device\HarddiskVolume4\ by C:\WINDOWS\Explorer.exe

I have already reviewed the following related threads:

According to 133545, this issue was supposed to be fixed by patch 4.  However, we have Patch 4 installed.  Furthermore, questions asking if Patch 4 actually fixes this issue remain unanswered.

We have already attempted:

Checked for hardware issues

Disabling ScanOnProcessEnable (this was already disabled at the ePO console)

Uninstalling and reinstalling VSE 8.7

Implementing the RunAtNormalPriority workaround

Where to go from here?

Was this issue supposed to be fixed by patch 4?



You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community