cancel
Showing results for 
Search instead for 
Did you mean: 

VSE Error Log (SVCHost.exe process blocked by McAfee access protection rule)

McAfee VSE Log: 12/12/2018 9:16:52 AM Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\WINDOWS\SYSTEM32\SVCHOST.EXE C:\PROGRAM FILES (X86)\MCAFEE\VIRUSSCAN ENTERPRISE\SHSTAT.EXE Common Standard Protection: Prevent termination of McAfee processes Action blocked: Terminate
1 Reply
McAfee Employee chealey
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: VSE Error Log (SVCHost.exe process blocked by McAfee access protection rule)

Hi @User27980213

This event means that SVCHOST was trying to gain access to the McAfee shstat.exe process and it was blocked from taking action on the McAfee service by Access Protection.

It is definitly not recommended to add svchost.exe as an exclusion but if you'd like to investigate what caused the violation, you would need to reproduce the issue and monitor the system (maybe with procmon). There is otherwise no way of knowing what svchost was doing and why is was trying to access a McAfee process.

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?
More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator