cancel
Showing results for 
Search instead for 
Did you mean: 
RickIA
Level 9
Report Inappropriate Content
Message 1 of 9

VirusScan 8.7.0 Hotfix 2 & Windows 7 Crashing

I'm currently running EPO 4.5 deploying 8.7.0 as well as hotfix 1&2 through McAfee Agent 4.5.0.1270. I keep getting the below error aaprox. 2-3 times daily.

Faulting application name: McShield.exe, version: 14.1.0.515, time stamp: 0x4a79054b
Faulting module name: mscan64a.dll, version: 5.300.0.2777, time stamp: 0x486bbc99
Exception code: 0xc0000005
Fault offset: 0x00000000002f0cf5
Faulting process id: 0x590
Faulting application start time: 0x01ca46b9afef0b25
Faulting application path: C:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\McShield.exe
Faulting module path: C:\Program Files (x86)\Common Files\McAfee\Engine\x64\mscan64a.dll
Report Id: 8239c773-b2b3-11de-960a-005056c00008

Previous event in the log:

VSCORE.14.1.0.515
Exception Code : 0X00000000C0000005
Exception Address : 0X00000000122F0CF5
Exception Parameters : 2
Param 1 = 0X0000000000000001
Param 2 = 0X0000000000000EF4

Running full release Windows 7 64-bit enterprise on 25+ workstations. Mine is the ONLY one to flag McAfee at startup with UAC so I turned that totally off but it seem like now I keep getting on-access scan disabled messages all day forcing me to reboot or at least log off to enable it once again. Hotfix 2 and Agent 1270 are only a week old, so I am sure there are some isses yet undiscovered but I have already COMPLETELY removed all virusscan software, agent, folder delete, etc. and even on the redeploy I am having these issues. Any thoughts?
Tags (4)
8 Replies
shsiow
Level 7
Report Inappropriate Content
Message 2 of 9

RE: VirusScan 8.7.0 Hotfix 2 & Windows 7 Crashing

I got the same error. Anyone out there share the same fake like us?
PhilR
Level 12
Report Inappropriate Content
Message 3 of 9

RE: VirusScan 8.7.0 Hotfix 2 & Windows 7 Crashing

Make sure you have scan engine 5400 checked into ePO and deployed.

RE: VirusScan 8.7.0 Hotfix 2 & Windows 7 Crashing

Hi,

we are same Problem, so i try to install manually the ENGINE 5400 but it doesn´t work.

i am testing on a few system with W7 all the same error.

what i missing is that no bufferoverflow function is in the Virusscan Konsole, did anyone know why???

thx.
PhilR
Level 12
Report Inappropriate Content
Message 5 of 9

RE: VirusScan 8.7.0 Hotfix 2 & Windows 7 Crashing

The 64-bit 5400 engine HAS to be deployed via ePO, it will not install from the standalone installer.

McAfee deliberately disables buffer overflow on Windows 7 and Windows 2008 R2.

Phil
Highlighted

RE: VirusScan 8.7.0 Hotfix 2 & Windows 7 Crashing

thx for this power- and helpful information. I am testing, when okay i deploy.

thank you well.
RickIA
Level 9
Report Inappropriate Content
Message 7 of 9

RE: VirusScan 8.7.0 Hotfix 2 & Windows 7 Crashing

Looks like the 5400 scan engine works great for curing my crashing, however I still have zero custom policy enforcement with any of my Windows 7 boxes, including locking down the local clients with passwords.

Re: RE: VirusScan 8.7.0 Hotfix 2 & Windows 7 Crashing

Hi

As far as I can work it out it is an issue withthe extensions.

  1. Obtain the latest Extensions for:
    • MA  (4.5.0.165)
    • VSE 8.7, Patch 2 (8.7.0.171) or later (I would actually download the Patch 2 repost)

      For downloading products, Service Packs, Patches, hotfixes or documentation:
      Visit http://www.mcafee.com. For instructions, see KnowledgeBase document KB54808.

      For downloading Patches only:
      Visit the https://mysupport.mcafee.com. For instructions, see KnowledgeBase document KB56057.


       
  2. Install the extensions.
  3. Delete the Deployment and the Update Task 
  4. Create the new Deployment and the Update Task

    For detailed ePO instructions see:

    • PD21812 - McAfee ePolicy Orchestrator 4.5 Product Guide
    • PD20053 - McAfee ePolicy Orchestrator 4.0.2 Product Guide 

Re: RE: VirusScan 8.7.0 Hotfix 2 & Windows 7 Crashing

That's correct, you have to use the MA 4.5 extensions or the MA 4.0 Patch 3 extensions to manage Windows 7 systems.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator