How to solve "Your computer is at risk: Real-Time Scanning is off"

[jdbenavent]

Hi

Today the McAfee Real-Time scanning stopped running and a red alert is shown.

When I click on On, it turns to green for just one second and turn back ro red.

I unistalled and reinstalled McAfee Total Protection... but the problem persists!.

I contacted McAfee customer service and suggested me to uninstall and reinstall the McAfee Total Protection using MCRP.... the problem persists!

In the event viewer the following error message is repeated today near 64 times (16 times in the last hour):

Process **\McAPExe.exe pid (####) contained unsigned or corrupted code and was blocked from performing a privileged operation with a McAfee driver.

I never had any problem with McAfee Total Protection before.

Can anybody help me?

Thanx in advance

P.D: My box is MS-Windows 7 - 64 bit. 16 GB RAM

[exbrit]

Moved this to VirusScan as a better spot.

Windows 7 SP1 I hope?

Try running the Virtual Technician to see if it finds and fixes any issues:  http://mvt.mcafee.com/

[jdbenavent]

Yes, Windows 7 SP1

[jdbenavent]

Hi Ex_Brit.

I ran MVT. It detects there is a missing process, it tries to repair but... the fix does not work... the problem persists!

Process	1 process(s) incorrect
Expected process not running Expected : running Existing : not running C:\Program Files\mcafee\msc\mcapexe.exe Expected process running C:\Program Files\Common Files\McAfee\Platform\mcsvchost\mcsvhost.exe Expected process running C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe

[selvan]

Hi

Please check the version of McAfee Security Center Installed. To check this Open McAfee GUI > Click About link at the bottom right.

Post back the version of Security Center.

[jdbenavent]

McAfee Security Center version is 14.0 (compilation: 14.0.207)

[selvan]

Hi,

Run Getsusp tool and make sure PC does not have any Suspicious files (getsusp.mcafee.com)

Run Stinger and ensure no Infections are found (stinger.mcafee.com)

Check the list of installed programs and see if there are any third party Anti-Virus applications installed.

[jdbenavent]

Getsusp and Stinger report no problem.

[exbrit]

Let Selvan take it from here, he's with support.

[jdbenavent]

As I cannot add this to the original post..

I noticed that the "Security History" shows the incoming connections from IP addresses 161.69.12,13 and 161.69.13.152 are blocked. But according to

http://whois.arin.net/rest/net/NET-161-69-0-0-1/pft

these IP addresses belong to McAfee, Inc!

I think it is weird, don't I?