cancel
Showing results for 
Search instead for 
Did you mean: 
Reliable Contributor User91972758
Reliable Contributor
Report Inappropriate Content
Message 1 of 8

No McAfee Icon in System Tray

Jump to solution

Hi All,

 

I'm running McAfee Agent Version 5.5.1.462 on some of my companies endpoints and the System Tray Icon is not appearing.

 

I open CMD.exe and run:

c:\program files\McAfee\Agent\Cmdagent.exe -s

to try try and jumpstart the status monitor, and the system icon still fails to appear. Even attempting to edit the McAfeeUpdaterUI registry key fails to bring the icon up.

 

From what I've understood is that a system re-boot also tends to resolve this, but I will need to check with our support team to see if this is possible. 

 

Has anyone else seen similar issues as of recent?

1 Solution

Accepted Solutions
Highlighted
McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 2 of 8

Re: No McAfee Icon in System Tray

Jump to solution

In c:\programdata\mcafee\logs, check the mfemactl log for any entries for mctray blocked. 

That would indicate possible dll injection blocking mctray from running.  You can also check the application event log for any faulting application errors.  If you see something like a faulting application error in that log referencing gdiplus.dll, then that is fixed in 5.6.1.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

7 Replies
Highlighted
McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 2 of 8

Re: No McAfee Icon in System Tray

Jump to solution

In c:\programdata\mcafee\logs, check the mfemactl log for any entries for mctray blocked. 

That would indicate possible dll injection blocking mctray from running.  You can also check the application event log for any faulting application errors.  If you see something like a faulting application error in that log referencing gdiplus.dll, then that is fixed in 5.6.1.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Reliable Contributor User91972758
Reliable Contributor
Report Inappropriate Content
Message 3 of 8

Re: No McAfee Icon in System Tray

Jump to solution

Hi @cdinet,

 

Looks like SVCHOST.exe is being blocked by the Protect MA Process since we have agent self protection on:

2019-06-17 16:38:49.371 mfemactl(4920.6952) mfemactl.Info: The process <c:\windows\system32\svchost.exe>(684) was blocked from accessing('WRITE, DELETE' (a)) <aac_object_process:c:\program files\mcafee\agent\x86\mfemactl.exe=""> via the rule
2019-06-17 16:38:49.387 mfemactl(4920.6952) mfemactl.Info: The process <c:\windows\system32\svchost.exe>(684) was blocked from accessing('WRITE, DELETE' (a)) <aac_object_process:c:\program files\mcafee\agent\x86\updaterui.exe=""> via the rule
2019-06-17 16:38:49.387 mfemactl(4920.6952) mfemactl.Info: The process <c:\windows\system32\svchost.exe>(684) was blocked from accessing('WRITE, DELETE' (a)) <aac_object_process:c:\program files\mcafee\agent\x86\mctray.exe=""> via the rule
2019-06-17 16:38:49.387 mfemactl(4920.6960) mfemactl.Info: The process <c:\windows\system32\svchost.exe>(684) was blocked from accessing('WRITE, DELETE' (a)) <aac_object_process:c:\program files\mcafee\agent\x86\updaterui.exe=""> via the rule
2019-06-17 16:38:49.402 mfemactl(4920.6964) mfemactl.Info: The process <c:\windows\system32\svchost.exe>(684) was blocked from accessing('WRITE, DELETE' (a)) <aac_object_process:c:\program files\mcafee\agent\x86\macompatsvc.exe=""> via the rule</aac_object_process:c:\program></c:\windows\system32\svchost.exe></aac_object_process:c:\program></c:\windows\system32\svchost.exe></aac_object_process:c:\program></c:\windows\system32\svchost.exe></aac_object_process:c:\program></c:\windows\system32\svchost.exe></aac_object_process:c:\program></c:\windows\system32\svchost.exe>

 

I'm looking into getting this taken care of now. Which this would explain the icon not appearing since UpdateUI.exe is blocked 😛

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 4 of 8

Re: No McAfee Icon in System Tray

Jump to solution

No, in that case svchost is the one blocked from injecting into our processes.  When we are blocking ourselves due to an actual injection, you will see our process as the one blocked, not the other way around.  So that is not the issue necessarily. Follow kb82170 to enable some debug mctray logging to see if it will show any errors.  Do you see any mctray crashing in the event logs? 

As for the fix supposed to be in 5.6.1 for the crashing I mentioned, that was an older entry I was looking at in the defect for it.  It actually won't be fixed till MA 6.0 (no eta).  So hopefully you aren't seeing the process crash.

I would suggest possibly still testing with the 5.6.1 agent, it could just be a bad install of the agent.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Reliable Contributor User91972758
Reliable Contributor
Report Inappropriate Content
Message 5 of 8

Re: No McAfee Icon in System Tray

Jump to solution

Ah, gotcha.

 

I'm not seeing any other blocks, however I did find this post KB today and it is a virtual system - https://kc.mcafee.com/corporate/index?page=content&id=KB83532&sns1214, could this be relative? I'm working on getting the McAfee Agent debug logging setup as well to look for any crashing events.

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 6 of 8

Re: No McAfee Icon in System Tray

Jump to solution

The agent policy has an option to show or not show the agent tray icon in a remote session.  It is off by default due to times when it is a citrix server, for example, there would be too many mctray processes running (one for each session).  In your case, I believe you said running updaterui.exe didn't help bring up the try icon, or did I misunderstand?  If that works, then yes, that KB applies.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Reliable Contributor User91972758
Reliable Contributor
Report Inappropriate Content
Message 7 of 8

Re: No McAfee Icon in System Tray

Jump to solution
You are correct. I attempted forcing the icon to appear by executing upadaterui.exe and unfortunately still no luck.

I was using RDP, which apparently is a terminal service, I've just never seen this occur on similar systems.
McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 8 of 8

Re: No McAfee Icon in System Tray

Jump to solution

Yea, there is something wrong when that won't invoke mctray, even in a remote session.  That's why I also suggested upgrading the agent to see if that resolves.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community