1 Reply Latest reply on Mar 28, 2009 1:35 PM by MajorWinters

    Vista Event log error message

      I quite often get the following message in my Event log:-

      Log Name: Application
      Source: McLogEvent
      Date: 22/03/2009 21:22:41
      Event ID: 5051
      Task Category: None
      Level: Error
      Keywords: Classic
      User: SYSTEM
      Computer: New-PC
      Description:
      A thread in process C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe took longer than 90000 ms to complete a request.
      The process will be terminated. Thread id : 4888 (0x1318)
      Thread address : 0x77779A94
      Thread message :

      Build VSCORE.14.0.0.405 / 5300.2777
      Object being scanned = \Device\HarddiskVolume6\Program Files\McAfee\VirusScan\DAT\5556.0\avvclean.dat
      by c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
      4(0)(0)
      4(0)(0)
      7200(0)(0)
      7595(0)(0)
      7005(0)(0)
      7004(0)(0)
      5006(0)(0)
      5004(0)(0)

      Event Xml:
      <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
      <Provider Name="McLogEvent" />
      <EventID Qualifiers="49152">5051</EventID>
      <Level>2</Level>
      <Task>0</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2009-03-22T21:22:41.000Z" />
      <EventRecordID>52042</EventRecordID>
      <Channel>Application</Channel>
      <Computer>New-PC</Computer>
      <Security UserID="S-1-5-18" />
      </System>
      <EventData>
      <Data>C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe</Data>
      <Data>90000</Data>
      <Data>4888 (0x1318)</Data>
      <Data>0x77779A94</Data>
      <Data>
      Build VSCORE.14.0.0.405 / 5300.2777
      Object being scanned = \Device\HarddiskVolume6\Program Files\McAfee\VirusScan\DAT\5556.0\avvclean.dat
      by c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
      4(0)(0)
      4(0)(0)
      7200(0)(0)
      7595(0)(0)
      7005(0)(0)
      7004(0)(0)
      5006(0)(0)
      5004(0)(0)
      </Data>
      </EventData>
      </Event>

      followed, one second later, by:-

      Log Name: System
      Source: Service Control Manager
      Date: 22/03/2009 21:22:42
      Event ID: 7031
      Task Category: None
      Level: Error
      Keywords: Classic
      User: N/A
      Computer: New-PC
      Description:
      The McAfee Real-time Scanner service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
      Event Xml:
      <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
      <Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
      <EventID Qualifiers="49152">7031</EventID>
      <Version>0</Version>
      <Level>2</Level>
      <Task>0</Task>
      <Opcode>0</Opcode>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2009-03-22T21:22:42.000Z" />
      <EventRecordID>9890500</EventRecordID>
      <Correlation />
      <Execution ProcessID="0" ThreadID="0" />
      <Channel>System</Channel>
      <Computer>New-PC</Computer>
      <Security />
      </System>
      <EventData>
      <Data Name="param1">McAfee Real-time Scanner</Data>
      <Data Name="param2">1</Data>
      <Data Name="param3">60000</Data>
      <Data Name="param4">1</Data>
      <Data Name="param5">Restart the service</Data>
      </EventData>
      </Event>

      It always about the same time in the evening, when I am running automatic backups, with Retrospect and Mozy.

      I am running Vista 32 bit SP1, and Security Centre 9.3, and Viruscan 13.3.