Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
29879 Views 17 Replies Latest reply: Nov 24, 2009 3:51 AM by gloriousglenn RSS 1 2 Previous Next
Newcomer 6 posts since
Nov 6, 2009
Currently Being Moderated

Nov 6, 2009 4:38 AM

McAfee OAS: Disabled problem

Hi,

 

I am running VirusScan Enterprise 8.5.0i on a Windows Vista Business platform.  It is a standalone PC, not connected to a network/ePO.

 

The shield icon shows in the system tray with a red circle with a red line through it.  If I hover over the shield it shows "McAfee OAS: disabled".  If I right click on the shield and choose "Enable On-Access Scan", the red circle disappears for about 5 seconds and then reappears again.

 

This also causes an error within Windows Security Alerts stating that McAfee is turned off!  If I click on the "Turn on now" button, nothing happens!

 

Does anybody have any idea on how I can sort this out?

 

Regards

Glenn

  • tonyb99 Champion 3,844 posts since
    Apr 10, 2006
    Currently Being Moderated
    1. Nov 6, 2009 4:45 AM (in response to gloriousglenn)
    Re: McAfee OAS: Disabled problem

    Can you advise what patch level of vse 8.5 you are running



    McAfee Maniac (Volunteer Moderator)
    x1 4.5.4 ePolicy Orchestrator Server (Build 1082)
    x1 5.0.1 ePolicy Orchestrator Server (Build 228)
    x1 4.6.3 ePolicy Orchestrator Server (Build 197)
    x1 4.6.6 ePolicy Orchestrator Server (Build 176)
    Mcafee Agent 4.6.0.2292/4.6.0.2935/4.8.0.887
    Groupshield 7.0
    VSE 8.8.0.975 & 8.7.0.570 x 20000
    DLP Endpoint 9.2.1
    EEPC 6.2.1.315/7.0.1.354
    HIPS 8
    EMM 10.2
    x70 Sophos 10.2 Endpoint Security & Control





  • tonyb99 Champion 3,844 posts since
    Apr 10, 2006
    Currently Being Moderated
    3. Nov 6, 2009 5:44 AM (in response to gloriousglenn)
    Re: McAfee OAS: Disabled problem

    The patches are only available from the Mcafee business downloads section with a grant number thats provided to licenced customers, you need to obtain the VSE patch 8 from the licence holder of your installation.

    As some incentive VSE 8.5 with no patches ran so badly that patch 1 was released urgently afterwards, If you cant get a patch above at least 6 I would recommend you look at another scanner as the base level software will not be doing a good job and will be thrashing your PC.

     

     

    Thanks



    McAfee Maniac (Volunteer Moderator)
    x1 4.5.4 ePolicy Orchestrator Server (Build 1082)
    x1 5.0.1 ePolicy Orchestrator Server (Build 228)
    x1 4.6.3 ePolicy Orchestrator Server (Build 197)
    x1 4.6.6 ePolicy Orchestrator Server (Build 176)
    Mcafee Agent 4.6.0.2292/4.6.0.2935/4.8.0.887
    Groupshield 7.0
    VSE 8.8.0.975 & 8.7.0.570 x 20000
    DLP Endpoint 9.2.1
    EEPC 6.2.1.315/7.0.1.354
    HIPS 8
    EMM 10.2
    x70 Sophos 10.2 Endpoint Security & Control





  • wwarren McAfee SME 767 posts since
    Nov 3, 2009
    Currently Being Moderated
    4. Nov 6, 2009 10:51 AM (in response to gloriousglenn)
    Re: McAfee OAS: Disabled problem

    You definitely want to be on Patch 8 if using VSE 8.5i.

     

    For the symptom you report, whenever the on-access scanner is failing - whatever the circumstance - you can inspect the Application Event log for "McLogEvent" entries.

    If there are "McLogEvent" entries with an event ID higher than 5000 then that is indicative of a problem. The details of the event will give further clues as to what the problem is.

     

    You could then search the knowledgebase for more info on the event ID or the message in the Event details, or post it here

  • JThomas McAfee Employee 17 posts since
    Nov 5, 2009
    Currently Being Moderated
    6. Nov 13, 2009 4:09 AM (in response to gloriousglenn)
    Re: McAfee OAS: Disabled problem

    Login to https://secure.nai.com/apps/downloads/my_products/login.asp with your grant #.

    Once you are viewing the products available,click on the version of VSE you have.

    Once you agree to the terms, click on the patches tab.

    VSE 8.5 P8.zip is available.

  • tonyb99 Champion 3,844 posts since
    Apr 10, 2006
    Currently Being Moderated
    7. Nov 13, 2009 4:10 AM (in response to gloriousglenn)
    Re: McAfee OAS: Disabled problem

    go here: http://www.mcafee.com/uk/enterprise/downloads/index.html

    then choose the My Products download software login link

    put in your valid grant ( dont forget the -NAI on the end) and submit

    depending on what products you have you will now have some lind of link "view avialable downloads"

    look in endpoint security section choose virusscan enterprise

    agree to terms and conditions

    choose patches tab

    choose VirusScan Enterprise 8.5i Patch 8

     

    it will download, then unzip it and install as an admin user

     

    if you are missing some tabs somewhere try changing the browser you are using, works for me under FF3.6 and ie8



    McAfee Maniac (Volunteer Moderator)
    x1 4.5.4 ePolicy Orchestrator Server (Build 1082)
    x1 5.0.1 ePolicy Orchestrator Server (Build 228)
    x1 4.6.3 ePolicy Orchestrator Server (Build 197)
    x1 4.6.6 ePolicy Orchestrator Server (Build 176)
    Mcafee Agent 4.6.0.2292/4.6.0.2935/4.8.0.887
    Groupshield 7.0
    VSE 8.8.0.975 & 8.7.0.570 x 20000
    DLP Endpoint 9.2.1
    EEPC 6.2.1.315/7.0.1.354
    HIPS 8
    EMM 10.2
    x70 Sophos 10.2 Endpoint Security & Control





  • stuartg Newcomer 18 posts since
    Sep 9, 2008
    Currently Being Moderated
    8. Nov 13, 2009 5:40 AM (in response to tonyb99)
    Re: McAfee OAS: Disabled problem

    I'm not sure Patch 8 will solve it. I would try the following:

     

    Disable Access Protection: (VirusScan Console, Access Protection, Stop)

    Stop the McAfee Agent, Start>Run>services.msc

    Stop "McAfee Common Framework"

     

    If it won't stop then access protection has turned itself back on so go and stop that again, then stop common framework.

    Then:

     

    1. Click Start, Run, type regedit and click OK.
    2. Select the following registry key:

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mfeapfk]
    3. In the right pane, double-click ImagePath (REG_SZ) and change the Value data from system32\drivers\*.sys to c:\windows\system32\drivers\*.sys
    4. Repeat this for all McAfee services with incomplete ImagePath (REG_SZ) settings.

      These services are all named using the same format:

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mfexxxx]

      Where xxxx is the name for the relevant service.
    5. Close the registry editor.

     

    All the services that start with MFE and have imagepath as system32\**** need changing


    Chipotlaway is the way forward.
  • tonyb99 Champion 3,844 posts since
    Apr 10, 2006
    Currently Being Moderated
    9. Nov 13, 2009 9:36 AM (in response to stuartg)
    Re: McAfee OAS: Disabled problem

    Thats all very well stuart but he SHOULD be on the latest patch v8, VSE patch 0 is abysmal and I would not wish it on anyone.

    Once he has updated we can see if the issue persists and if its related to the filter drivers.



    McAfee Maniac (Volunteer Moderator)
    x1 4.5.4 ePolicy Orchestrator Server (Build 1082)
    x1 5.0.1 ePolicy Orchestrator Server (Build 228)
    x1 4.6.3 ePolicy Orchestrator Server (Build 197)
    x1 4.6.6 ePolicy Orchestrator Server (Build 176)
    Mcafee Agent 4.6.0.2292/4.6.0.2935/4.8.0.887
    Groupshield 7.0
    VSE 8.8.0.975 & 8.7.0.570 x 20000
    DLP Endpoint 9.2.1
    EEPC 6.2.1.315/7.0.1.354
    HIPS 8
    EMM 10.2
    x70 Sophos 10.2 Endpoint Security & Control





1 2 Previous Next

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points