1 2 Previous Next 12 Replies Latest reply on Apr 27, 2010 6:07 AM by Peter M

    Send to McAfee Feature. Error: "This item could not be sent to McAfee due to a network problem"

      I am using Windows XP Professional SP3

       

      - McAfee SecurityCenter V9.15 Build 9.15.135 AffId 108
      - VirusScan V13.15 Build 13.15.102 AffId 108
      - Engine Version: 5301.4018
      - DAT Version: 5797.0000
      - Personal Firewall V10.15 Build 10.15.103 AffId 108

       

      I have a problem with the following McAfee Security Center Feature:


      (Quarantained Files) -> Restore\Files

      Check box to select a file

      Selection: I want to

      ...
      ...
      Send to McAfee


      I always receive the error message: "This item could not be sent to McAfee due to a network problem"

       

      I monitored the involved processes via "Process Explorer" by SysInternals and found out the following

       

      McAfee MISP Shell (V9.15.0126.0000) located at c:\Program Files\McAfee\MSC\mcshell.exe

      tries to establish a TCP/IP Connection

       

      From:MACHINENAME:4962
      To: dalexwsavin1.avertlabs.com:smtp

       

      I can ping "dalexwsavin1.avertlabs.com" (IP 205.227.136.235)

      "smtp" is not a port, but I assume that this is only a display thing and that it means "port 25"

       

      Windows FireWall
      "mcshell.exe" Full Access
      I even opened Port 4962 separately

       

      Disabled Windows Firewall entirely, just for testing
      Still the same error


      McAfee Firewall
      McAfee Firewall\Security Level = Standard

      McAfee Firewall\System Services
      HTTP (80), SSL (443), SMTP (25) are open
      McAfee Firewall\Program Permissions
      Except for the McAfee Uninstall do all McAfee Programs have full Access, including the "McAfee MISP Shell"

       

      I disabled McAfee Firewall entirely, just for testing

      Still the same error

       

      DSL Router Firewall

      I am connected to the Internet via AT&T U-Verse.
      The DSL Routers Firewall Settings are set to "Maximum Security", however, I set it the DSL Router Firewall to  "Allow all applications (DMZplus mode)" (open all ports) for the computer where I wanted to send files to McAfee from and tried to send a file again, but got the same error message again.

       

      I basically had all firewalls off and exposed the computer openly to the Internet and McAfee Security Center was still unable to send a file to McAfee.


      McAfee Virtual Technician
      Found 2 Issues; 2 Registry Values:

       

      Expected Registry Value not Present
      Expected : 1
      Existing : 0
      HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VSCore\On Access Scanner\MCShield\Configuration ScanCookies

       

      Expected Registry Value not Present
      Expected : 1
      Existing : 0
      HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VSCore\On Access Scanner\MCShield\Configuration\Default dwMacroHeuristicsLevel

       

      But those were not issues, because I disabled the check for Cookies (I work in Inet Advertising and don't like that you delete Non PII tracking cookies) and the Heuristic Scan (too much false positives, different issue for a different thread )

      It did not find anything else wrong. I also searched the FAQ and could not find anything useful there either.

       

      Any ideas what could be the problem? What services does the feature need? Are there any known special settings that could prevent it from working?

      I appreciate any suggestions and ideas. Thank you very much.

        1 2 Previous Next