6 Replies Latest reply on Feb 3, 2010 3:39 AM by nbee

    OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

      Hi,

       

      I am facing a problem of system hanging due to OAS enable and disable every 1-2 mins. My Laptop hangs everytime because of this. I have VSE 8.0 and following is captured from McAfee shield .


      1/17/2010  12:00:11 AM McAfee OAS: disabled.
      1/17/2010  12:01:11 AM OK
      1/17/2010  12:02:49 AM McAfee OAS: disabled.
      1/17/2010  12:03:49 AM OK
      1/17/2010  12:05:25 AM McAfee OAS: disabled.
      1/17/2010  12:06:25 AM OK
      1/17/2010  12:08:03 AM McAfee OAS: disabled.
      1/17/2010  12:09:03 AM OK
      1/17/2010  12:10:39 AM McAfee OAS: disabled.
      1/17/2010  12:11:39 AM OK
      1/17/2010  12:13:15 AM McAfee OAS: disabled.
      1/17/2010  12:14:15 AM OK
      1/17/2010  12:15:53 AM McAfee OAS: disabled.
      1/17/2010  12:16:53 AM OK
      1/17/2010  12:18:29 AM McAfee OAS: disabled.
      1/17/2010  12:19:29 AM OK
      1/17/2010  12:21:07 AM McAfee OAS: disabled.
      1/17/2010  12:22:07 AM OK
      1/17/2010  12:23:43 AM McAfee OAS: disabled.
      1/17/2010  12:24:43 AM OK
      1/17/2010  12:26:21 AM McAfee OAS: disabled.
      1/17/2010  12:27:21 AM OK
      1/17/2010  12:28:57 AM McAfee OAS: disabled.
      1/17/2010  12:29:57 AM OK
      1/17/2010  12:31:35 AM McAfee OAS: disabled.
      1/17/2010  12:32:35 AM OK
      1/17/2010  12:34:11 AM McAfee OAS: disabled.
      1/17/2010  12:35:11 AM OK
      1/17/2010  12:36:47 AM McAfee OAS: disabled.
      1/17/2010  12:40:54 AM OK
      1/17/2010  12:40:55 AM McAfee OAS: disabled.
      1/17/2010  12:41:55 AM OK
      1/17/2010  12:43:33 AM McAfee OAS: disabled.
      1/17/2010  12:44:33 AM OK
      1/17/2010  12:46:09 AM McAfee OAS: disabled.
      1/17/2010  12:47:09 AM OK
      1/17/2010  12:48:47 AM McAfee OAS: disabled.
      1/17/2010  12:49:47 AM OK
      1/17/2010  12:51:23 AM McAfee OAS: disabled.
      1/17/2010  12:52:23 AM OK
      1/17/2010  12:54:01 AM McAfee OAS: disabled.
      1/17/2010  12:55:01 AM OK
      1/17/2010  12:56:37 AM McAfee OAS: disabled.
      1/17/2010  12:57:37 AM OK
      1/17/2010  12:59:15 AM McAfee OAS: disabled.
      1/17/2010  1:00:15 AM OK
      1/17/2010  1:01:59 AM McAfee OAS: disabled.
      1/17/2010  1:02:59 AM OK
      1/17/2010  1:04:52 AM McAfee OAS: disabled.
      1/17/2010  1:05:51 AM OK
      1/17/2010  1:05:53 AM McAfee OAS: disabled.

       

      This started from 1/14/2010 when 5860 DAT was updated in system.

       

      Following is OnAccessScanLog is attached.

       

      Problem is I think Backdoor-ALD which is removed from DAT version 5860 and ahead and my laptop is infected by this...

       

      Please let me know how to fix this problem

        • 1. Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

          I'm curious why you're using an extra.dat with 115 definitions in it.That could be causing an issue with the scanner if the extra.dat has been created incorrectly or patched together by an admin.

           

          If you rename C:\Program Files\Common Files\McAfee\Engine\Extra.dat to something else (Note you may need to disable the "Access Protection" to do this, does the problem still occur?

           

          Also, what size is that extra.dat and how was it created?

          • 2. Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

            extra.dat file is 1 kb , I have no idea how it was created, as it mcafee was not installed by me.

             

            regards,

             

            Satya

            • 3. Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

              Problem of hanging and disabling OAS seems to be resolved when extra.dat was renamed, but I was using this configuration for last 8 months without any change. can you elaborate on what might be the reason

               

              thanks

               

              Satya

              • 4. Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

                The extra.dat that was being used was not 8 months old. At most it is 5 days old, perhaps even less. It also changed a few times during the log file.

                 

                Sometimes extra.dats can have compatability problems if they are buggy or have been modified by an Administrator. So I am still wondering where the extra.dat came from - is this McAfee installation managed via EPO and an Administrator is checking in extra.dats there?

                 

                Also, something to note is that V8 of McAfee VirusScan is End of Life at the end of March this year. At that time, support for the version will end - and dat updates will as well.

                • 5. Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

                  McAfee is managed and installed via EPO agent this is business laptop.

                   

                  Thanks

                  • 6. Re: OAS Enables and Disables Automatically by itself system Hangs after every 1-2 min.

                    I have the same symptoms with v8.5. No extra.dat currently. mcafee status: issue detected and OAS disabled messages.

                    2/2/2010  5:18:03 PM OK
                    2/2/2010  5:18:13 PM McAfee OAS: disabled.
                    2/2/2010  7:50:34 PM McAfee OAS: disabled.
                    2/2/2010  10:11:18 PM OK
                    2/2/2010  10:11:28 PM McAfee OAS: disabled.
                    2/3/2010  9:06:18 AM McAfee OAS: disabled.
                    2/3/2010  9:24:16 AM OK
                    2/3/2010  9:24:27 AM McAfee OAS: disabled.

                    Also EPO managed.

                    System Information 
                    Computer Name: <>
                      
                    McAfee Agent 
                    Version number: 4.5.0.1270
                    Managed 
                    Last security update check: 03/02/2010 09:24:22
                    Last agent-to-server communication: 03/02/2010 09:24:08
                    Agent to Server Communication Interval (every): 2 hours
                    Policy Enforcement Interval (every): 1 hour
                    Agent ID: {8F3C4E57-365F-4E14-B238-F506400A8D6A}
                    ePO Server/Agent Handler 
                    DNS Name: <>
                    IP Address: <>
                    Port Number: 9000
                      
                      
                    Host Intrusion Prevention 7.0.0 
                    Version number: 7.0.0.833
                    Language: English (United States)
                      
                      
                    McAfee VirusScan Enterprise Workstation 
                    Version number: 8.5.0.781
                    Language: Multiple
                    Virus Definitions 
                         Version: 5880.0000
                         Install Date: 03/02/2010 09:06:19
                         Created On: 02022010
                    Scan Engine 
                         Version: 5400.1158
                         Install Date: 19/11/2009 08:12:16
                    Hotfixes 
                         Version: 7
                         Install Date: 05/01/2009 12:10:05
                      
                      
                    McAfee AntiSpyware Enterprise Module 
                    Version number: 8.5.0.163
                    Language: Multiple