1 2 Previous Next 18 Replies Latest reply: Aug 15, 2013 4:18 PM by carytalbot RSS

    Problem with McAfee on MacOS

    Qetzlcoatl

      Hello!

      My system.log filled with like:

      Oct 13 13:16:47 Banjo kernel[0]: Virex Kext: "Scanner is not responding"
      Oct 13 13:16:53: --- last message repeated 19432 times ---
      Oct 13 13:16:53 Banjo kernel[0]: nner is not responding"
      Oct 13 13:16:53 Banjo kernel[0]: Virex Kext: "Scanner is not responding"
      Oct 13 13:17:23: --- last message repeated 100819 times ---
      Oct 13 13:17:23 Banjo kernel[0]: Virex Kext: "Scanner is not responding"
      Oct 13 13:17:23: --- last message repeated 2356 times ---

      My dual-core CPU 100% loaded by syslogd.

      What's going wrong?

      Notebook - MacBook Pro.

      OS - MacOS X 10.5.8.

      McAfee Security 1.0.0 Patch 1 (915), Anti-malware 9.0.0 Patch 1 (4156), Engine 5400.1158, DAT 6130.0000

        • 1. Re: Problem with McAfee on MacOS
          jmcleish

          Hi,

           

          I have moved your post to the "VirusScan Other" area for better attention.

           

          Regards

          Jane

          • 2. Re: Problem with McAfee on MacOS
            TGB

            Ditto here.

             

            Nov  6 06:31:21: --- last message repeated 5202 times ---

            Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "VireScannex Kexr ist: "Scanner not  isresponding"

            Nov  6 06:31:21 MAC-23 kernel[0]: not responding"

            Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

            Nov  6 06:31:21: --- last message repeated 64 times ---

            Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "Scanner is not respoVirndinex Kext: "Scanng"

            Nov  6 06:31:21 MAC-23 kernel[0]: er is not responding"

            Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

            Nov  6 06:31:21: --- last message repeated 94 times ---

            Nov  6 06:31:21 MAC-23 kernel[0]: nner is not responding"

            Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

            Nov  6 06:31:28: --- last message repeated 18558 times ---

            Nov  6 06:31:28 MAC-23 kernel[0]: nner is not responding"

            Nov  6 06:31:28 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

            Nov  6 06:31:28: --- last message repeated 278 times ---

            Nov  6 06:31:28 MAC-23 kernel[0]: Virex Kext: "Scanner is nVireot rx Kext: espo"Scannendinr is nog"

            Nov  6 06:31:28 MAC-23 kernel[0]: t responding"

            Nov  6 06:31:28 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

            Nov  6 06:31:29: --- last message repeated 4198 times ---

            Nov  6 06:31:29 MAC-23 kernel[0]: Virex Kext: "Scanner is not respondingVirex Kext: "S"

            Nov  6 06:31:29 MAC-23 kernel[0]: canner is not responding"

            Nov  6 06:31:29 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

            Nov  6 06:31:33: --- last message repeated 11438 times ---

            Nov  6 06:31:33 MAC-23 kernel[0]: Virex Kext: "Scanner is not respondinVirex Kext: "Scanner is not responding"

            Nov  6 06:31:33 MAC-23 kernel[0]: g"

            Nov  6 06:31:33 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

            Nov  6 06:31:33: --- last message repeated 71 times ---

            Nov  6 06:31:33 MAC-23 kernel[0]: Virex Kext: "Scanner is

            Nov  6 06:31:33 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

             

            Not just one either - got several hundred all being pounded by VirusScan and filling up their hard disks with out-of-control VirusScan logging.

            • 3. Re: Problem with McAfee on MacOS
              Sudeep Garg

              Hello,

               

              Are you still seeing this issue?

              It would good to look at McAfeeSecurity.log from /var/log to see what's going on.

              You can attach the log file here for review.

               

              Cheers,

              Sudeep

              • 4. Re: Problem with McAfee on MacOS [continuous logging to /var/audit]

                I'm not having that particular logging problem (too bad we don't have a record of its resolution, or cause).

                 

                My logging problem also involves LOTS of messages recorded, but to /var/audit logs.

                 

                I'm running Mac OSX 10.6.6, and

                McAfee Security

                Version 1.0.0 Patch 1 (915)

                Anti-malware

                Version: 9.0.0 Patch 1 (4156)

                Hotfix Version: HF622759

                Engine Version: 5400.1158

                DAT Version: 6228.0000

                DAT Creation Date: 1/12/11

                 

                My logging problem is that the /var/audit logs get an entry from "McAfee Reporter" every 2 seconds:

                 

                header,187,11,readlink(2),0,Sat Feb  5 10:17:37 2011, + 758 msec

                path,/usr/local/McAfee/AntiMalware/var/.Report

                path,/usr/local/McAfee/AntiMalware/var/.Report

                attribute,40777,root,Virex,234881029,841170,0

                subject,mut30225,mut30225,staff,mut30225,staff,203,2327216,50331650,0.0.0.0

                return,failure : Invalid argument,4294967295

                trailer,187

                 

                There is nothing in the directory "/usr/local/McAfee/AntiMalware/var/.Report"

                 

                The problem has something to do with "GroupName", according to clues in the /var/log/system.log

                (there's nothing special in /var/log/McAfeeSecurity.log, and it happens whether OAS is on or off):

                 

                com.apple.SystemStarter[24]: Starting McAfee Agent

                com.mcafee.virusscan.fmp[48]: Starting...

                com.mcafee.virusscan.fmp[48]: VShieldService Started...

                ...

                com.apple.launchd.peruser.502[113] (com.mcafee.menulet): Ignored this key: GroupName

                com.apple.launchd.peruser.502[113] (com.mcafee.reporter): Ignored this key: GroupName

                com.apple.launchd.peruser.502[113] (com.apple.ReportCrash): Falling back to default

                  Mach exception handler. Could not find: com.apple.ReportCrash.Self

                ...

                McAfee Reporter[137]: succeded to load the alert window nib

                McAfee Reporter[137]: Reporter: Notificationvalue for map key is not found for fm Id 100

                 

                • 5. Re: Problem with McAfee on MacOS
                  nordseabash

                  I'd like to add a "me, too", and possibly get some follow-up.

                   

                  We're seeing the same messages (see below) in Console.app's "All Messages" about 50x per second...

                  kernel     Virex Kext: "Scanner is not responding".

                   

                  @sudeepg - I do not see /var/log/McAfeeSecurity.log file.

                  However, I do have numerous entries for /usr/local/McAfee/AntiMalware/VShieldScanManager, logged here...

                  /Library/Logs/DiagnosticReports/VShieldScanManager_[date time stamp]_localhost.crash.

                   

                  ### BEGIN LOG SNIPPET... ####

                  Process:         VShieldScanManager [5990]

                  Path:            /usr/local/McAfee/AntiMalware/VShieldScanManager

                  Identifier:      VShieldScanManager

                  Version:         ??? (???)

                  Code Type:       X86 (Native)

                  Parent Process:  launchd [1]

                   

                  Date/Time:       2011-11-04 09:06:15.538 -0700

                  OS Version:      Mac OS X 10.6.8 (10K549)

                  Report Version:  6

                   

                  Exception Type:  EXC_BAD_ACCESS (SIGBUS)

                  Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000038

                  Crashed Thread:  6

                   

                  [ SKIPPING TO THREAD 6 ]

                  Thread 6 Crashed:

                  0   libSystem.B.dylib                       0x90d784cf flockfile + 22

                  1   libSystem.B.dylib                       0x90d6e629 fgets + 49

                  2   VShieldScanManager                      0x00007aeb TrustedProcesses::refreshTrustedProcessesList() + 119

                  3   VShieldScanManager                      0x00003fe6 ScanManager::setTrustedProcesses(void*) + 40

                  4   libSystem.B.dylib                       0x90d71259 _pthread_start + 345

                  5   libSystem.B.dylib                       0x90d710de thread_start + 34

                   

                  [ SKIPPING TO THREAD 6 STATE ]

                  Thread 6 crashed with X86 Thread State (32-bit):

                    eax: 0xb038d000  ebx: 0xb038d000  ecx: 0x90d49e82  edx: 0x00000000

                    edi: 0x00000001  esi: 0x00000000  ebp: 0xb038cdc8  esp: 0xb038cdb0

                     ss: 0x0000001f  efl: 0x00010282  eip: 0x90d784cf   cs: 0x00000017

                     ds: 0x0000001f   es: 0x0000001f   fs: 0x0000001f   gs: 0x00000037

                    cr2: 0x00000038

                   

                  #### END LOG SNIPPET ####

                   

                   

                  Affected clients are Mac OS X 10.6.8 (10K549) w/ the following McAfee product versions...

                  McAfee Security

                  Version 1.0.0 (676)

                  Anti-malware

                  Version: 9.0.0 (4012)

                  Engine Version: 5400.1158

                  DAT Version: 6519.0000

                  DAT Creation Date: 11/3/11

                   

                   

                  We have McAfee Security v1.1.0 (1309) for Lion-compatibility, which (on Lion/10.7.2/11C73) does not appear to have this issue/log into Console.

                  I will remove McAfee v1.0.0 from our 10.6.8 image, install McAfee v1.1.0, test and report back.

                  • 6. Re: Problem with McAfee on MacOS
                    daver

                    We're experiencing the same thing, 50+ messages per second:

                     

                    Virex Kext: "Scanner is not responding"

                     

                    McAfee Agent 4.5.0.1857, Anti-malware for Mac 9.1.0.4478

                     

                    running on OSX 10.6.8

                    • 7. Re: Problem with McAfee on MacOS
                      Sudeep Garg

                      Hello,

                       

                      Could you please install HF688476 on top of VSMAC9.1 or MSM 1.1 and report back the results?

                      There were some changes done in that HF related to performance.

                      • 8. Re: Problem with McAfee on MacOS
                        daver

                        our machines already have applied HF688476

                         

                        the problem persists, campus-wide, and many are complaining about performance.

                         

                        McAfeeSecurity.log is spewing this:

                         

                        Nov 29 12:34:37: --- last message repeated 25 times --- Nov 29 12:34:37 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:35:07: --- last message repeated 29 times --- Nov 29 12:35:07 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:35:37: --- last message repeated 25 times --- Nov 29 12:35:37 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:36:07: --- last message repeated 21 times --- Nov 29 12:36:07 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:36:37: --- last message repeated 29 times --- Nov 29 12:36:37 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:37:07: --- last message repeated 24 times --- Nov 29 12:37:07 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:37:37: --- last message repeated 29 times --- Nov 29 12:37:37 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:38:08: --- last message repeated 22 times --- Nov 29 12:38:08 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:38:38: --- last message repeated 24 times --- Nov 29 12:38:38 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:39:08: --- last message repeated 24 times --- Nov 29 12:39:08 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:39:38: --- last message repeated 29 times ---

                        • 9. Re: Problem with McAfee on MacOS
                          daver

                          When this happens, if I manually kill the /usr/local/McAfee/AntiMalware/VShieldUpdate process, everything calms down.  Eventually it starts happening again though, and the fmpd process seems to go into loops until VShieldUpdate is killed again.

                          1 2 Previous Next