Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
20980 Views 18 Replies Latest reply: Aug 15, 2013 4:18 PM by carytalbot RSS 1 2 Previous Next
Qetzlcoatl Newcomer 1 posts since
Oct 13, 2010
Currently Being Moderated

Oct 13, 2010 1:23 AM

Problem with McAfee on MacOS

Hello!

My system.log filled with like:

Oct 13 13:16:47 Banjo kernel[0]: Virex Kext: "Scanner is not responding"
Oct 13 13:16:53: --- last message repeated 19432 times ---
Oct 13 13:16:53 Banjo kernel[0]: nner is not responding"
Oct 13 13:16:53 Banjo kernel[0]: Virex Kext: "Scanner is not responding"
Oct 13 13:17:23: --- last message repeated 100819 times ---
Oct 13 13:17:23 Banjo kernel[0]: Virex Kext: "Scanner is not responding"
Oct 13 13:17:23: --- last message repeated 2356 times ---

My dual-core CPU 100% loaded by syslogd.

What's going wrong?

Notebook - MacBook Pro.

OS - MacOS X 10.5.8.

McAfee Security 1.0.0 Patch 1 (915), Anti-malware 9.0.0 Patch 1 (4156), Engine 5400.1158, DAT 6130.0000

  • jmcleish Volunteer Moderator 965 posts since
    Jun 20, 2003
    Currently Being Moderated
    1. Oct 13, 2010 3:53 AM (in response to Qetzlcoatl)
    Re: Problem with McAfee on MacOS

    Hi,

     

    I have moved your post to the "VirusScan Other" area for better attention.

     

    Regards

    Jane


    ---------------------------------------------------------
    ePO 4.6.7 (x86)
    ePO 4.6.7 (x64)
    VScan 8.7.0 p4,p5 
    VScan 8.8 p3
    VirusScan for Mac 9.2/9.6
    Groupshield 7.0.1
    EEPC v6.1.1/ v6.2.1
    MA  4.6.0.2292 / 4.6.0.3122/ 4.8.0.1500
    MA Mac  4.6.0.1694/ 4.8.0.887
  • TGB Newcomer 4 posts since
    Nov 5, 2010
    Currently Being Moderated
    2. Nov 5, 2010 2:38 PM (in response to Qetzlcoatl)
    Re: Problem with McAfee on MacOS

    Ditto here.

     

    Nov  6 06:31:21: --- last message repeated 5202 times ---

    Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "VireScannex Kexr ist: "Scanner not  isresponding"

    Nov  6 06:31:21 MAC-23 kernel[0]: not responding"

    Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

    Nov  6 06:31:21: --- last message repeated 64 times ---

    Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "Scanner is not respoVirndinex Kext: "Scanng"

    Nov  6 06:31:21 MAC-23 kernel[0]: er is not responding"

    Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

    Nov  6 06:31:21: --- last message repeated 94 times ---

    Nov  6 06:31:21 MAC-23 kernel[0]: nner is not responding"

    Nov  6 06:31:21 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

    Nov  6 06:31:28: --- last message repeated 18558 times ---

    Nov  6 06:31:28 MAC-23 kernel[0]: nner is not responding"

    Nov  6 06:31:28 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

    Nov  6 06:31:28: --- last message repeated 278 times ---

    Nov  6 06:31:28 MAC-23 kernel[0]: Virex Kext: "Scanner is nVireot rx Kext: espo"Scannendinr is nog"

    Nov  6 06:31:28 MAC-23 kernel[0]: t responding"

    Nov  6 06:31:28 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

    Nov  6 06:31:29: --- last message repeated 4198 times ---

    Nov  6 06:31:29 MAC-23 kernel[0]: Virex Kext: "Scanner is not respondingVirex Kext: "S"

    Nov  6 06:31:29 MAC-23 kernel[0]: canner is not responding"

    Nov  6 06:31:29 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

    Nov  6 06:31:33: --- last message repeated 11438 times ---

    Nov  6 06:31:33 MAC-23 kernel[0]: Virex Kext: "Scanner is not respondinVirex Kext: "Scanner is not responding"

    Nov  6 06:31:33 MAC-23 kernel[0]: g"

    Nov  6 06:31:33 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

    Nov  6 06:31:33: --- last message repeated 71 times ---

    Nov  6 06:31:33 MAC-23 kernel[0]: Virex Kext: "Scanner is

    Nov  6 06:31:33 MAC-23 kernel[0]: Virex Kext: "Scanner is not responding"

     

    Not just one either - got several hundred all being pounded by VirusScan and filling up their hard disks with out-of-control VirusScan logging.

  • Sudeep Garg McAfee SME 51 posts since
    Nov 5, 2009
    Currently Being Moderated
    3. Dec 16, 2010 1:24 AM (in response to TGB)
    Re: Problem with McAfee on MacOS

    Hello,

     

    Are you still seeing this issue?

    It would good to look at McAfeeSecurity.log from /var/log to see what's going on.

    You can attach the log file here for review.

     

    Cheers,

    Sudeep

  • davemuth Newcomer 1 posts since
    Feb 4, 2011

    I'm not having that particular logging problem (too bad we don't have a record of its resolution, or cause).

     

    My logging problem also involves LOTS of messages recorded, but to /var/audit logs.

     

    I'm running Mac OSX 10.6.6, and

    McAfee Security

    Version 1.0.0 Patch 1 (915)

    Anti-malware

    Version: 9.0.0 Patch 1 (4156)

    Hotfix Version: HF622759

    Engine Version: 5400.1158

    DAT Version: 6228.0000

    DAT Creation Date: 1/12/11

     

    My logging problem is that the /var/audit logs get an entry from "McAfee Reporter" every 2 seconds:

     

    header,187,11,readlink(2),0,Sat Feb  5 10:17:37 2011, + 758 msec

    path,/usr/local/McAfee/AntiMalware/var/.Report

    path,/usr/local/McAfee/AntiMalware/var/.Report

    attribute,40777,root,Virex,234881029,841170,0

    subject,mut30225,mut30225,staff,mut30225,staff,203,2327216,50331650,0.0.0.0

    return,failure : Invalid argument,4294967295

    trailer,187

     

    There is nothing in the directory "/usr/local/McAfee/AntiMalware/var/.Report"

     

    The problem has something to do with "GroupName", according to clues in the /var/log/system.log

    (there's nothing special in /var/log/McAfeeSecurity.log, and it happens whether OAS is on or off):

     

    com.apple.SystemStarter[24]: Starting McAfee Agent

    com.mcafee.virusscan.fmp[48]: Starting...

    com.mcafee.virusscan.fmp[48]: VShieldService Started...

    ...

    com.apple.launchd.peruser.502[113] (com.mcafee.menulet): Ignored this key: GroupName

    com.apple.launchd.peruser.502[113] (com.mcafee.reporter): Ignored this key: GroupName

    com.apple.launchd.peruser.502[113] (com.apple.ReportCrash): Falling back to default

      Mach exception handler. Could not find: com.apple.ReportCrash.Self

    ...

    McAfee Reporter[137]: succeded to load the alert window nib

    McAfee Reporter[137]: Reporter: Notificationvalue for map key is not found for fm Id 100

     

  • nordseabash Newcomer 2 posts since
    Nov 4, 2011
    Currently Being Moderated
    5. Nov 4, 2011 12:33 PM (in response to Sudeep Garg)
    Re: Problem with McAfee on MacOS

    I'd like to add a "me, too", and possibly get some follow-up.

     

    We're seeing the same messages (see below) in Console.app's "All Messages" about 50x per second...

    kernel     Virex Kext: "Scanner is not responding".

     

    @sudeepg - I do not see /var/log/McAfeeSecurity.log file.

    However, I do have numerous entries for /usr/local/McAfee/AntiMalware/VShieldScanManager, logged here...

    /Library/Logs/DiagnosticReports/VShieldScanManager_[date time stamp]_localhost.crash.

     

    ### BEGIN LOG SNIPPET... ####

    Process:         VShieldScanManager [5990]

    Path:            /usr/local/McAfee/AntiMalware/VShieldScanManager

    Identifier:      VShieldScanManager

    Version:         ??? (???)

    Code Type:       X86 (Native)

    Parent Process:  launchd [1]

     

    Date/Time:       2011-11-04 09:06:15.538 -0700

    OS Version:      Mac OS X 10.6.8 (10K549)

    Report Version:  6

     

    Exception Type:  EXC_BAD_ACCESS (SIGBUS)

    Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000038

    Crashed Thread:  6

     

    [ SKIPPING TO THREAD 6 ]

    Thread 6 Crashed:

    0   libSystem.B.dylib                       0x90d784cf flockfile + 22

    1   libSystem.B.dylib                       0x90d6e629 fgets + 49

    2   VShieldScanManager                      0x00007aeb TrustedProcesses::refreshTrustedProcessesList() + 119

    3   VShieldScanManager                      0x00003fe6 ScanManager::setTrustedProcesses(void*) + 40

    4   libSystem.B.dylib                       0x90d71259 _pthread_start + 345

    5   libSystem.B.dylib                       0x90d710de thread_start + 34

     

    [ SKIPPING TO THREAD 6 STATE ]

    Thread 6 crashed with X86 Thread State (32-bit):

      eax: 0xb038d000  ebx: 0xb038d000  ecx: 0x90d49e82  edx: 0x00000000

      edi: 0x00000001  esi: 0x00000000  ebp: 0xb038cdc8  esp: 0xb038cdb0

       ss: 0x0000001f  efl: 0x00010282  eip: 0x90d784cf   cs: 0x00000017

       ds: 0x0000001f   es: 0x0000001f   fs: 0x0000001f   gs: 0x00000037

      cr2: 0x00000038

     

    #### END LOG SNIPPET ####

     

     

    Affected clients are Mac OS X 10.6.8 (10K549) w/ the following McAfee product versions...

    McAfee Security

    Version 1.0.0 (676)

    Anti-malware

    Version: 9.0.0 (4012)

    Engine Version: 5400.1158

    DAT Version: 6519.0000

    DAT Creation Date: 11/3/11

     

     

    We have McAfee Security v1.1.0 (1309) for Lion-compatibility, which (on Lion/10.7.2/11C73) does not appear to have this issue/log into Console.

    I will remove McAfee v1.0.0 from our 10.6.8 image, install McAfee v1.1.0, test and report back.

  • daver Newcomer 5 posts since
    Apr 5, 2011
    Currently Being Moderated
    6. Nov 28, 2011 9:52 AM (in response to Qetzlcoatl)
    Re: Problem with McAfee on MacOS

    We're experiencing the same thing, 50+ messages per second:

     

    Virex Kext: "Scanner is not responding"

     

    McAfee Agent 4.5.0.1857, Anti-malware for Mac 9.1.0.4478

     

    running on OSX 10.6.8

  • Sudeep Garg McAfee SME 51 posts since
    Nov 5, 2009
    Currently Being Moderated
    7. Nov 29, 2011 11:21 AM (in response to daver)
    Re: Problem with McAfee on MacOS

    Hello,

     

    Could you please install HF688476 on top of VSMAC9.1 or MSM 1.1 and report back the results?

    There were some changes done in that HF related to performance.

  • daver Newcomer 5 posts since
    Apr 5, 2011
    Currently Being Moderated
    8. Nov 29, 2011 11:45 AM (in response to Sudeep Garg)
    Re: Problem with McAfee on MacOS

    our machines already have applied HF688476

     

    the problem persists, campus-wide, and many are complaining about performance.

     

    McAfeeSecurity.log is spewing this:

     

    Nov 29 12:34:37: --- last message repeated 25 times --- Nov 29 12:34:37 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:35:07: --- last message repeated 29 times --- Nov 29 12:35:07 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:35:37: --- last message repeated 25 times --- Nov 29 12:35:37 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:36:07: --- last message repeated 21 times --- Nov 29 12:36:07 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:36:37: --- last message repeated 29 times --- Nov 29 12:36:37 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:37:07: --- last message repeated 24 times --- Nov 29 12:37:07 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:37:37: --- last message repeated 29 times --- Nov 29 12:37:37 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:38:08: --- last message repeated 22 times --- Nov 29 12:38:08 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:38:38: --- last message repeated 24 times --- Nov 29 12:38:38 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:39:08: --- last message repeated 24 times --- Nov 29 12:39:08 10-96-10-21 McAfee: [53]: *** process 53 exceeded 500 log message per second limit  -  remaining messages this second discarded *** Nov 29 12:39:38: --- last message repeated 29 times ---

  • daver Newcomer 5 posts since
    Apr 5, 2011
    Currently Being Moderated
    9. Nov 29, 2011 12:00 PM (in response to daver)
    Re: Problem with McAfee on MacOS

    When this happens, if I manually kill the /usr/local/McAfee/AntiMalware/VShieldUpdate process, everything calms down.  Eventually it starts happening again though, and the fmpd process seems to go into loops until VShieldUpdate is killed again.

1 2 Previous Next

More Like This

  • Retrieving data ...

Bookmarked By (1)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points