This content has been marked as final. Show 14 replies
Moving this to the enterprise section as more corporate admins are here. Enterprise 7 isn't officially supported by McAfee Technical Support here, but other users may be able to help.
All Mcshield events are stored in the event viewer > app log under MCLOGEVENTS, so you should be able to find at least an error message as to why mcshield is having trouble.
I am betting you have a virus shutting it down. If you had a copy of Bugbear.b come in before you got the 4270 dats it could be shutting it down.
Anyway to check for this virus without the up to date dats? Is there a file or tool I can search for?
Thanks for this good idea ... :-)
Avert Stinger will scan NETWORK shares so it's an awesome tool to run from a workstation ... Run it multiple times to ensure that you've got everything.
AVERT Stinger Standalone tool for major viruses
The good news is I ran stinger and I have no viruses. The bad news is I am still not sure what is causing this problem
All issues when the Shield (when it's not a virus) is stopping it's services (should) write a topic in the eventviewer. Can you have a look at it and send some more information about it (source, eventid, etc).
Here is the error in Event Viewer:
Source: Service Control Manager
The Network Associates McShield service terminated unexpectedly. It has done this 27 time(s). The following corrective action will be taken in 0 milliseconds: No action.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Is there also a 5022 in the neighbourhood? That is the only issue I can find with the enterprise edition not starting.