8 Replies Latest reply on Jan 21, 2013 3:42 PM by Peacekeeper

    McSvHost keeps spamming LAN Port 80

      Hi all,

       

      I am not sure if this is the proper place for this question, but I have McAfee Anti-Virus Plus installed, and McSvHost.exe (located at "C:\Program Files\Common Files\McAfee\McSvHost") seems to keep spamming all machines on the local network that have HTTP servers hosting on port 80.

       

      I am not sure why it does this, but is there a way to get it to stop? It seems to send an HTTP/1.0 request to all open ports at 80 on the network simultaneously immediately after it closes all its connections that send an SYN packet to all LAN machines at port 445 (Microsoft DS) and an SYN packet to my gateway on port 139. This happens roughly ever twelve seconds and is jamming up my HTTP access logs on my webserver.

       

      All connections are over TCP. I would be gratefuly for any help.

       

      -AmanIsDude

        • 1. Re: McSvHost keeps spamming LAN Port 80
          Peacekeeper

          Ok this a tad above me so two suggestions

          1. tell us what version of mcafee you have is it home or enterprise and exact version numbers please

          2. If home contact technical support via the link in useful links tab above  and see if they can help. Nearly  sure you may have to ask for an escalation return call.

           

          Message was edited by: Peacekeeper on 17/08/11 7:09:27 PM
          • 2. Re: McSvHost keeps spamming LAN Port 80
            dougr_t3_support

            This could be a component of Home Network Defense, but it sounds excessive. Let me ask one of the developers and I will get back to you.

             

            Thanks,

            • 3. Re: McSvHost keeps spamming LAN Port 80

              Peacekeeper,

               

              Thank you for your response. Here's the information you requested I post:

               

              1. I am using McAfee Anti-Virus Plus, which includes the following components:

               

              • McAfee Security Center
                • Version: 10.5
                • Build: 10.5.240
                • AffId: 662-1
                • Language: en-us
                • Last Update: 7/26/2011

               

              • McAfee VirusScan
                • Version: 14.5
                • Build: 14.5.130
                • Last Update: 8/17/2011
                • DAT Version: 6440
                • DAT Creation Date: 8/16/2011
                • Engine Version: 5400.1158

               

              • McAfee Personal Firewall
                • Version: 11.5
                • Build: 11.5.141
                • Last Update: 12/15/2010

               

              • McAfee SiteAdvisor
                • Version: 3.3
                • Build: 3.3.1.133
                • AffId: 662-1
                • Language: en-us
                • Last Update: 4/27/2011

               

              • McAfee QuickClean and Shredder
                • Version: 10.5
                • Build: 10.5.111
                • Last Update: 12/25/2010

               

                   As for McSvHost.exe and other possible files involved, the details from their properties are as follow:

               

              • McSvHost.exe
                • File Location: C:\Program Files\Common Files\McAfee\McSvcHost
                • File Description: McAfee Service Host
                • Type: Application
                • File Version: 1.5.109.0
                • Product Name: McAfee Integrated Security Platform
                • Product Version 1.5.0.0
                • Copyright: Copyright © 2010 McAfee, Inc.
                • Size: 347 KB
                • Date Modified: 3/10/2010 9:14 AM
                • Language: English (Unted States)
                • Original Filename: McSvHost.exe

               

              • McSvHVer.dll
                • File Location: C:\Program Files\Common Files\McAfee\McSvcHost
                • File Description: McAfee Service Host
                • Type: Application Extension
                • File Version: 1.5.109.0
                • Product Name: McAfee Integrated Security Platform
                • Product Version 1.5.0.0
                • Copyright: Copyright © 2010 McAfee, Inc.
                • Size: 267 KB
                • Date Modified: 3/10/2010 9:14 AM
                • Language: English (Unted States)
                • Original Filename: McSvHVer.dll

               

              • McSHInst.dll
                • File Location: C:\Program Files\Common Files\McAfee\McSvcHost
                • File Description: McAfee Service Host Installer
                • Type: Application extension
                • File Version: 1.5.109.0
                • Product Name: McAfee Integrated Security Platform
                • Product Version 1.5.0.0
                • Copyright: Copyright © 2010 McAfee, Inc.
                • Size: 215 KB
                • Date Modified: 3/10/2010 9:14 AM
                • Language: English (Unted States)
                • Original Filename: McSHInst.dll

               

              • McSvcHost64.inf
                • File Location: C:\Program Files\Common Files\McAfee\McSvcHost
                • Name: McSvcHost64.inf
                • Type: Setup Information
                • Folder Path: C:\Program Files\Common Files\McAfee\McSvcHost
                • Size: 1.96 KB
                • Date Created: 10/20/2010 11:25 PM
                • Date Modified: 3/10/2010 9:35 AM
                • Attributes: A
                • Owner: Administrators
                • Computer: XXXX (this computer)

               

                   If there is any more information I should include, please don't hesitate to ask. ^_^

               

               

              2. Thank you. I will try this if I receive no productive response within the next few days. This appears to be a highly technical issue, not simply just a problem with user settings, so I'm hoping that McAfee software experts, who are usually more accessible via written media, will be more accessible through the forum community.

               

              Also, one form of this problem or another seems to have been going on for some time (see https://community.mcafee.com/message/202430), so I figured it'd be best to have this noted in a publicly accessible domain.

               

              Thanks, again, for your response!

               

              -AmanIsDude

               

              Message was edited by: amanisdude on 8/17/11 5:16:31 PM CDT

               

              Message was edited by: amanisdude on 8/17/11 5:27:04 PM CDT
              • 4. Re: McSvHost keeps spamming LAN Port 80

                Thank you for your response, Doug! I am so glad this drew the attention of a Senior Engineer!

                 

                It would be very helpful if a developer took a look at this. Unnecessary traffic on highly trafficked networks can cause service disruptions, especially if the gateway is sensitive to repetitious activitiy.  Furthermore, this problem has been going on since last year, and it appears that I am not the only one affected by it. (See https://community.mcafee.com/message/202430.)

                 

                Thank you for any help and insight you can provide.

                 

                -AmanIsDude

                • 5. Re: McSvHost keeps spamming LAN Port 80

                  ok, pulling up an old thread, but I'm seeing the same behavior.  Was there any resolve?

                   

                  john

                  • 6. Re: McSvHost keeps spamming LAN Port 80
                    Peacekeeper

                    I am not aware of a fix tho we now are at 12.1 so what version of Mcafee have you got running?

                     

                    amanisdude did you get a solution?

                    • 7. Re: McSvHost keeps spamming LAN Port 80

                      SecurityCenter 11.6

                      VirusScan 15.6

                      Personal Firewall 12.6

                       

                       

                      Thanks

                      john

                      • 8. Re: McSvHost keeps spamming LAN Port 80
                        Peacekeeper

                        Word is 12.1 far better so should not happen. Maybe best to uninstall 11.6 and reinstall 12.1 from the US or UK server.

                        http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS101331

                        reboot

                        run

                        http://download.mcafee.com/products/licensed/cust_support_patches/Mcpreinstall.e xe

                        and reinstall from your account

                         

                        Let us know if issue still there.