This is saying that lsass.exe tried to terminate frameworkservice.exe, but was blocked from so doing.
1 of 1 people found this helpful
Thanks for your valuable answer i have one more query
So the lsaas.exe is trying to stop the freamework service from this i wants to know McAfee blocked the lsaas.exe else mcafee blocked the lsaas.exe action(tried to terminate the framework service)
Sorry, I'm afraid I don't understand the question - could you clarify?
Probably the lsass.exe process only "probed" the frameworkservice.exe withTerminate privileges, it doesn't necessarily mean that lsass.exe in reality tried to terminate the service.
The KB below describes a similar issue with ccmexec.exe.
As per McAfee default "/system32/lsass.exe" is on the excluded processes list for this Access Protection rule.